last executing test programs: 1.661096304s ago: executing program 4 (id=2331): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000000000034000"}}}]}, 0x48}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) 1.577520971s ago: executing program 4 (id=2333): pipe2(&(0x7f0000000080), 0x800) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) add_key(&(0x7f0000000100)='big_key\x00', 0x0, &(0x7f0000002b40), 0x0, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0xe02) add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/130, 0x82}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000d40)=""/113, 0x71}, {&(0x7f0000000f00)=""/119, 0x77}], 0x4, 0x7e11a42f, 0x3) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xffffffffffffffaf}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000dc0)={0x3, 0x80, 0x8, 0xe6, 0x0, 0xd2, 0x0, 0xa06b, 0x0, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x8000000000000001, 0x867}, 0x0, 0x8, 0x6, 0x5, 0x8000, 0x32571e20, 0xfe00, 0x0, 0x8113, 0x0, 0x8000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9fa1, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xb, 0xffffffffffffffff, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c745f72000000000000000000000000000000000000000024710000000004"], &(0x7f0000000100)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 1.483135489s ago: executing program 2 (id=2334): signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) socket$packet(0x11, 0x0, 0x300) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x21) 1.264648876s ago: executing program 2 (id=2336): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioperm(0x0, 0x444, 0x1) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 1.229244459s ago: executing program 4 (id=2337): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYBLOB="4ff06afa83981d9ca59b38c3e4e6cc3d0d7e355e003f1c31e5339f903b5adc3a23dd43de867d197725b663c8a3726be8be710981", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0xd, 0x2aa, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="050000a2000000006b113e0071a43fe6058ce4dd6c67438bf67416020000000085100000020000008500000005e300000af50c1b6a63280f9b9a2a83203e71f860c149328fabf8e6701fb207a4892c305b0edb8f0fce371127b3b28539e15348dd24ae4ab73d160f79778ac2ad02afa7d158c18d0eec91105dd0bedaacecb8bfe31686661f8271269c8927"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000400)={[{@resuid}]}, 0xff, 0x490, &(0x7f0000000f40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x4c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001cc0)={0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x36, 0x0, &(0x7f00000004c0)="348b0d151f8218e2c73697e4080049c416b90900000093321cfc5e8b99005e8b9900683341b35e6d127629920e3e29968c6449b22ccc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x19, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000005f0abb000104000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000001000000075d5302070000001800000001000000000000000100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000c529000008000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80000, 0x3, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1.22245938s ago: executing program 2 (id=2339): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000140)=""/162, 0xa2, 0x2040, &(0x7f0000000300)=@l2={0x1f, 0x6, @none, 0x9, 0x2}, 0x80) open(&(0x7f00000000c0)='./bus\x00', 0x125342, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 1.112192539s ago: executing program 3 (id=2340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x16d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0xb, 0x0, &(0x7f0000000040)) 1.111685839s ago: executing program 4 (id=2341): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mknod$loop(0x0, 0x1000000000006005, 0x1) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x32f, &(0x7f00000008c0)="$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") 1.056746054s ago: executing program 3 (id=2342): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000bb0000000000010060000c00060001"], 0x3c}}, 0x0) 1.044275984s ago: executing program 2 (id=2343): write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x20000d0) (async) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) (async) modify_ldt$write2(0x11, &(0x7f0000000280), 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001800000000000000000000000a00140000000009000900001ecc7bbcdbc298ff6ccb53f4cb536f87673bf743bd3f205af285a2a74a19021d5adfab780db18ec9df6ce11ee7c5e5d1739a98abd20f404759f31a3caec436305d23cfa4c678161d25f0991d486d94fe3fe2860afb61df300b7e997d4e1b6d2022727ff15a97064a386e0e57cb41b4a3f0cc4deb25b20af44bd0e01b11e6beebfd41"], 0x1c}}, 0x0) (async) syz_emit_ethernet(0x101, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 935.057563ms ago: executing program 4 (id=2344): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) dup3(r1, r2, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r4 = syz_open_pts(0xffffffffffffffff, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x12) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x49bf, &(0x7f0000000080)={0x0, 0x6cde, 0x8, 0x0, 0x18f}, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_setup(0x17ba, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r7}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x200101, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x1000}]}) 813.496803ms ago: executing program 2 (id=2345): signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) socket$packet(0x11, 0x0, 0x300) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x21) 813.225383ms ago: executing program 3 (id=2346): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x5453, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) write$tun(r2, 0x0, 0xfdef) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80e85411, &(0x7f00000022c0)) 791.561295ms ago: executing program 3 (id=2348): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000018119eb5e862399a2ed3a7e12f0000000000000000000000425c7fcb9463729a2a62392bd60eba02c1e8e6e3feffffff7f15e0ce1f6dcee9a90f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0x9, 0x2, 0xa12}) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb00af1e008000"}) 789.567815ms ago: executing program 0 (id=2268): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002900)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000320000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 764.497017ms ago: executing program 0 (id=2349): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d430a8b089b3f363563034f90e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000185802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b5002895ae7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe67380e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f072ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0528c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58cba1118e32126596e1cd7655b904801784c416b22133d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830053fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279f07000000935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c71552439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e501000000b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00", 0xffffff96}}, 0x1006) 700.456612ms ago: executing program 3 (id=2352): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x27, 0x0, 0x2, 0x6, 0x0, 0x4, 0x20, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x5}, 0x8, 0x9, 0x3, 0x2, 0x3, 0x7, 0x3, 0x0, 0x5, 0x0, 0x61a1}, 0x0, 0xc, r1, 0x9) listen(r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 657.624546ms ago: executing program 1 (id=2353): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mknod$loop(0x0, 0x1000000000006005, 0x1) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x32f, &(0x7f00000008c0)="$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") 657.350006ms ago: executing program 0 (id=2354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) lseek(r0, 0x0, 0x3) 649.216517ms ago: executing program 0 (id=2355): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 567.672393ms ago: executing program 2 (id=2356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000010000304000000000000000000000000944278e17cb9bd198d744c864263fde76670718495c98069befa2ca0d6e9743e252c52cb8258c266b6e3d6e58e91dcf3cf46829ba8b01481ba72eb20060b4bf6354b6696dd74880be64e0e12e5da01c75c8496e988a98d96b30f725694b88004510000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006d6163736563000020000280050007000000000005000b0004000000300001000b00000000000000"], 0x50}, 0x1, 0xba01}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x2, 0x0, 0x10000, 0x10, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0x7, 0x8, 0xc, 0xfffffff7, {{0x36, 0x4, 0x2, 0xf, 0xd8, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xea, 0x0, 0x0, [0x13c9, 0x7ff0000, 0x3, 0x1, 0x9, 0x9]}, @cipso={0x86, 0x66, 0x0, [{0x5, 0x5, "efab15075310de"}, {0x6, 0x6, "0b5dca28"}, {0x6, 0x9, "1934fa03bccb6e"}, {0x1, 0x2}, {0x2, 0x10, "fb464fe1e2044aaf56cba7bc2393"}, {0x0, 0x3, "19"}, {0x6, 0x12, "8fca59f4bfb10b230100a617d3f8bf09"}, {0x7, 0x12, "e1b8328eada9a5eb3e778cf977b1e983"}, {0x7, 0xf, "0e5932a8203b4bb95c46f84efb"}]}, @lsrr={0x83, 0x17, 0xca, [@multicast2, @remote, @private=0xa010100, @multicast2, @private=0xa010101]}, @timestamp_prespec={0x44, 0x24, 0xb2, 0x3, 0x8, [{@remote, 0x9}, {@multicast1, 0xfce3}, {@broadcast, 0xb}, {@loopback, 0x5}]}]}}}}}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getpeername$l2tp6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000780)={@mcast2}, &(0x7f0000000880)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x34, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x372}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x76}, {&(0x7f00000007c0)=""/154, 0x129}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = creat(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) io_uring_setup(0x32a2, &(0x7f0000000d00)={0x0, 0x4000, 0x27291067814f9f49, 0x0, 0x392}) r7 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)='}', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1}}], 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x90) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000b00)}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)='q', 0x1}], 0x1}}], 0x2, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r12 = socket$netlink(0x10, 0x3, 0x4) write(r12, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) setsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000180)=0xc, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, r13, 0x1, 0x0, 0x2}, 0x48) 509.509728ms ago: executing program 3 (id=2357): syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000000000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x33, 0x0, 0x1}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0xf, 0x3f, 0x2}]}) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x400c885) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r2}) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', '', [{}, {0x20, 'GPL\x00'}], 0xa, "7eca06d6"}, 0xe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 375.173399ms ago: executing program 1 (id=2358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 370.53648ms ago: executing program 0 (id=2359): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000320000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 335.107812ms ago: executing program 1 (id=2360): unshare(0x68040200) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000894}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x0, 0x1, 'syz0\x00'}}], {0x14}}, 0xffc3}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0xb2, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x26}}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8b040400000000002800128008000100677470001c000280080001"], 0x48}}, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x1c9442, 0x0) ftruncate(r6, 0x200002) r7 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x80) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r8, r7, 0x0, 0x80001d00c0d0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f00000003c0)={0x2, 0x64, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000000000000007000000071b08e000000100000000ac1414bb7f000001ac1414aa000000004001000000"], 0x30}}], 0x1, 0x0) memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r9, 0xffff9000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xce23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) 333.982052ms ago: executing program 0 (id=2361): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 185.657855ms ago: executing program 1 (id=2362): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) io_submit(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000680007f9fe000000000000000a000000000000000800010002000000040004"], 0x24}}, 0x0) 183.161355ms ago: executing program 1 (id=2363): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x29, 0x6, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffe}]}}]}, 0x40}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 63.860985ms ago: executing program 4 (id=2364): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001900110000000000000000001d010000150004"], 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x9d, &(0x7f0000000000)=""/157}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='rxrpc_abort\x00'}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semop(r2, &(0x7f0000002180)=[{0x0, 0x4}, {}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) ftruncate(0xffffffffffffffff, 0xfb) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22000600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000000000000000000002800000006000400a2aa000006000400a2aa000008000200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) socket$inet_dccp(0x2, 0x6, 0x0) 0s ago: executing program 1 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x4, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x57) mknod$loop(0x0, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x7b9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x1, 0x7}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x0, 0x4, 0x9}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xa, 0x3, &(0x7f00000000c0)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x2c}}, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x82100, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendfile(r2, r6, &(0x7f0000000840), 0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1f, &(0x7f0000000640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x1, 0x1, 0x6, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @cb_func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r8], &(0x7f0000000740)=[{0x5, 0x0, 0xb, 0x3}, {0x2, 0x1, 0x9, 0x4}, {0x1, 0x2, 0x9, 0x2}, {0x2, 0x1, 0xc, 0x8}], 0x10, 0x692}, 0x90) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) kernel console output (not intermixed with test programs): performance. Setting the MTU to 1560 would solve the problem. [ 93.626004][ T6891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.668168][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.675231][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.701200][ T6891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.730355][ T6891] hsr_slave_0: entered promiscuous mode [ 93.740085][ T6891] hsr_slave_1: entered promiscuous mode [ 93.747444][ T6891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.755134][ T6891] Cannot create hsr debugfs directory [ 93.857392][ T7081] FAULT_INJECTION: forcing a failure. [ 93.857392][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.870516][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.2.1102 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 93.881224][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.891437][ T7081] Call Trace: [ 93.894738][ T7081] [ 93.897698][ T7081] dump_stack_lvl+0xf2/0x150 [ 93.902415][ T7081] dump_stack+0x15/0x20 [ 93.906618][ T7081] should_fail_ex+0x229/0x230 [ 93.911433][ T7081] should_fail+0xb/0x10 [ 93.915720][ T7081] should_fail_usercopy+0x1a/0x20 [ 93.920789][ T7081] copy_fpstate_to_sigframe+0x575/0x720 [ 93.926366][ T7081] ? copy_fpstate_to_sigframe+0xde/0x720 [ 93.932031][ T7081] ? dequeue_signal+0x29f/0x430 [ 93.936941][ T7081] ? fpu__alloc_mathframe+0x95/0xd0 [ 93.942174][ T7081] get_sigframe+0x295/0x350 [ 93.946706][ T7081] x64_setup_rt_frame+0xa7/0x570 [ 93.951708][ T7081] arch_do_signal_or_restart+0x287/0x4b0 [ 93.957484][ T7081] syscall_exit_to_user_mode+0x59/0x130 [ 93.963159][ T7081] do_syscall_64+0xd6/0x1c0 [ 93.967706][ T7081] ? clear_bhb_loop+0x55/0xb0 [ 93.972449][ T7081] ? clear_bhb_loop+0x55/0xb0 [ 93.977218][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.983157][ T7081] RIP: 0033:0x7f69ea0b73b7 [ 93.987604][ T7081] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 94.007308][ T7081] RSP: 002b:00007f69e8d37048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.015780][ T7081] RAX: 0000000000000001 RBX: 00007f69ea245f80 RCX: 00007f69ea0b73b9 [ 94.023755][ T7081] RDX: 00000000fffffecc RSI: 0000000020000240 RDI: 0000000000000003 [ 94.031819][ T7081] RBP: 00007f69e8d370a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.039796][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.047818][ T7081] R13: 000000000000000b R14: 00007f69ea245f80 R15: 00007fffb87d77f8 [ 94.055799][ T7081] [ 94.280942][ T29] audit: type=1326 audit(1722549217.470:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.2.1116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ea0b73b9 code=0x0 [ 94.759614][ T6891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.780397][ T6891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.792922][ T6891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.807167][ T6891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.861455][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.878857][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.895582][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.902858][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.918436][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.925608][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.966854][ T6891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.977338][ T6891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.188601][ T6891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.379505][ T6891] veth0_vlan: entered promiscuous mode [ 95.394447][ T6891] veth1_vlan: entered promiscuous mode [ 95.416002][ T6891] veth0_macvtap: entered promiscuous mode [ 95.425420][ T6891] veth1_macvtap: entered promiscuous mode [ 95.449495][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.460062][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.470332][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.481053][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.491075][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.502121][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.512211][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.522729][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.534837][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.543222][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.553899][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.563814][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.574406][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.584383][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.594931][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.604902][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.615423][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.627630][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.643934][ T6891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.652898][ T6891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.662017][ T6891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.670946][ T6891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.752338][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 95.770098][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'. [ 95.866652][ T7324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.146194][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 96.160180][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 96.201301][ T7369] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.392026][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 96.405307][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'. [ 96.453786][ T7410] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.676419][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 96.687497][ T7432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1185'. [ 96.735486][ T7437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.898258][ T7462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.914574][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 96.926356][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1198'. [ 97.060552][ T7484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.141187][ T7491] veth1_virt_wifi: entered promiscuous mode [ 97.151909][ T7491] ip6gretap0: entered promiscuous mode [ 97.250547][ T7516] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.469481][ T7548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.753348][ T7574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.079136][ T7602] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.211561][ T7613] veth1_virt_wifi: entered promiscuous mode [ 98.220327][ T7613] ip6gretap0: entered promiscuous mode [ 98.229849][ T7613] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 98.240066][ T7613] Cannot create hsr debugfs directory [ 98.452801][ T7627] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 98.585763][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 98.585783][ T29] audit: type=1326 audit(1722549221.770:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eb22773b9 code=0x0 [ 99.311268][ T7660] veth1_virt_wifi: entered promiscuous mode [ 99.319621][ T7660] ip6gretap0: entered promiscuous mode [ 99.326534][ T7660] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 99.334167][ T7660] Cannot create hsr debugfs directory [ 99.456650][ T29] audit: type=1400 audit(1722549222.640:679): avc: denied { ioctl } for pid=7679 comm="syz.3.1293" path="socket:[23010]" dev="sockfs" ino=23010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.573742][ T29] audit: type=1326 audit(1722549222.760:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.0.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6358673b9 code=0x0 [ 99.706825][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 99.744695][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.752047][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.759445][ T7694] bridge_slave_0: entered allmulticast mode [ 99.766379][ T7694] bridge_slave_0: entered promiscuous mode [ 99.773314][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.780472][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.787814][ T7694] bridge_slave_1: entered allmulticast mode [ 99.794925][ T7694] bridge_slave_1: entered promiscuous mode [ 99.815881][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.826631][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.848679][ T7694] team0: Port device team_slave_0 added [ 99.855477][ T7694] team0: Port device team_slave_1 added [ 99.874085][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.881136][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.907212][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.911212][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.924880][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.951117][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.984949][ T7694] hsr_slave_0: entered promiscuous mode [ 99.991315][ T7694] hsr_slave_1: entered promiscuous mode [ 99.997397][ T7694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.005019][ T7694] Cannot create hsr debugfs directory [ 100.096287][ T7694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.525058][ T29] audit: type=1326 audit(1722549223.710:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.0.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6358673b9 code=0x0 [ 101.071829][ T7794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.463146][ T7694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.508720][ T7694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.569550][ T7694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.618543][ T7013] bridge_slave_1: left allmulticast mode [ 101.624290][ T7013] bridge_slave_1: left promiscuous mode [ 101.630028][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.637685][ T7013] bridge_slave_0: left allmulticast mode [ 101.643330][ T7013] bridge_slave_0: left promiscuous mode [ 101.649092][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.691837][ T7013] ip6gretap0 (unregistering): left promiscuous mode [ 101.748942][ T7013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.760972][ T7013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.771855][ T7013] bond0 (unregistering): Released all slaves [ 101.797741][ T7694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.807434][ T7818] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.823505][ T7694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.833807][ T7694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.843574][ T7694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.856566][ T7013] veth1_virt_wifi: left promiscuous mode [ 101.865549][ T7013] hsr_slave_0: left promiscuous mode [ 101.871667][ T7013] hsr_slave_1: left promiscuous mode [ 101.877890][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.885357][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.893217][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.900766][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.910213][ T7013] veth1_macvtap: left promiscuous mode [ 101.916033][ T7013] veth0_macvtap: left promiscuous mode [ 101.916094][ T7013] veth1_vlan: left promiscuous mode [ 101.916129][ T7013] veth0_vlan: left promiscuous mode [ 102.016979][ T7013] team0 (unregistering): Port device team_slave_1 removed [ 102.028782][ T7013] team0 (unregistering): Port device team_slave_0 removed [ 102.108231][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.121887][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.132314][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.139434][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.152626][ T29] audit: type=1326 audit(1722549225.340:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.1352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ea0b73b9 code=0x0 [ 102.183599][ T7694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.194021][ T7694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.201537][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.211594][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.275391][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.295634][ T7847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.407948][ T7694] veth0_vlan: entered promiscuous mode [ 102.416799][ T7694] veth1_vlan: entered promiscuous mode [ 102.434089][ T7694] veth0_macvtap: entered promiscuous mode [ 102.442163][ T7694] veth1_macvtap: entered promiscuous mode [ 102.453563][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.464129][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.474009][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.484754][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.494772][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.505444][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.515326][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.526177][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.537669][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.549235][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.559839][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.569841][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.580388][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.590295][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.600925][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.611256][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.621745][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.632926][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.641223][ T7879] __nla_validate_parse: 14 callbacks suppressed [ 102.641238][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 102.658309][ T7883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.677730][ T7694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.686524][ T7694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.695267][ T7694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.704980][ T7694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783925][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1298'. [ 102.793077][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1298'. [ 102.805495][ T7900] veth1_virt_wifi: entered promiscuous mode [ 102.813276][ T7900] ip6gretap0: entered promiscuous mode [ 102.820084][ T7900] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 102.827868][ T7900] Cannot create hsr debugfs directory [ 102.909133][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 102.986783][ T29] audit: type=1326 audit(1722549226.170:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.1386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86778873b9 code=0x0 [ 103.009962][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1378'. [ 103.111977][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 103.121019][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 103.259945][ T29] audit: type=1326 audit(1722549226.450:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.3.1398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0502d973b9 code=0x0 [ 103.302743][ T7964] netlink: 'syz.1.1400': attribute type 3 has an invalid length. [ 103.310572][ T7964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1400'. [ 103.360955][ T7976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.434814][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1406'. [ 103.443970][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1406'. [ 103.454804][ T7982] veth1_virt_wifi: entered promiscuous mode [ 103.461573][ T7982] ip6gretap0: entered promiscuous mode [ 103.468276][ T7982] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 103.476007][ T7982] Cannot create hsr debugfs directory [ 103.622658][ T29] audit: type=1400 audit(1722549226.810:685): avc: denied { bind } for pid=7997 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.940540][ T8025] FAULT_INJECTION: forcing a failure. [ 103.940540][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 103.953291][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.4.1416 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 103.964029][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 103.974119][ T8025] Call Trace: [ 103.977425][ T8025] [ 103.980366][ T8025] dump_stack_lvl+0xf2/0x150 [ 103.985110][ T8025] dump_stack+0x15/0x20 [ 103.989374][ T8025] should_fail_ex+0x229/0x230 [ 103.994165][ T8025] ? vm_area_alloc+0x2c/0x130 [ 103.998968][ T8025] should_failslab+0x8f/0xb0 [ 104.003759][ T8025] kmem_cache_alloc_noprof+0x4c/0x290 [ 104.009158][ T8025] vm_area_alloc+0x2c/0x130 [ 104.013885][ T8025] mmap_region+0x88b/0x1620 [ 104.018519][ T8025] ? security_mmap_addr+0x4c/0x70 [ 104.023607][ T8025] ? __get_unmapped_area+0x2d1/0x300 [ 104.028935][ T8025] do_mmap+0x72a/0xb70 [ 104.033182][ T8025] ? security_mmap_file+0x128/0x150 [ 104.038407][ T8025] vm_mmap_pgoff+0x133/0x290 [ 104.043096][ T8025] ksys_mmap_pgoff+0xd0/0x340 [ 104.047793][ T8025] ? fpregs_assert_state_consistent+0x83/0xa0 [ 104.053897][ T8025] x64_sys_call+0x1940/0x2e00 [ 104.058596][ T8025] do_syscall_64+0xc9/0x1c0 [ 104.063146][ T8025] ? clear_bhb_loop+0x55/0xb0 [ 104.067872][ T8025] ? clear_bhb_loop+0x55/0xb0 [ 104.072607][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.078561][ T8025] RIP: 0033:0x7f86778873f3 [ 104.083043][ T8025] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 104.102683][ T8025] RSP: 002b:00007f8676506e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.111129][ T8025] RAX: ffffffffffffffda RBX: 00000000000004e8 RCX: 00007f86778873f3 [ 104.119120][ T8025] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 104.127127][ T8025] RBP: 00000000200006c2 R08: 00000000ffffffff R09: 0000000000000000 [ 104.135100][ T8025] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000b [ 104.143136][ T8025] R13: 00007f8676506f00 R14: 00007f8676506ec0 R15: 0000000020000400 [ 104.151119][ T8025] [ 104.352506][ T29] audit: type=1400 audit(1722549227.540:686): avc: denied { map } for pid=8076 comm="syz.2.1426" path="socket:[25700]" dev="sockfs" ino=25700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.542690][ T29] audit: type=1326 audit(1722549227.730:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.4.1430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86778873b9 code=0x0 [ 104.578662][ T29] audit: type=1400 audit(1722549227.770:688): avc: denied { getopt } for pid=8111 comm="syz.2.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.629289][ T8125] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.648239][ T8112] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 104.881681][ T8156] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.148291][ T8160] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.193285][ T8162] netlink: zone id is out of range [ 105.198504][ T8162] netlink: zone id is out of range [ 105.203647][ T8162] netlink: zone id is out of range [ 105.572149][ T8188] FAULT_INJECTION: forcing a failure. [ 105.572149][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 105.584959][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.4.1451 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 105.595648][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 105.605818][ T8188] Call Trace: [ 105.609185][ T8188] [ 105.612143][ T8188] dump_stack_lvl+0xf2/0x150 [ 105.616775][ T8188] dump_stack+0x15/0x20 [ 105.621044][ T8188] should_fail_ex+0x229/0x230 [ 105.625813][ T8188] ? vm_area_dup+0x2c/0x130 [ 105.630418][ T8188] should_failslab+0x8f/0xb0 [ 105.635057][ T8188] kmem_cache_alloc_noprof+0x4c/0x290 [ 105.640547][ T8188] vm_area_dup+0x2c/0x130 [ 105.644902][ T8188] copy_mm+0x60b/0x10e0 [ 105.649078][ T8188] copy_process+0xee1/0x1f90 [ 105.653823][ T8188] kernel_clone+0x167/0x5e0 [ 105.658341][ T8188] ? vfs_write+0x5a5/0x900 [ 105.662806][ T8188] __x64_sys_clone+0xe8/0x120 [ 105.667582][ T8188] x64_sys_call+0x2dc4/0x2e00 [ 105.672296][ T8188] do_syscall_64+0xc9/0x1c0 [ 105.676913][ T8188] ? clear_bhb_loop+0x55/0xb0 [ 105.681613][ T8188] ? clear_bhb_loop+0x55/0xb0 [ 105.686380][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.692304][ T8188] RIP: 0033:0x7f86778873b9 [ 105.696804][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.716677][ T8188] RSP: 002b:00007f86764c4ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 105.725184][ T8188] RAX: ffffffffffffffda RBX: 00007f8677a16130 RCX: 00007f86778873b9 [ 105.733169][ T8188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028a0d200 [ 105.741238][ T8188] RBP: 00007f86764c50a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.749223][ T8188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 105.757299][ T8188] R13: 000000000000006e R14: 00007f8677a16130 R15: 00007ffd745ecee8 [ 105.765380][ T8188] [ 106.101005][ T29] audit: type=1400 audit(1722549229.290:689): avc: denied { getattr } for pid=8205 comm="syz.3.1464" laddr=ff01::1 lport=45553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.161721][ T29] audit: type=1326 audit(1722549229.350:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8207 comm="syz.0.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6358673b9 code=0x0 [ 106.349399][ T8231] net_ratelimit: 133 callbacks suppressed [ 106.349418][ T8231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.361028][ T29] audit: type=1400 audit(1722549229.550:691): avc: denied { override_creds } for pid=8232 comm="syz.4.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.453940][ T29] audit: type=1326 audit(1722549229.640:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.2.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ea0b73b9 code=0x0 [ 106.477811][ T29] audit: type=1326 audit(1722549229.670:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.2.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ea0b73b9 code=0x0 [ 106.561891][ T8252] syzkaller1: entered promiscuous mode [ 106.564289][ T8255] xt_limit: Overflow, try lower: 0/0 [ 106.567488][ T8252] syzkaller1: entered allmulticast mode [ 106.638278][ T8266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.837882][ T8277] block device autoloading is deprecated and will be removed. [ 107.480908][ T8295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.723281][ T8320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.968567][ T8328] __nla_validate_parse: 10 callbacks suppressed [ 107.968586][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 108.171379][ T8343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.298187][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 108.515424][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 108.683736][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 108.855658][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'. [ 108.895964][ T8430] loop0: detected capacity change from 0 to 512 [ 108.908598][ T8430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 108.921605][ T8430] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.949238][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.109501][ T29] audit: type=1400 audit(1722549232.300:694): avc: denied { name_connect } for pid=8450 comm="syz.0.1570" dest=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 109.210256][ T8463] FAULT_INJECTION: forcing a failure. [ 109.210256][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.223382][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.2.1576 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 109.234192][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 109.244274][ T8463] Call Trace: [ 109.247648][ T8463] [ 109.250603][ T8463] dump_stack_lvl+0xf2/0x150 [ 109.255235][ T8463] dump_stack+0x15/0x20 [ 109.259482][ T8463] should_fail_ex+0x229/0x230 [ 109.264201][ T8463] should_fail+0xb/0x10 [ 109.268541][ T8463] should_fail_usercopy+0x1a/0x20 [ 109.273612][ T8463] _copy_from_user+0x1e/0xd0 [ 109.278254][ T8463] __x64_sys_rt_sigsuspend+0x6e/0xe0 [ 109.284132][ T8463] x64_sys_call+0x1f8d/0x2e00 [ 109.288873][ T8463] do_syscall_64+0xc9/0x1c0 [ 109.293464][ T8463] ? clear_bhb_loop+0x55/0xb0 [ 109.298180][ T8463] ? clear_bhb_loop+0x55/0xb0 [ 109.303048][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.308988][ T8463] RIP: 0033:0x7f69ea0b73b9 [ 109.313419][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.333143][ T8463] RSP: 002b:00007f69e8d37048 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 109.341754][ T8463] RAX: ffffffffffffffda RBX: 00007f69ea245f80 RCX: 00007f69ea0b73b9 [ 109.349771][ T8463] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000040 [ 109.357766][ T8463] RBP: 00007f69e8d370a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.365769][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.373760][ T8463] R13: 000000000000000b R14: 00007f69ea245f80 R15: 00007fffb87d77f8 [ 109.381767][ T8463] [ 109.400608][ T29] audit: type=1400 audit(1722549232.590:695): avc: denied { write } for pid=8467 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.420176][ T8468] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1577'. [ 109.441020][ T8468] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1577'. [ 109.450250][ T8468] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1577'. [ 109.459876][ T8469] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1577'. [ 109.470410][ T8469] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1577'. [ 109.871920][ T29] audit: type=1400 audit(1722549233.060:696): avc: denied { create } for pid=8526 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 109.893485][ T29] audit: type=1400 audit(1722549233.060:697): avc: denied { sys_admin } for pid=8526 comm="syz.1.1601" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 109.946362][ T29] audit: type=1400 audit(1722549233.130:698): avc: denied { getopt } for pid=8530 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.008416][ T29] audit: type=1400 audit(1722549233.150:699): avc: denied { getopt } for pid=8533 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.053002][ T8558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 110.116173][ T29] audit: type=1400 audit(1722549233.300:700): avc: denied { execute_no_trans } for pid=8563 comm="syz.3.1614" path="/35/file1" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.167851][ T29] audit: type=1400 audit(1722549233.350:701): avc: denied { listen } for pid=8567 comm="syz.2.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.187430][ T29] audit: type=1326 audit(1722549233.360:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.4.1610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86778873b9 code=0x0 [ 110.222576][ T29] audit: type=1400 audit(1722549233.410:703): avc: denied { ioctl } for pid=8563 comm="syz.3.1614" path="socket:[27821]" dev="sockfs" ino=27821 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.328661][ T8594] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.730379][ T8605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 110.871144][ T8620] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 110.888295][ T8620] batman_adv: batadv0: Adding interface: team0 [ 110.894513][ T8620] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.919880][ T8620] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.943956][ T8622] FAULT_INJECTION: forcing a failure. [ 110.943956][ T8622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.957497][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.2.1631 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 110.968203][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 110.978351][ T8622] Call Trace: [ 110.981692][ T8622] [ 110.984631][ T8622] dump_stack_lvl+0xf2/0x150 [ 110.989335][ T8622] dump_stack+0x15/0x20 [ 110.993506][ T8622] should_fail_ex+0x229/0x230 [ 110.998284][ T8622] should_fail+0xb/0x10 [ 111.002552][ T8622] should_fail_usercopy+0x1a/0x20 [ 111.007686][ T8622] _copy_from_user+0x1e/0xd0 [ 111.012366][ T8622] __x64_sys_rt_sigsuspend+0x6e/0xe0 [ 111.017750][ T8622] x64_sys_call+0x1f8d/0x2e00 [ 111.022498][ T8622] do_syscall_64+0xc9/0x1c0 [ 111.027019][ T8622] ? clear_bhb_loop+0x55/0xb0 [ 111.031783][ T8622] ? clear_bhb_loop+0x55/0xb0 [ 111.036492][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.042528][ T8622] RIP: 0033:0x7f69ea0b73b9 [ 111.046946][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.066728][ T8622] RSP: 002b:00007f69e8d37048 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 111.075147][ T8622] RAX: ffffffffffffffda RBX: 00007f69ea245f80 RCX: 00007f69ea0b73b9 [ 111.083122][ T8622] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000040 [ 111.091100][ T8622] RBP: 00007f69e8d370a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.099075][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.107157][ T8622] R13: 000000000000000b R14: 00007f69ea245f80 R15: 00007fffb87d77f8 [ 111.115138][ T8622] [ 111.192911][ T8641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.277422][ T8656] serio: Serial port pts0 [ 111.287433][ T8657] tap0: tun_chr_ioctl cmd 1074025677 [ 111.292848][ T8657] tap0: linktype set to 825 [ 111.402089][ T8675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.586827][ T8699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38676 sclass=netlink_route_socket pid=8699 comm=syz.0.1659 [ 111.945017][ T8710] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.079217][ T8720] dccp_invalid_packet: P.Data Offset(172) too large [ 112.315709][ T8743] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.505013][ T8776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.597936][ T8790] bridge0: port 3(bond0) entered blocking state [ 112.604331][ T8790] bridge0: port 3(bond0) entered disabled state [ 112.616547][ T8790] bond0: entered allmulticast mode [ 112.621853][ T8790] bond_slave_0: entered allmulticast mode [ 112.627710][ T8790] bond_slave_1: entered allmulticast mode [ 112.636541][ T8790] bond0: entered promiscuous mode [ 112.641634][ T8790] bond_slave_0: entered promiscuous mode [ 112.647458][ T8790] bond_slave_1: entered promiscuous mode [ 112.653915][ T8790] bridge0: port 3(bond0) entered blocking state [ 112.660293][ T8790] bridge0: port 3(bond0) entered forwarding state [ 112.668461][ T8793] bond0: left allmulticast mode [ 112.673433][ T8793] bond_slave_0: left allmulticast mode [ 112.678971][ T8793] bond_slave_1: left allmulticast mode [ 112.684487][ T8793] bond0: left promiscuous mode [ 112.689334][ T8793] bond_slave_0: left promiscuous mode [ 112.694851][ T8793] bond_slave_1: left promiscuous mode [ 112.700549][ T8793] bridge0: port 3(bond0) entered disabled state [ 112.916481][ T8839] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.181607][ T8875] __nla_validate_parse: 16 callbacks suppressed [ 113.181627][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 113.652015][ T8955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8955 comm=syz.0.1765 [ 113.667091][ T8955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=8955 comm=syz.0.1765 [ 113.679646][ T8955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=8955 comm=syz.0.1765 [ 114.151000][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 114.211835][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 114.211849][ T29] audit: type=1400 audit(1722549237.400:753): avc: denied { watch } for pid=9007 comm="syz.1.1785" path="/proc/851/task" dev="proc" ino=29016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 114.271483][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 114.280593][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 114.293616][ T29] audit: type=1400 audit(1722549237.490:754): avc: denied { getopt } for pid=9017 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.387793][ T9025] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 114.403215][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 114.404844][ T29] audit: type=1400 audit(1722549237.590:755): avc: denied { bind } for pid=9024 comm="syz.3.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.433458][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1791'. [ 114.443139][ T9033] FAULT_INJECTION: forcing a failure. [ 114.443139][ T9033] name failslab, interval 1, probability 0, space 0, times 0 [ 114.455926][ T9033] CPU: 0 UID: 0 PID: 9033 Comm: syz.1.1795 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 114.466616][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 114.476676][ T9033] Call Trace: [ 114.480060][ T9033] [ 114.483028][ T9033] dump_stack_lvl+0xf2/0x150 [ 114.487711][ T9033] dump_stack+0x15/0x20 [ 114.491888][ T9033] should_fail_ex+0x229/0x230 [ 114.496638][ T9033] ? shmem_alloc_inode+0x34/0x50 [ 114.501602][ T9033] should_failslab+0x8f/0xb0 [ 114.506212][ T9033] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 114.512013][ T9033] shmem_alloc_inode+0x34/0x50 [ 114.516860][ T9033] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 114.522398][ T9033] alloc_inode+0x3c/0x160 [ 114.526738][ T9033] new_inode+0x1e/0x100 [ 114.530899][ T9033] shmem_get_inode+0x258/0x740 [ 114.535754][ T9033] shmem_mknod+0x44/0x180 [ 114.540106][ T9033] shmem_mkdir+0x33/0x70 [ 114.544442][ T9033] vfs_mkdir+0x1f4/0x320 [ 114.548770][ T9033] do_mkdirat+0x12f/0x2a0 [ 114.553309][ T9033] __x64_sys_mkdir+0x42/0x50 [ 114.557988][ T9033] x64_sys_call+0x20cb/0x2e00 [ 114.562769][ T9033] do_syscall_64+0xc9/0x1c0 [ 114.567330][ T9033] ? clear_bhb_loop+0x55/0xb0 [ 114.572037][ T9033] ? clear_bhb_loop+0x55/0xb0 [ 114.576754][ T9033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.582724][ T9033] RIP: 0033:0x7fbb838073b9 [ 114.587187][ T9033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.606819][ T9033] RSP: 002b:00007fbb82487048 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 114.615277][ T9033] RAX: ffffffffffffffda RBX: 00007fbb83995f80 RCX: 00007fbb838073b9 [ 114.623264][ T9033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200013c0 [ 114.631289][ T9033] RBP: 00007fbb824870a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.639263][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.647274][ T9033] R13: 000000000000000b R14: 00007fbb83995f80 R15: 00007fffb8a59998 [ 114.655436][ T9033] [ 114.661490][ T29] audit: type=1400 audit(1722549237.630:756): avc: denied { lock } for pid=9024 comm="syz.3.1791" path="socket:[29058]" dev="sockfs" ino=29058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.732718][ T29] audit: type=1326 audit(1722549237.920:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.1.1799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x0 [ 114.786257][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1803'. [ 114.795357][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1803'. [ 114.856178][ C1] Illegal XDP return value 16128 on prog (id 266) dev lo, expect packet loss! [ 114.892891][ T9062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9062 comm=syz.0.1807 [ 114.926121][ T29] audit: type=1400 audit(1722549238.120:758): avc: denied { connect } for pid=9067 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.947399][ T9068] 9pnet_fd: Insufficient options for proto=fd [ 115.025989][ T29] audit: type=1400 audit(1722549238.220:759): avc: denied { create } for pid=9077 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 115.045873][ T29] audit: type=1400 audit(1722549238.220:760): avc: denied { create } for pid=9077 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.086168][ T29] audit: type=1400 audit(1722549238.280:761): avc: denied { write } for pid=9077 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.106337][ T9080] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1811'. [ 115.115757][ T29] audit: type=1400 audit(1722549238.300:762): avc: denied { nlmsg_write } for pid=9077 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.464060][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.475110][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.752724][ T9107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.085609][ C0] sched: RT throttling activated [ 117.713183][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1829'. [ 117.740984][ T9125] veth1_virt_wifi: entered promiscuous mode [ 117.771689][ T9125] syz_tun: entered promiscuous mode [ 117.784501][ T9125] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 117.798519][ T9125] Cannot create hsr debugfs directory [ 117.901912][ T9148] syzkaller0: entered promiscuous mode [ 117.907458][ T9148] syzkaller0: entered allmulticast mode [ 117.931650][ T9148] 9pnet_fd: Insufficient options for proto=fd [ 117.972252][ T9148] can: request_module (can-proto-0) failed. [ 118.349992][ T9178] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.476071][ T9189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59869 sclass=netlink_route_socket pid=9189 comm=syz.3.1851 [ 118.481745][ T9191] __nla_validate_parse: 2 callbacks suppressed [ 118.481766][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 118.597001][ T9206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.688278][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 118.822554][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 118.981919][ T9258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1878'. [ 119.137936][ T9272] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.287884][ T9283] loop0: detected capacity change from 0 to 128 [ 119.349321][ T9283] vfat: Unknown parameter 'à' [ 119.692738][ T9310] xt_hashlimit: max too large, truncated to 1048576 [ 119.699439][ T9310] xt_hashlimit: overflow, rate too high: 0 [ 119.713799][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 119.713814][ T29] audit: type=1326 audit(1722549242.900:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.744791][ T9316] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.753824][ T29] audit: type=1326 audit(1722549242.940:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.775764][ T9316] loop0: detected capacity change from 0 to 2048 [ 119.784264][ T29] audit: type=1326 audit(1722549242.940:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.814070][ T29] audit: type=1326 audit(1722549242.940:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.837431][ T29] audit: type=1326 audit(1722549242.940:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.860742][ T29] audit: type=1326 audit(1722549242.940:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.884084][ T29] audit: type=1326 audit(1722549242.940:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.907841][ T29] audit: type=1326 audit(1722549242.940:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.907872][ T29] audit: type=1326 audit(1722549242.940:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.907902][ T29] audit: type=1326 audit(1722549242.940:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb838073b9 code=0x7ffc0000 [ 119.985998][ T9316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.061829][ T9327] delete_channel: no stack [ 120.094792][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.163772][ T9338] syz_tun: entered allmulticast mode [ 120.194864][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 120.221098][ T9348] vlan2: entered promiscuous mode [ 120.354991][ T9363] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.161079][ T9363] loop0: detected capacity change from 0 to 2048 [ 121.222186][ T9363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.332021][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.448493][ T9413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.582777][ T9436] unsupported nlmsg_type 40 [ 121.594057][ T9431] x_tables: duplicate underflow at hook 1 [ 121.683031][ T9455] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1954'. [ 121.743691][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1960'. [ 121.761517][ T9469] netlink: 'syz.1.1959': attribute type 33 has an invalid length. [ 121.769448][ T9469] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1959'. [ 121.820891][ T9469] netlink: 'syz.1.1959': attribute type 33 has an invalid length. [ 121.828892][ T9469] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1959'. [ 121.885515][ T9476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'. [ 121.967112][ T9487] loop0: detected capacity change from 0 to 128 [ 121.977340][ T9487] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 122.032529][ T9493] xt_hashlimit: overflow, try lower: 241/0 [ 122.315291][ T9501] usb usb8: usbfs: process 9501 (syz.4.1974) did not claim interface 0 before use [ 122.344074][ T9503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9503 comm=syz.4.1975 [ 122.557562][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.566289][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.793813][ T9520] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.951292][ T9538] loop0: detected capacity change from 0 to 512 [ 122.975835][ T9538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.997213][ T9538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.011149][ T9538] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.025396][ T9544] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 123.066641][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.087902][ T9551] FAULT_INJECTION: forcing a failure. [ 123.087902][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 123.100600][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.2.1989 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 123.111383][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 123.121540][ T9551] Call Trace: [ 123.124832][ T9551] [ 123.127947][ T9551] dump_stack_lvl+0xf2/0x150 [ 123.132577][ T9551] dump_stack+0x15/0x20 [ 123.136765][ T9551] should_fail_ex+0x229/0x230 [ 123.141570][ T9551] ? assoc_array_insert+0x85/0x1960 [ 123.146874][ T9551] should_failslab+0x8f/0xb0 [ 123.151561][ T9551] __kmalloc_cache_noprof+0x4b/0x2a0 [ 123.156873][ T9551] assoc_array_insert+0x85/0x1960 [ 123.162320][ T9551] ? __pfx_key_default_cmp+0x10/0x10 [ 123.167669][ T9551] ? __pfx_keyring_search_iterator+0x10/0x10 [ 123.173723][ T9551] __key_link_begin+0x9a/0x150 [ 123.178606][ T9551] request_key_and_link+0x4fa/0xcf0 [ 123.184268][ T9551] ? __pfx_key_default_cmp+0x10/0x10 [ 123.189639][ T9551] ? __pfx_keyring_search_iterator+0x10/0x10 [ 123.195662][ T9551] __se_sys_request_key+0x1d7/0x290 [ 123.201023][ T9551] ? __schedule+0x5fa/0x950 [ 123.205633][ T9551] __x64_sys_request_key+0x55/0x70 [ 123.210839][ T9551] x64_sys_call+0x2b12/0x2e00 [ 123.215606][ T9551] do_syscall_64+0xc9/0x1c0 [ 123.220290][ T9551] ? clear_bhb_loop+0x55/0xb0 [ 123.225010][ T9551] ? clear_bhb_loop+0x55/0xb0 [ 123.230067][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.236041][ T9551] RIP: 0033:0x7f69ea0b73b9 [ 123.240639][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.260331][ T9551] RSP: 002b:00007f69e8cf5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 123.268765][ T9551] RAX: ffffffffffffffda RBX: 00007f69ea246130 RCX: 00007f69ea0b73b9 [ 123.276914][ T9551] RDX: 0000000020001fee RSI: 0000000020001ffb RDI: 0000000020000040 [ 123.284975][ T9551] RBP: 00007f69e8cf50a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.292968][ T9551] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 123.301014][ T9551] R13: 000000000000006e R14: 00007f69ea246130 R15: 00007fffb87d77f8 [ 123.309053][ T9551] [ 123.381244][ T9558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.422273][ T9560] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 123.439033][ T7020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.497812][ T7020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.537013][ T9573] loop0: detected capacity change from 0 to 512 [ 123.551461][ T7020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.580006][ T9573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 123.590484][ T9573] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.603373][ T7020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.606148][ T9573] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 123.629221][ T9573] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 123.636623][ T9573] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.2004: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 123.657779][ T9573] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2004: couldn't read orphan inode 13 (err -117) [ 123.670522][ T9573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.720350][ T9573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.753453][ T9594] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.795944][ T9600] __nla_validate_parse: 1 callbacks suppressed [ 123.795964][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 123.813699][ T7020] bridge_slave_1: left allmulticast mode [ 123.819559][ T7020] bridge_slave_1: left promiscuous mode [ 123.825334][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.846291][ T9602] loop0: detected capacity change from 0 to 256 [ 123.851043][ T9602] vfat: Bad value for 'dmask' [ 123.866718][ T7020] bridge_slave_0: left allmulticast mode [ 123.866741][ T7020] bridge_slave_0: left promiscuous mode [ 123.866879][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.929247][ T7020] ip6gretap0 (unregistering): left promiscuous mode [ 124.048845][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.059215][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.069667][ T7020] bond0 (unregistering): Released all slaves [ 124.132207][ T9618] loop0: detected capacity change from 0 to 128 [ 124.145207][ T9618] vfat: Unknown parameter 'à' [ 124.170718][ T7020] veth1_virt_wifi: left promiscuous mode [ 124.190041][ T7020] hsr_slave_0: left promiscuous mode [ 124.201524][ T7020] hsr_slave_1: left promiscuous mode [ 124.217528][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.225006][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.234040][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.234070][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.249074][ T7020] veth1_macvtap: left promiscuous mode [ 124.249105][ T7020] veth0_macvtap: left promiscuous mode [ 124.249176][ T7020] veth1_vlan: left promiscuous mode [ 124.265431][ T7020] veth0_vlan: left promiscuous mode [ 124.285916][ T9637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.397018][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 124.407671][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 124.454471][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2023'. [ 124.463747][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2023'. [ 124.504355][ T9653] loop0: detected capacity change from 0 to 512 [ 124.532410][ T9653] ext4: Unknown parameter 'uid>00000000000000000000' [ 124.563918][ T9664] dccp_invalid_packet: P.Data Offset(172) too large [ 124.585404][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 124.616965][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 124.672021][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.679184][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.702033][ T9570] bridge_slave_0: entered allmulticast mode [ 124.710212][ T9570] bridge_slave_0: entered promiscuous mode [ 124.718926][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.726111][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.745689][ T9570] bridge_slave_1: entered allmulticast mode [ 124.753485][ T9570] bridge_slave_1: entered promiscuous mode [ 124.797395][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.823552][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.907444][ T9570] team0: Port device team_slave_0 added [ 124.914164][ T9570] team0: Port device team_slave_1 added [ 124.954669][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 124.964816][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.971894][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.997863][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.014463][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.021493][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.047515][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.080486][ T9570] hsr_slave_0: entered promiscuous mode [ 125.086872][ T9570] hsr_slave_1: entered promiscuous mode [ 125.092953][ T9570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.100963][ T9570] Cannot create hsr debugfs directory [ 125.353824][ T9767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 125.447002][ T9570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.459099][ T9570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.468206][ T9570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.478780][ T9570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.497748][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.504962][ T9570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.512363][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.519651][ T9570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.530097][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.538526][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.986210][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2056'. [ 125.995313][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2056'. [ 126.063360][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.096887][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.114121][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.121264][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.137856][ T9831] loop0: detected capacity change from 0 to 128 [ 126.144482][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.151605][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.165018][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 126.165147][ T29] audit: type=1400 audit(1722549249.360:838): avc: denied { egress } for pid=9 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 126.166680][ T9831] vfat: Unknown parameter 'à' [ 126.171313][ T29] audit: type=1400 audit(1722549249.360:839): avc: denied { sendto } for pid=9 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 126.237673][ T9570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.248157][ T9570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.385097][ T29] audit: type=1400 audit(1722549249.570:840): avc: denied { write } for pid=9863 comm="syz.4.2067" name="ptp0" dev="devtmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.427746][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.441920][ T29] audit: type=1400 audit(1722549249.610:841): avc: denied { setopt } for pid=9863 comm="syz.4.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.594170][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2071'. [ 126.603243][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2071'. [ 126.771272][ T9921] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.859938][ T9925] netlink: 'syz.4.2081': attribute type 1 has an invalid length. [ 127.083836][ T9570] veth0_vlan: entered promiscuous mode [ 127.096932][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 127.183229][ T9570] veth1_vlan: entered promiscuous mode [ 127.243431][ T9570] veth0_macvtap: entered promiscuous mode [ 127.287804][ T9570] veth1_macvtap: entered promiscuous mode [ 127.314125][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.324676][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.334575][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.345225][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.355126][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.365662][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.375482][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.386133][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.409139][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.417549][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.428069][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.438071][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.448597][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.458477][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.469046][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.478933][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.489481][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.518443][ T9966] loop0: detected capacity change from 0 to 1024 [ 127.531842][ T9966] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent [ 127.542921][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.568327][ T9966] loop0: detected capacity change from 0 to 512 [ 127.576755][ T9570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.585630][ T9570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.594425][ T9570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.603294][ T9570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.654460][ T9979] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 127.667124][ T9979] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 127.865003][ T9949] chnl_net:caif_netlink_parms(): no params data found [ 127.953441][T10014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.123743][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.130918][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.258529][ T9949] bridge_slave_0: entered allmulticast mode [ 128.308391][ T9949] bridge_slave_0: entered promiscuous mode [ 128.354583][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.361722][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.376572][ T9949] bridge_slave_1: entered allmulticast mode [ 128.383276][ T9949] bridge_slave_1: entered promiscuous mode [ 128.401906][ T7020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.426099][ T9949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.437601][ T9949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.439023][T10039] loop0: detected capacity change from 0 to 128 [ 128.456663][T10039] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.476266][ T9949] team0: Port device team_slave_0 added [ 128.483534][T10043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.510553][ T7020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.522938][ T9949] team0: Port device team_slave_1 added [ 128.546364][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.553359][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.579789][ T9949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.595099][ T7020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.608385][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.608403][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.608488][ T9949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.688663][ T7020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.732335][ T9949] hsr_slave_0: entered promiscuous mode [ 128.739785][ T9949] hsr_slave_1: entered promiscuous mode [ 128.746107][ T9949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.753729][ T9949] Cannot create hsr debugfs directory [ 128.806779][ T7020] bridge_slave_1: left allmulticast mode [ 128.812610][ T7020] bridge_slave_1: left promiscuous mode [ 128.818296][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.826270][ T7020] bridge_slave_0: left allmulticast mode [ 128.832040][ T7020] bridge_slave_0: left promiscuous mode [ 128.838078][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.881201][ T7020] ip6gretap0 (unregistering): left promiscuous mode [ 128.949089][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.959798][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.970093][ T7020] bond0 (unregistering): Released all slaves [ 128.983361][T10067] __nla_validate_parse: 2 callbacks suppressed [ 128.983380][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2124'. [ 128.998884][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2124'. [ 129.047734][T10075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.101992][T10075] loop0: detected capacity change from 0 to 2048 [ 129.208055][ T7020] veth1_virt_wifi: left promiscuous mode [ 129.215234][T10075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.227957][ T29] audit: type=1326 audit(1722549252.420:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10078 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced54073b9 code=0x7ffc0000 [ 129.252538][ T29] audit: type=1326 audit(1722549252.420:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10078 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced54073b9 code=0x7ffc0000 [ 129.276212][ T29] audit: type=1326 audit(1722549252.420:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10078 comm="syz.1.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fced54073b9 code=0x7ffc0000 [ 129.300052][ T7020] hsr_slave_0: left promiscuous mode [ 129.306068][ T7020] hsr_slave_1: left promiscuous mode [ 129.312979][ T7020] batman_adv: batadv0: Removing interface: team0 [ 129.321300][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.328776][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.346981][ T6451] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.353619][ T6451] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 129.361378][ T6451] audit: backlog limit exceeded [ 130.251588][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.259406][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.275497][ T7020] veth1_macvtap: left promiscuous mode [ 130.281171][ T7020] veth0_macvtap: left promiscuous mode [ 130.286738][ T7020] veth1_vlan: left promiscuous mode [ 130.292060][ T7020] veth0_vlan: left promiscuous mode [ 130.418288][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 130.429146][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 130.547257][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 130.727568][ T6451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.818870][ T9949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.828054][ T9949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.841068][ T9949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.859208][ T9949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.963000][T10133] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.038270][ T9949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.069232][ T9949] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.069387][T10142] FAULT_INJECTION: forcing a failure. [ 131.069387][T10142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.086248][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.089288][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.4.2141 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 131.096394][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.107182][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 131.107201][T10142] Call Trace: [ 131.107209][T10142] [ 131.107218][T10142] dump_stack_lvl+0xf2/0x150 [ 131.135339][T10142] dump_stack+0x15/0x20 [ 131.137953][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.139521][T10142] should_fail_ex+0x229/0x230 [ 131.146649][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.151205][T10142] should_fail_alloc_page+0xfd/0x110 [ 131.163744][T10142] __alloc_pages_noprof+0x109/0x360 [ 131.169003][T10142] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 131.171507][ T9949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.174462][T10142] folio_alloc_mpol_noprof+0x36/0x70 [ 131.184948][ T9949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.190046][T10142] shmem_get_folio_gfp+0x3eb/0xd80 [ 131.190106][T10142] ? cgroup_rstat_updated+0x99/0x550 [ 131.190156][T10142] shmem_write_begin+0xa0/0x1c0 [ 131.190193][T10142] generic_perform_write+0x1b4/0x580 [ 131.221231][T10142] ? current_time+0xfa/0x1a0 [ 131.225910][T10142] shmem_file_write_iter+0xc8/0xf0 [ 131.231593][T10142] vfs_write+0x78f/0x900 [ 131.235939][T10142] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 131.241842][T10142] ksys_write+0xeb/0x1b0 [ 131.246189][T10142] __x64_sys_write+0x42/0x50 [ 131.250842][T10142] x64_sys_call+0x2a40/0x2e00 [ 131.255538][T10142] do_syscall_64+0xc9/0x1c0 [ 131.260065][T10142] ? clear_bhb_loop+0x55/0xb0 [ 131.264778][T10142] ? clear_bhb_loop+0x55/0xb0 [ 131.269555][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.275553][T10142] RIP: 0033:0x7f8677885e9f [ 131.280065][T10142] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 131.300060][T10142] RSP: 002b:00007f8676506e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.308497][T10142] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f8677885e9f [ 131.316623][T10142] RDX: 0000000000040000 RSI: 00007f866e082000 RDI: 000000000000000a [ 131.324662][T10142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000429 [ 131.333014][T10142] R10: 0000000020000942 R11: 0000000000000293 R12: 000000000000000a [ 131.341049][T10142] R13: 00007f8676506f00 R14: 00007f8676506ec0 R15: 00007f866e082000 [ 131.349035][T10142] [ 131.640267][ T9949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.866188][T10181] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.905314][ T9949] veth0_vlan: entered promiscuous mode [ 131.926271][ T9949] veth1_vlan: entered promiscuous mode [ 131.933377][T10140] chnl_net:caif_netlink_parms(): no params data found [ 131.967417][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 131.967436][ T29] audit: type=1400 audit(1722549255.160:998): avc: denied { read } for pid=10188 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.015462][ T9949] veth0_macvtap: entered promiscuous mode [ 132.026391][ T9949] veth1_macvtap: entered promiscuous mode [ 132.064915][T10140] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.072313][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.085265][T10140] bridge_slave_0: entered allmulticast mode [ 132.093107][T10140] bridge_slave_0: entered promiscuous mode [ 132.100315][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.107472][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.114705][T10140] bridge_slave_1: entered allmulticast mode [ 132.121386][T10140] bridge_slave_1: entered promiscuous mode [ 132.152556][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.163144][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.173029][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.183527][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.193450][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.204093][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.211694][T10204] sctp: [Deprecated]: syz.1.2156 (pid 10204) Use of int in maxseg socket option. [ 132.211694][T10204] Use struct sctp_assoc_value instead [ 132.214219][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.238911][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.250009][ T9949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.259281][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.269899][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.279825][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.290509][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.300429][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.311138][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.320983][ T9949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.331944][ T9949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.342958][ T9949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.360718][T10209] FAULT_INJECTION: forcing a failure. [ 132.360718][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 132.361803][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 132.373448][T10209] CPU: 0 UID: 3327 PID: 10209 Comm: syz.4.2158 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 132.391836][T10140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.393370][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 132.412512][T10209] Call Trace: [ 132.412984][ T9949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.415864][T10209] [ 132.415874][T10209] dump_stack_lvl+0xf2/0x150 [ 132.415918][T10209] dump_stack+0x15/0x20 [ 132.415953][T10209] should_fail_ex+0x229/0x230 [ 132.415989][T10209] ? kstrdup_const+0x3e/0x50 [ 132.416076][T10209] should_failslab+0x8f/0xb0 [ 132.425143][ T9949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.427953][T10209] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 132.432548][ T9949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.436676][T10209] ? xas_create+0xb78/0xbd0 [ 132.441358][ T9949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.445922][T10209] kstrdup+0x3a/0x80 [ 132.472625][T10140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.474246][T10209] kstrdup_const+0x3e/0x50 [ 132.505033][T10209] kvasprintf_const+0xe5/0x100 [ 132.509914][T10209] kobject_set_name_vargs+0x44/0xe0 [ 132.515280][T10209] kobject_init_and_add+0x12c/0x210 [ 132.520590][T10209] bus_add_driver+0x1a8/0x470 [ 132.525329][T10209] driver_register+0x163/0x220 [ 132.530150][T10209] usb_gadget_register_driver_owner+0x80/0x190 [ 132.536395][T10209] raw_ioctl+0xbcc/0x1b50 [ 132.540757][T10209] ? ioctl_has_perm+0x28b/0x2e0 [ 132.545656][T10209] ? do_vfs_ioctl+0x99e/0x1560 [ 132.550446][T10209] ? selinux_file_ioctl+0x2f7/0x380 [ 132.555664][T10209] ? __fget_files+0x1da/0x210 [ 132.560444][T10209] ? __pfx_raw_ioctl+0x10/0x10 [ 132.565227][T10209] __se_sys_ioctl+0xd3/0x150 [ 132.569838][T10209] __x64_sys_ioctl+0x43/0x50 [ 132.574517][T10209] x64_sys_call+0x1688/0x2e00 [ 132.579321][T10209] do_syscall_64+0xc9/0x1c0 [ 132.583991][T10209] ? clear_bhb_loop+0x55/0xb0 [ 132.588726][T10209] ? clear_bhb_loop+0x55/0xb0 [ 132.593760][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.599715][T10209] RIP: 0033:0x7f8677886fbb [ 132.604135][T10209] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 132.623938][T10209] RSP: 002b:00007f8676504f20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.632793][T10209] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8677886fbb [ 132.640784][T10209] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 132.648782][T10209] RBP: 00007f8676505ff0 R08: 0000000000000010 R09: 00342e6364755f79 [ 132.656921][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.664899][T10209] R13: 00007f8676504fc0 R14: 0000000020000080 R15: 00007f8677b40320 [ 132.672903][T10209] [ 132.676381][T10209] kobject: can not set name properly! [ 132.682760][T10209] UDC core: USB Raw Gadget: driver registration failed: -12 [ 132.690218][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 132.698123][ T29] audit: type=1400 audit(1722549255.870:999): avc: denied { append } for pid=10211 comm="syz.1.2159" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.744165][T10140] team0: Port device team_slave_0 added [ 132.758675][T10140] team0: Port device team_slave_1 added [ 132.790768][T10140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.797821][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.823883][T10140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.842753][T10140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.849774][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.875828][T10140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.905872][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2164'. [ 132.915287][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2164'. [ 132.951694][T10140] hsr_slave_0: entered promiscuous mode [ 132.958081][T10140] hsr_slave_1: entered promiscuous mode [ 132.964392][T10140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.972036][T10140] Cannot create hsr debugfs directory [ 133.076889][T10140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.097725][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 133.115178][ T29] audit: type=1326 audit(1722549256.300:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.166365][ T29] audit: type=1326 audit(1722549256.300:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.190045][ T29] audit: type=1326 audit(1722549256.300:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.213567][ T29] audit: type=1326 audit(1722549256.340:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.237170][ T29] audit: type=1326 audit(1722549256.350:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.260884][ T29] audit: type=1326 audit(1722549256.350:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.284531][ T29] audit: type=1326 audit(1722549256.350:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9ddc73b9 code=0x7ffc0000 [ 133.308176][ T29] audit: type=1326 audit(1722549256.350:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.3.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d9ddbe367 code=0x7ffc0000 [ 133.358506][T10140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.437230][T10140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.527226][T10140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.608237][T10257] FAULT_INJECTION: forcing a failure. [ 133.608237][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 133.621084][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.3.2174 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 133.631872][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 133.641964][T10257] Call Trace: [ 133.645257][T10257] [ 133.648202][T10257] dump_stack_lvl+0xf2/0x150 [ 133.652828][T10257] dump_stack+0x15/0x20 [ 133.655895][T10140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.657134][T10257] should_fail_ex+0x229/0x230 [ 133.668561][T10257] ? security_file_alloc+0x32/0xe0 [ 133.673826][T10257] should_failslab+0x8f/0xb0 [ 133.678572][T10257] kmem_cache_alloc_noprof+0x4c/0x290 [ 133.683965][T10257] security_file_alloc+0x32/0xe0 [ 133.688978][T10257] alloc_empty_file+0x121/0x310 [ 133.693871][T10257] alloc_file_pseudo+0xc3/0x140 [ 133.698760][T10257] __shmem_file_setup+0x1bb/0x1f0 [ 133.703880][T10257] shmem_file_setup+0x3b/0x50 [ 133.708589][T10257] __se_sys_memfd_create+0x31d/0x600 [ 133.713976][T10257] __x64_sys_memfd_create+0x31/0x40 [ 133.719354][T10257] x64_sys_call+0x1163/0x2e00 [ 133.724076][T10257] do_syscall_64+0xc9/0x1c0 [ 133.728600][T10257] ? clear_bhb_loop+0x55/0xb0 [ 133.733333][T10257] ? clear_bhb_loop+0x55/0xb0 [ 133.738107][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.744043][T10257] RIP: 0033:0x7f9d9ddc73b9 [ 133.748466][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.768101][T10257] RSP: 002b:00007f9d9ca46d78 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 133.776545][T10257] RAX: ffffffffffffffda RBX: 00000000000005c5 RCX: 00007f9d9ddc73b9 [ 133.784548][T10257] RDX: 00007f9d9ca46dfc RSI: 0000000000000000 RDI: 00007f9d9de35094 [ 133.792543][T10257] RBP: 0000000020000b80 R08: 00007f9d9ca46b17 R09: 0000000000000000 [ 133.800532][T10257] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 133.808540][T10257] R13: 00007f9d9ca46dfc R14: 00007f9d9ca46e00 R15: 00007fff89cfda78 [ 133.816525][T10257] [ 133.858370][T10140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.878145][T10140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.907849][T10140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.034947][T10140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.051574][T10140] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.062697][T10277] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2181'. [ 134.065521][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.078862][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.103190][T10140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.113737][T10140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.116624][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.116671][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.225344][T10140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.353877][T10140] veth0_vlan: entered promiscuous mode [ 134.354815][T10326] FAULT_INJECTION: forcing a failure. [ 134.354815][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.372626][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.1.2192 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 134.372724][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 134.372723][T10140] veth1_vlan: entered promiscuous mode [ 134.372740][T10326] Call Trace: [ 134.372748][T10326] [ 134.372756][T10326] dump_stack_lvl+0xf2/0x150 [ 134.372794][T10326] dump_stack+0x15/0x20 [ 134.372910][T10326] should_fail_ex+0x229/0x230 [ 134.372949][T10326] should_fail+0xb/0x10 [ 134.373028][T10326] should_fail_usercopy+0x1a/0x20 [ 134.373075][T10326] _copy_to_user+0x1e/0xa0 [ 134.373186][T10326] simple_read_from_buffer+0xa0/0x110 [ 134.373222][T10326] proc_fail_nth_read+0xfc/0x140 [ 134.373270][T10326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.373315][T10326] vfs_read+0x1a2/0x6e0 [ 134.373371][T10326] ? __rcu_read_unlock+0x4e/0x70 [ 134.373394][T10326] ? __fget_files+0x1da/0x210 [ 134.373436][T10326] ksys_read+0xeb/0x1b0 [ 134.373488][T10326] __x64_sys_read+0x42/0x50 [ 134.373538][T10326] x64_sys_call+0x2a36/0x2e00 [ 134.373619][T10326] do_syscall_64+0xc9/0x1c0 [ 134.373650][T10326] ? clear_bhb_loop+0x55/0xb0 [ 134.373710][T10326] ? clear_bhb_loop+0x55/0xb0 [ 134.373752][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.373858][T10326] RIP: 0033:0x7fced5405dfc [ 134.373886][T10326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 134.373915][T10326] RSP: 002b:00007fced4087040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.373951][T10326] RAX: ffffffffffffffda RBX: 00007fced5595f80 RCX: 00007fced5405dfc [ 134.374052][T10326] RDX: 000000000000000f RSI: 00007fced40870b0 RDI: 0000000000000004 [ 134.374080][T10326] RBP: 00007fced40870a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.374128][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.374144][T10326] R13: 000000000000000b R14: 00007fced5595f80 R15: 00007fff2f25c458 [ 134.374161][T10326] [ 134.405113][T10140] veth0_macvtap: entered promiscuous mode [ 134.593473][T10140] veth1_macvtap: entered promiscuous mode [ 134.606001][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.616648][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.626737][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.637534][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.647603][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.658172][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.668431][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.679150][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.689367][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.700127][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.713055][T10140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.721647][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.732387][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.742283][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.752833][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.762806][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.773290][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.783426][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.793891][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.803805][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.814316][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.828969][T10140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.843925][T10140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.852869][T10140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.862796][T10140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.871740][T10140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.907927][T10339] FAULT_INJECTION: forcing a failure. [ 134.907927][T10339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.921159][T10339] CPU: 1 UID: 0 PID: 10339 Comm: syz.3.2198 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 134.932027][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 134.942137][T10339] Call Trace: [ 134.945524][T10339] [ 134.948471][T10339] dump_stack_lvl+0xf2/0x150 [ 134.953155][T10339] dump_stack+0x15/0x20 [ 134.957496][T10339] should_fail_ex+0x229/0x230 [ 134.962293][T10339] should_fail+0xb/0x10 [ 134.966491][T10339] should_fail_usercopy+0x1a/0x20 [ 134.971614][T10339] _copy_from_user+0x1e/0xd0 [ 134.976330][T10339] sctp_setsockopt+0xbe/0xea0 [ 134.981041][T10339] sock_common_setsockopt+0x64/0x80 [ 134.986347][T10339] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 134.992398][T10339] __sys_setsockopt+0x1d8/0x250 [ 134.997289][T10339] __x64_sys_setsockopt+0x66/0x80 [ 135.002435][T10339] x64_sys_call+0x2a0e/0x2e00 [ 135.007215][T10339] do_syscall_64+0xc9/0x1c0 [ 135.011776][T10339] ? clear_bhb_loop+0x55/0xb0 [ 135.016510][T10339] ? clear_bhb_loop+0x55/0xb0 [ 135.021288][T10339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.027224][T10339] RIP: 0033:0x7f9d9ddc73b9 [ 135.031817][T10339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.051534][T10339] RSP: 002b:00007f9d9ca47048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.059995][T10339] RAX: ffffffffffffffda RBX: 00007f9d9df55f80 RCX: 00007f9d9ddc73b9 [ 135.067994][T10339] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 135.076064][T10339] RBP: 00007f9d9ca470a0 R08: 0000000000000008 R09: 0000000000000000 [ 135.084105][T10339] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001 [ 135.092196][T10339] R13: 000000000000000b R14: 00007f9d9df55f80 R15: 00007fff89cfda78 [ 135.100242][T10339] [ 135.157030][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 135.250926][T10356] FAULT_INJECTION: forcing a failure. [ 135.250926][T10356] name failslab, interval 1, probability 0, space 0, times 0 [ 135.263665][T10356] CPU: 0 UID: 0 PID: 10356 Comm: syz.0.2138 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 135.274564][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 135.284723][T10356] Call Trace: [ 135.288071][T10356] [ 135.291039][T10356] dump_stack_lvl+0xf2/0x150 [ 135.295698][T10356] dump_stack+0x15/0x20 [ 135.299897][T10356] should_fail_ex+0x229/0x230 [ 135.304601][T10356] ? iter_file_splice_write+0x108/0x970 [ 135.310209][T10356] should_failslab+0x8f/0xb0 [ 135.314952][T10356] __kmalloc_noprof+0xa5/0x370 [ 135.319753][T10356] iter_file_splice_write+0x108/0x970 [ 135.325171][T10356] ? atime_needs_update+0x3c5/0x3e0 [ 135.330411][T10356] ? touch_atime+0x110/0x350 [ 135.335118][T10356] ? shmem_file_splice_read+0x57b/0x5c0 [ 135.340720][T10356] ? __pfx_iter_file_splice_write+0x10/0x10 [ 135.346750][T10356] direct_splice_actor+0x16c/0x2c0 [ 135.351921][T10356] splice_direct_to_actor+0x305/0x670 [ 135.357338][T10356] ? __pfx_direct_splice_actor+0x10/0x10 [ 135.363086][T10356] do_splice_direct+0xd7/0x150 [ 135.367990][T10356] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 135.373934][T10356] do_sendfile+0x3ab/0x950 [ 135.378401][T10356] __x64_sys_sendfile64+0x110/0x150 [ 135.383629][T10356] x64_sys_call+0xfc3/0x2e00 [ 135.388291][T10356] do_syscall_64+0xc9/0x1c0 [ 135.393041][T10356] ? clear_bhb_loop+0x55/0xb0 [ 135.397767][T10356] ? clear_bhb_loop+0x55/0xb0 [ 135.402557][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.408492][T10356] RIP: 0033:0x7efd731273b9 [ 135.412927][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.432666][T10356] RSP: 002b:00007efd71d86048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 135.441277][T10356] RAX: ffffffffffffffda RBX: 00007efd732b6058 RCX: 00007efd731273b9 [ 135.449301][T10356] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 135.457292][T10356] RBP: 00007efd71d860a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.465296][T10356] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 135.473449][T10356] R13: 000000000000006e R14: 00007efd732b6058 R15: 00007ffe11345108 [ 135.481592][T10356] [ 135.570568][T10373] program syz.2.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.616365][T10377] netlink: 'syz.4.2209': attribute type 10 has an invalid length. [ 135.737122][T10389] netlink: 'syz.1.2214': attribute type 3 has an invalid length. [ 135.825873][T10400] tipc: Started in network mode [ 135.830786][T10400] tipc: Node identity , cluster identity 4711 [ 135.894314][T10408] veth2: entered allmulticast mode [ 136.141124][T10417] bond_slave_0: entered promiscuous mode [ 136.146877][T10417] bond_slave_1: entered promiscuous mode [ 136.158746][T10417] vlan2: entered promiscuous mode [ 136.163914][T10417] bond0: entered promiscuous mode [ 136.169538][T10417] vlan2: entered allmulticast mode [ 136.174750][T10417] bond0: entered allmulticast mode [ 136.179954][T10417] bond_slave_0: entered allmulticast mode [ 136.185815][T10417] bond_slave_1: entered allmulticast mode [ 136.197403][T10417] bond0: left allmulticast mode [ 136.202325][T10417] bond_slave_0: left allmulticast mode [ 136.207920][T10417] bond_slave_1: left allmulticast mode [ 136.213428][T10417] bond0: left promiscuous mode [ 136.218480][T10417] bond_slave_0: left promiscuous mode [ 136.223961][T10417] bond_slave_1: left promiscuous mode [ 136.290105][T10428] netlink: 'syz.1.2227': attribute type 16 has an invalid length. [ 136.461938][T10447] loop0: detected capacity change from 0 to 128 [ 136.469314][T10447] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 136.554620][T10449] team0: Port device geneve2 added [ 136.797593][T10481] FAULT_INJECTION: forcing a failure. [ 136.797593][T10481] name failslab, interval 1, probability 0, space 0, times 0 [ 136.810597][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.0.2243 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 136.821437][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 136.831912][T10481] Call Trace: [ 136.835199][T10481] [ 136.838140][T10481] dump_stack_lvl+0xf2/0x150 [ 136.842754][T10481] dump_stack+0x15/0x20 [ 136.846994][T10481] should_fail_ex+0x229/0x230 [ 136.851696][T10481] ? legacy_init_fs_context+0x31/0x70 [ 136.857177][T10481] should_failslab+0x8f/0xb0 [ 136.861858][T10481] __kmalloc_cache_noprof+0x4b/0x2a0 [ 136.867174][T10481] ? alloc_fs_context+0x44/0x4e0 [ 136.872146][T10481] legacy_init_fs_context+0x31/0x70 [ 136.877437][T10481] alloc_fs_context+0x3fb/0x4e0 [ 136.882314][T10481] fs_context_for_mount+0x21/0x30 [ 136.887511][T10481] do_new_mount+0xf3/0x690 [ 136.891971][T10481] path_mount+0x49b/0xb30 [ 136.896323][T10481] __se_sys_mount+0x27c/0x2d0 [ 136.901055][T10481] __x64_sys_mount+0x67/0x80 [ 136.905670][T10481] x64_sys_call+0xd11/0x2e00 [ 136.910333][T10481] do_syscall_64+0xc9/0x1c0 [ 136.914892][T10481] ? clear_bhb_loop+0x55/0xb0 [ 136.919636][T10481] ? clear_bhb_loop+0x55/0xb0 [ 136.924328][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.930332][T10481] RIP: 0033:0x7efd731273b9 [ 136.934851][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.954585][T10481] RSP: 002b:00007efd71d86048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.963004][T10481] RAX: ffffffffffffffda RBX: 00007efd732b6058 RCX: 00007efd731273b9 [ 136.970981][T10481] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 136.979004][T10481] RBP: 00007efd71d860a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.987092][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.995068][T10481] R13: 000000000000006e R14: 00007efd732b6058 R15: 00007ffe11345108 [ 137.003049][T10481] [ 137.021440][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 137.021478][ T29] audit: type=1400 audit(1722549260.210:1159): avc: denied { add_name } for pid=10479 comm="syz.4.2246" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.048755][ T29] audit: type=1400 audit(1722549260.210:1160): avc: denied { create } for pid=10479 comm="syz.4.2246" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 137.069558][ T29] audit: type=1400 audit(1722549260.210:1161): avc: denied { associate } for pid=10479 comm="syz.4.2246" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.115481][ T29] audit: type=1326 audit(1722549260.300:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.2.2248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ea0b73b9 code=0x0 [ 137.252233][T10500] block device autoloading is deprecated and will be removed. [ 137.494259][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 137.631972][T10540] block device autoloading is deprecated and will be removed. [ 137.876390][T10554] netlink: 'syz.1.2270': attribute type 28 has an invalid length. [ 138.119196][T10574] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 138.119734][T10543] chnl_net:caif_netlink_parms(): no params data found [ 138.176329][T10588] loop3: detected capacity change from 0 to 2048 [ 138.183056][ T29] audit: type=1400 audit(1722549261.370:1163): avc: denied { mounton } for pid=10587 comm="syz.3.2279" path="/21/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.225614][ T29] audit: type=1326 audit(1722549261.410:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10594 comm="syz.4.2281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86778873b9 code=0x0 [ 138.266490][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.269834][T10601] loop3: detected capacity change from 0 to 1024 [ 138.273674][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.287413][T10543] bridge_slave_0: entered allmulticast mode [ 138.293997][T10543] bridge_slave_0: entered promiscuous mode [ 138.299369][T10601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.304674][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2282'. [ 138.320890][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2282'. [ 138.331143][ T29] audit: type=1400 audit(1722549261.520:1165): avc: denied { create } for pid=10599 comm="syz.3.2283" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.354227][ T29] audit: type=1400 audit(1722549261.520:1166): avc: denied { read append open } for pid=10599 comm="syz.3.2283" path="/22/file1/blkio.bfq.io_service_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.380823][ T29] audit: type=1400 audit(1722549261.520:1167): avc: denied { map } for pid=10599 comm="syz.3.2283" path="/22/file1/blkio.bfq.io_service_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.406295][ T29] audit: type=1400 audit(1722549261.520:1168): avc: denied { execute } for pid=10599 comm="syz.3.2283" path="/22/file1/blkio.bfq.io_service_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.438077][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.445286][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.452579][T10543] bridge_slave_1: entered allmulticast mode [ 138.459240][T10543] bridge_slave_1: entered promiscuous mode [ 138.479995][T10543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.500200][ T9949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.517481][T10543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.560579][T10543] team0: Port device team_slave_0 added [ 138.572533][T10543] team0: Port device team_slave_1 added [ 138.603689][T10543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.610730][T10543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.636927][T10543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.650688][T10543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.657700][T10543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.683710][T10543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.730215][T10543] hsr_slave_0: entered promiscuous mode [ 138.740335][T10543] hsr_slave_1: entered promiscuous mode [ 138.746962][T10543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.754539][T10543] Cannot create hsr debugfs directory [ 138.782779][T10636] loop3: detected capacity change from 0 to 2048 [ 138.798050][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2292'. [ 138.825709][T10640] IPv6: addrconf: prefix option has invalid lifetime [ 138.856881][T10543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.861586][T10644] dccp_invalid_packet: P.Data Offset(172) too large [ 138.946384][T10654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=10654 comm=syz.2.2300 [ 139.603720][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2307'. [ 139.613017][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2307'. [ 139.624568][T10674] veth1_virt_wifi: entered promiscuous mode [ 139.631872][T10674] veth1_virt_wifi: left promiscuous mode [ 140.066232][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'. [ 140.078065][T10698] IPv6: addrconf: prefix option has invalid lifetime [ 140.574777][T10706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2318'. [ 140.603699][T10708] loop3: detected capacity change from 0 to 2048 [ 140.617161][T10708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.644239][ T9949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.709722][T10543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.773036][T10543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.799235][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 140.808793][T10718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2320'. [ 140.840190][T10543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.892896][ T7020] bridge_slave_1: left allmulticast mode [ 140.898637][ T7020] bridge_slave_1: left promiscuous mode [ 140.904354][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.914405][ T7020] bridge_slave_0: left allmulticast mode [ 140.920181][ T7020] bridge_slave_0: left promiscuous mode [ 140.926025][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.991971][ T7020] team0: Port device geneve2 removed [ 141.048159][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.059392][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.070796][ T7020] bond0 (unregistering): Released all slaves [ 141.080997][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'. [ 141.108962][T10543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.119976][T10543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.129807][T10543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.150294][T10543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.216336][T10543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.229308][T10543] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.240023][T10746] serio: Serial port ptm0 [ 141.241894][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.251662][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.265348][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.272662][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.295253][T10543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.305764][T10543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.385730][T10543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.545176][T10543] veth0_vlan: entered promiscuous mode [ 141.560631][T10543] veth1_vlan: entered promiscuous mode [ 141.605406][T10543] veth0_macvtap: entered promiscuous mode [ 141.614466][T10543] veth1_macvtap: entered promiscuous mode [ 141.634077][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.644814][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.654715][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.665200][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.675050][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.685674][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.695512][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.706297][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.716318][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.726954][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.737404][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.747953][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.761763][T10543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.778363][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.788851][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.798864][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.809388][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809424][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.809440][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809460][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.809475][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809492][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.809507][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.809524][T10543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.809539][T10543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.812784][T10543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.822249][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 141.851783][T10543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.928807][T10543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.937542][T10543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.946322][T10543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.134315][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 142.134332][ T29] audit: type=1400 audit(1722549265.320:1173): avc: denied { listen } for pid=10813 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.191864][T10822] FAULT_INJECTION: forcing a failure. [ 142.191864][T10822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.205043][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.0.2355 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 142.215838][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 142.225950][T10822] Call Trace: [ 142.229340][T10822] [ 142.232292][T10822] dump_stack_lvl+0xf2/0x150 [ 142.237059][T10822] dump_stack+0x15/0x20 [ 142.241398][T10822] should_fail_ex+0x229/0x230 [ 142.246118][T10822] should_fail+0xb/0x10 [ 142.250328][T10822] should_fail_usercopy+0x1a/0x20 [ 142.255488][T10822] _copy_to_user+0x1e/0xa0 [ 142.259949][T10822] simple_read_from_buffer+0xa0/0x110 [ 142.265463][T10822] proc_fail_nth_read+0xfc/0x140 [ 142.270436][T10822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.276111][T10822] vfs_read+0x1a2/0x6e0 [ 142.280389][T10822] ? __rcu_read_unlock+0x4e/0x70 [ 142.285353][T10822] ? __fget_files+0x1da/0x210 [ 142.290085][T10822] ksys_read+0xeb/0x1b0 [ 142.294333][T10822] __x64_sys_read+0x42/0x50 [ 142.298887][T10822] x64_sys_call+0x2a36/0x2e00 [ 142.303634][T10822] do_syscall_64+0xc9/0x1c0 [ 142.308166][T10822] ? clear_bhb_loop+0x55/0xb0 [ 142.312871][T10822] ? clear_bhb_loop+0x55/0xb0 [ 142.317600][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.323544][T10822] RIP: 0033:0x7fd11d2b5dfc [ 142.327970][T10822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 142.347654][T10822] RSP: 002b:00007fd11bf37040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.356109][T10822] RAX: ffffffffffffffda RBX: 00007fd11d445f80 RCX: 00007fd11d2b5dfc [ 142.364107][T10822] RDX: 000000000000000f RSI: 00007fd11bf370b0 RDI: 0000000000000004 [ 142.372118][T10822] RBP: 00007fd11bf370a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.380181][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.388330][T10822] R13: 000000000000000b R14: 00007fd11d445f80 R15: 00007ffe7d746fd8 [ 142.396438][T10822] [ 142.408264][ T29] audit: type=1326 audit(1722549265.590:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10824 comm="syz.3.2357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d9ddc73b9 code=0x0 [ 142.412875][T10827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2356'. [ 142.512899][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2360'. [ 142.529434][ T29] audit: type=1400 audit(1722549265.720:1175): avc: denied { write } for pid=10833 comm="syz.1.2360" path="socket:[37123]" dev="sockfs" ino=37123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.555055][ T29] audit: type=1400 audit(1722549265.720:1176): avc: denied { map } for pid=10833 comm="syz.1.2360" path="socket:[37124]" dev="sockfs" ino=37124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 142.614587][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.831874][ T8] IPVS: starting estimator thread 0... [ 142.852227][ T7020] hsr_slave_0: left promiscuous mode [ 142.874642][T10836] ================================================================== [ 142.883026][T10836] BUG: KCSAN: data-race in mptcp_subflow_get_send / tcp_rearm_rto [ 142.890870][T10836] [ 142.893191][T10836] write to 0xffff88810b3454d2 of 1 bytes by interrupt on cpu 1: [ 142.900827][T10836] tcp_rearm_rto+0x1a9/0x200 [ 142.905445][T10836] tcp_event_new_data_sent+0x161/0x1c0 [ 142.910931][T10836] tcp_write_xmit+0x1296/0x31c0 [ 142.915792][T10836] __tcp_push_pending_frames+0x6a/0x1a0 [ 142.921352][T10836] tcp_rcv_established+0x953/0xef0 [ 142.926491][T10836] tcp_v4_do_rcv+0x662/0x740 [ 142.931174][T10836] tcp_v4_rcv+0x1b13/0x1ed0 [ 142.935686][T10836] ip_protocol_deliver_rcu+0x36d/0x720 [ 142.941156][T10836] ip_local_deliver_finish+0x17d/0x210 [ 142.946650][T10836] ip_local_deliver+0xec/0x1d0 [ 142.951433][T10836] ip_rcv_finish+0x193/0x1b0 [ 142.956035][T10836] ip_rcv+0x64/0x140 [ 142.959942][T10836] __netif_receive_skb+0x10a/0x280 [ 142.965064][T10836] process_backlog+0x22e/0x440 [ 142.969839][T10836] __napi_poll+0x63/0x3c0 [ 142.974177][T10836] net_rx_action+0x3a1/0x7f0 [ 142.978780][T10836] handle_softirqs+0xc3/0x280 [ 142.983473][T10836] do_softirq+0x5e/0x90 [ 142.987645][T10836] __local_bh_enable_ip+0x6e/0x70 [ 142.992686][T10836] _raw_spin_unlock_bh+0x36/0x40 [ 142.997640][T10836] mptcp_recvmsg+0x851/0x16a0 [ 143.002326][T10836] inet_recvmsg+0x171/0x290 [ 143.006837][T10836] sock_recvmsg+0xfe/0x170 [ 143.011290][T10836] __sys_recvfrom+0x16b/0x230 [ 143.015982][T10836] __x64_sys_recvfrom+0x78/0x90 [ 143.020992][T10836] x64_sys_call+0x17e2/0x2e00 [ 143.025786][T10836] do_syscall_64+0xc9/0x1c0 [ 143.030314][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.036222][T10836] [ 143.038544][T10836] read to 0xffff88810b3454d2 of 1 bytes by task 10836 on cpu 0: [ 143.046182][T10836] mptcp_subflow_get_send+0x1ac/0x7f0 [ 143.051583][T10836] mptcp_sched_get_send+0x218/0x2e0 [ 143.056876][T10836] __mptcp_push_pending+0x100/0x4e0 [ 143.062164][T10836] mptcp_release_cb+0x3ca/0x6d0 [ 143.067032][T10836] release_sock+0x13b/0x150 [ 143.071537][T10836] mptcp_sendmsg+0xcee/0xe60 [ 143.076139][T10836] inet6_sendmsg+0xc5/0xd0 [ 143.080596][T10836] __sock_sendmsg+0x8b/0x180 [ 143.085209][T10836] ____sys_sendmsg+0x312/0x410 [ 143.089987][T10836] __sys_sendmsg+0x1e9/0x280 [ 143.094585][T10836] __x64_sys_sendmsg+0x46/0x50 [ 143.099360][T10836] x64_sys_call+0x26f8/0x2e00 [ 143.104061][T10836] do_syscall_64+0xc9/0x1c0 [ 143.108584][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.114489][T10836] [ 143.116811][T10836] value changed: 0x00 -> 0x05 [ 143.121483][T10836] [ 143.123802][T10836] Reported by Kernel Concurrency Sanitizer on: [ 143.129949][T10836] CPU: 0 UID: 0 PID: 10836 Comm: syz.0.2361 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 143.140816][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 143.150873][T10836] ================================================================== SYZFAIL: failed to send rpc fd=3 want=1944 sent=0 n=-1 (errno 32: Broken pipe) [ 143.183944][ T7020] hsr_slave_1: left promiscuous mode [ 143.191830][ T29] audit: type=1400 audit(1722549266.380:1177): avc: denied { write } for pid=3244 comm="syz-executor" path="pipe:[1685]" dev="pipefs" ino=1685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 143.215147][T10858] IPVS: using max 2256 ests per chain, 112800 per kthread [ 143.223476][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.231015][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.265316][ T29] audit: type=1400 audit(1722549266.380:1178): avc: denied { recv } for pid=7020 comm="kworker/u8:30" saddr=10.128.0.163 src=38596 daddr=10.128.0.172 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 143.301121][ T29] audit: type=1400 audit(1722549266.460:1179): avc: denied { module_request } for pid=10862 comm="syz.4.2367" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.332383][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.340011][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.357615][ T7020] veth1_macvtap: left promiscuous mode [ 143.363126][ T7020] veth0_macvtap: left promiscuous mode [ 143.368682][ T7020] veth1_vlan: left promiscuous mode [ 143.373986][ T7020] veth0_vlan: left promiscuous mode [ 143.462710][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 143.473291][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 143.529022][T10862] syz_tun (unregistering): left promiscuous mode [ 143.586038][T10823] syz_tun (unregistering): left allmulticast mode [ 144.031055][ T7020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.079152][ T7020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.149525][ T7020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.209320][ T7020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.270866][ T7020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.348955][ T7020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.409793][ T7020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.479096][ T7020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.552834][ T7020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.579497][ T7020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.628975][ T7020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.698869][ T7020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.781400][ T7020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.819163][ T7020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.889104][ T7020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.939438][ T7020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.999935][ T7020] bridge_slave_1: left allmulticast mode [ 145.005665][ T7020] bridge_slave_1: left promiscuous mode [ 145.011288][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.019273][ T7020] bridge_slave_0: left allmulticast mode [ 145.025062][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.033121][ T7020] bridge_slave_1: left allmulticast mode [ 145.038824][ T7020] bridge_slave_1: left promiscuous mode [ 145.044510][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.052292][ T7020] bridge_slave_0: left allmulticast mode [ 145.058036][ T7020] bridge_slave_0: left promiscuous mode [ 145.064189][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.072234][ T7020] bridge_slave_1: left allmulticast mode [ 145.077931][ T7020] bridge_slave_1: left promiscuous mode [ 145.084021][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.091701][ T7020] bridge_slave_0: left allmulticast mode [ 145.097478][ T7020] bridge_slave_0: left promiscuous mode [ 145.103127][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.111446][ T7020] bridge_slave_1: left allmulticast mode [ 145.117167][ T7020] bridge_slave_1: left promiscuous mode [ 145.122824][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.130755][ T7020] bridge_slave_0: left allmulticast mode [ 145.136485][ T7020] bridge_slave_0: left promiscuous mode [ 145.142296][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.283018][ T7020] ip6gretap0 (unregistering): left promiscuous mode [ 145.618156][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.628768][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.639782][ T7020] bond0 (unregistering): Released all slaves [ 145.649314][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.659650][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.669719][ T7020] bond0 (unregistering): Released all slaves [ 145.679016][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.689873][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.700253][ T7020] bond0 (unregistering): Released all slaves [ 145.709674][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.720098][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.730259][ T7020] bond0 (unregistering): Released all slaves [ 145.889742][ T7020] hsr_slave_0: left promiscuous mode [ 145.895487][ T7020] hsr_slave_1: left promiscuous mode [ 145.901446][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.909133][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.916856][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.924291][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.931857][ T7020] veth1_virt_wifi: left promiscuous mode [ 145.939423][ T7020] hsr_slave_0: left promiscuous mode [ 145.944999][ T7020] hsr_slave_1: left promiscuous mode [ 145.950620][ T7020] batman_adv: batadv0: Removing interface: team0 [ 145.957364][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.964902][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.972466][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.979925][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.989256][ T7020] hsr_slave_0: left promiscuous mode [ 145.994897][ T7020] hsr_slave_1: left promiscuous mode [ 146.000719][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.008135][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.015700][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.023094][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.030789][ T7020] veth1_virt_wifi: left promiscuous mode [ 146.038494][ T7020] hsr_slave_0: left promiscuous mode [ 146.044191][ T7020] hsr_slave_1: left promiscuous mode [ 146.050099][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.057555][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.065164][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.072596][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.085710][ T7020] veth1_macvtap: left promiscuous mode [ 146.091255][ T7020] veth0_macvtap: left promiscuous mode [ 146.096798][ T7020] veth1_vlan: left promiscuous mode [ 146.102058][ T7020] veth0_vlan: left promiscuous mode [ 146.107804][ T7020] veth1_macvtap: left promiscuous mode [ 146.113304][ T7020] veth0_macvtap: left promiscuous mode [ 146.118894][ T7020] veth1_vlan: left promiscuous mode [ 146.124102][ T7020] veth0_vlan: left promiscuous mode [ 146.129926][ T7020] veth1_macvtap: left promiscuous mode [ 146.135443][ T7020] veth0_macvtap: left promiscuous mode [ 146.140989][ T7020] veth1_vlan: left promiscuous mode [ 146.146245][ T7020] veth0_vlan: left promiscuous mode [ 146.151907][ T7020] veth1_macvtap: left promiscuous mode [ 146.157468][ T7020] veth0_macvtap: left promiscuous mode [ 146.162993][ T7020] veth1_vlan: left promiscuous mode [ 146.168273][ T7020] veth0_vlan: left promiscuous mode [ 146.381756][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 146.392632][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 146.469183][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 146.480156][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 146.544618][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 146.554909][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 146.628753][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 146.639463][ T7020] team0 (unregistering): Port device team_slave_0 removed [ 148.948918][ T7020] IPVS: stop unused estimator thread 0... [ 149.059864][ T7020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.148442][ T7020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.228263][ T7020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.309257][ T7020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.378344][ T7020] bridge_slave_1: left allmulticast mode [ 149.384006][ T7020] bridge_slave_1: left promiscuous mode [ 149.389762][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.397505][ T7020] bridge_slave_0: left allmulticast mode [ 149.403164][ T7020] bridge_slave_0: left promiscuous mode [ 149.408890][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.518610][ T7020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.529255][ T7020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.540263][ T7020] bond0 (unregistering): Released all slaves [ 149.658107][ T7020] hsr_slave_0: left promiscuous mode [ 149.663894][ T7020] hsr_slave_1: left promiscuous mode [ 149.669743][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.677179][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.684709][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.692108][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.701111][ T7020] veth1_macvtap: left promiscuous mode [ 149.706615][ T7020] veth0_macvtap: left promiscuous mode [ 149.712166][ T7020] veth1_vlan: left promiscuous mode [ 149.717498][ T7020] veth0_vlan: left promiscuous mode [ 149.796384][ T7020] team0 (unregistering): Port device team_slave_1 removed [ 149.807788][ T7020] team0 (unregistering): Port device team_slave_0 removed