last executing test programs: 3.207076768s ago: executing program 0 (id=398): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1002}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb217}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.187767169s ago: executing program 0 (id=399): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3>L?\xc8?\x06\x90\xe6B.\xc6\xaaz\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000000000001000000000950000000000004e"], 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x5d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.319312311s ago: executing program 0 (id=408): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@local, 0x34ff}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) iopl(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) epoll_wait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x1, 0x1000) fallocate(r5, 0x0, 0x400000000000000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006}]}) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x2, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/308, @ANYRES32=r10, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) 2.303295951s ago: executing program 4 (id=409): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x9e5d) 2.259921305s ago: executing program 4 (id=410): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x5436d2e4c8123f08) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create(0x6) syz_clone3(&(0x7f0000000400)={0x2100, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000200), {0x25}, &(0x7f00000004c0)=""/43, 0x2b, &(0x7f0000000300)=""/255, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r5}}, 0x58) getdents64(r9, &(0x7f00000019c0)=""/4096, 0x1000) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"/1770], 0x6ea) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000a00)) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000001100)="94", 0x1) tee(r4, r9, 0x81, 0x0) vmsplice(r8, &(0x7f0000000580)=[{&(0x7f00000000c0)="d7", 0x1}], 0x1, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4) open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r0], 0x0, 0x1b}, 0x20) 2.017027655s ago: executing program 4 (id=415): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000d00850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)=0xffff, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="2dfc0380090000001f5ccc", 0xb, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}}, 0x1c) mkdir(&(0x7f00000020c0)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt6_stats\x00') ppoll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) mprotect(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x200000d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) execveat(r2, 0x0, 0x0, 0x0, 0x400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 1.967489219s ago: executing program 2 (id=417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070400000000000000ac1e0001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe6b000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) 1.964698989s ago: executing program 3 (id=418): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3>L?\xc8?\x06\x90\xe6B.\xc6\xaaz\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000000000001000000000950000000000004e"], 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x5d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 1.963419039s ago: executing program 2 (id=419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xec}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '%/@/&&%#}'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '{|-@'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x10, 0x20, 0xfff, 0x6, {{0xb, 0x4, 0x2, 0x3a, 0x2c, 0x65, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x2, 0x12, "27dd830dfea561f3794023e1b0889bc0"}]}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000300)={@empty, 0x0}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f00000004c0)={0x8ac, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')$-'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x40, 0x5, "7d6b314c1bf5a9d3e415c2db28be5c4a64f43dc6a583f77f33afc1d69707702bc6b7e319cb4c644ce80b965a46642b7a4e6288364986ab603be91b0c"}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'A+{#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#$-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6bcd}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '--/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33c}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#/&$\f]-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5de}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'G%-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%/@/&&%#}'}]}]}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "e5a9ecd9851017e5cae91ac296aadf83d3f350735554cb66dec84fb1538104e76e5615644eafc561b1ec7e93af812ad5faf00b042aac7fd62327f54c38730e9aa369ceb27e8f33154cc033cd489f105ea735e0b4349edc30815aafe579e383206c1207a5bd4135c2f73737b3941b87bb8a6902df3a638811719ab5f7445204f1a8f49ffe15110ee643c53a2f9f5a5c27f9cf7b4f0ea180ab96d4d775b1be41f14cc947c8091ed1914f7615e229eae047bdf854dda2d5b9a7f735d392edd9fa56e09bf5402448c15c976ab9bd4794bfaa9e367af6a0456e287efd6708a245f03e0f9f53962d282da7d272"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "be6cd222124c725f15a77675ae03e10973a23024825e21b71cb43681942938f81468a0c4f2946765daec4bb45544b5c3af9ec146e4771c1ee5cb0488075cf670b838acca76d403198080abb6840957b4695d61b22e65253f266294f92494e10d057fb1f79d9194ef546dfb9d51fac571c59203699ac0b50265db083f7efa627738920c390a84d63879002bb1c22aed2e730032d58f9e34f22ef473065fb19333b8f2a0ce11fdce35554b21458ad854177724c1ec13cd43ce5e"}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{|-@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '()$\xf3]}\x16&7@@)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@*\'^-\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x95, 0x4, "bfdde057cf1ff4c858c54bca40c1d433831531948c78169a4a31cac3aa4041b1ddcb59faec1ba2ea0cf97f23410b16d5ec7c87d308851ccd6e5c404c8873dd3b612ba96787f39ce0e0f0280ece0e176a301591cbaad6015d44b6a6a56e5df223f0da286d6462c77d6125035c6b294776247cc150ce6b80b2fec482880297bc1a079e233d9c5f72a125e0baf9a0699f24c5"}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "cf1b78697332b32cb02c78ef707da541b46fdb4b3ca22b8879e2e2155f00bc1dcb1bf5b6e607db60ecbcd657f77cb38c19a9b9e2f66fed8e1637e66c5e0155c53a005404817387e6ad0f5863682cd6763605da662e2e6ae8998b2effce21e2448a4a355319e6fcc4c84348e5581d8e6dec48c323c59ce9abdf8454454531bb6ba91d9d7a0e7adf831a17fb325079587c9fa2a7283b7ce2ec0c27b2ce737a6dc6596f1650348d9f6dc80452a1c6f96b1a15f2023e4d520824d4d8f3c099bcf5ee3931dbb59ad461118105f0ca943186de41db3e181edd016a2b2e74b161e6658e79408c1331cf6c5c1d06c2b1b47fc3df8611af57b540f538"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x8ac}}, 0x4000) prctl$PR_SET_FP_MODE(0x2d, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) (async) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000e40)={0x0, 0x0, 0x20}, &(0x7f0000000e80)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000ec0)={r10, 0x5d, "73b6b107805629702fe180b8c3a9e0775347c7bb1a1710875e1c21927dcdfe54d807034816172550f35ccd9995be08408f09f8cb7e8aaac83160568da5527cfd6420b300bf8bbf586d9ae4b2b94a8fb8b1bd47ff7ca6f65ba894959636"}, &(0x7f0000000f40)=0x65) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000f80), {[{{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0xd, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xf2232c64778f286b, 0xa42b0e4fb4fea2d3, 0x60ac43adb585b214]}}, 0x82, 0xfff, 0xa5, 0x102, 0x2, 0x10, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x202}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffff00, 0xff000000, 0x3, 0x8, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xfffc, 0xfffb, 0x0, 0x800, 0x8, 0x5, 'netdevsim0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0xb1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @local, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (async) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000001440), 0x8) (async) getpid() r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x30, r12, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20010000}, 0x20000000) (async) write$binfmt_aout(r2, &(0x7f00000015c0)={{0xcc, 0x8, 0xf, 0x26d, 0x2c9, 0x5, 0x282, 0x7}, "4a89f986a06ad1c36ad744bd1bb589028ac4b63f4c084b880d0397cd2afaec069ab629f6d2f3dbbe58854945f184114b8eae01e3efd6cb3e996a73a2393e29ce35016c855bf69bc72417a815cf87c047fb20f1d8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x974) sendto(r1, &(0x7f0000001f40)="79c2c8a5311d32392222c634d779b97f338ea5be54", 0x15, 0x4080, &(0x7f0000001f80)=@isdn={0x22, 0x8, 0x6, 0x1, 0x7}, 0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002000)={0x0, @multicast1, @multicast1}, &(0x7f0000002040)=0xc) (async) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000020c0)=@req={0x28, &(0x7f0000002080)={'ip6gretap0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}}) (async) syz_open_dev$vcsu(&(0x7f0000002100), 0x5, 0x200041) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000002140)=""/174, &(0x7f0000002200)=0xae) 1.869185757s ago: executing program 2 (id=420): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x9e5d) 1.863889257s ago: executing program 2 (id=421): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 11) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 1.612738798s ago: executing program 3 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x40000006) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000ffa000/0x3000)=nil) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000000000000000950000000000002b0bc9260000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000003a413d3df0a18670ce17c7e981093059bd30c55bacab56b1293dead56e83f035b36981751f6158651ec3b305f9c99c78686530492f5ab0c5e19340c7591c8ac079e5c69aebd3b025caf4a598437cad5547fa0c31f38b76cb8e56199224a601dbc434df5e92c47b966406cdf5c34f6ba0b6e4ce994a3cbe58"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4) connect$bt_l2cap(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() 1.444454802s ago: executing program 0 (id=426): socket$kcm(0xa, 0x0, 0x3a) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./bus\x00', &(0x7f0000000340), &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES8=r6], 0x25, 0x3) r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x340800, &(0x7f00000005c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@appraise}, {@hash}, {@uid_gt}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100"/15, @ANYRESDEC=r8, @ANYRES64=0x0, @ANYRES64, @ANYRES8=r8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0x300}) 1.150954416s ago: executing program 4 (id=428): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e97441d69db45de9b4ec081c8eb4534bc5a9284f843e2bc71745", 0x1d}, {&(0x7f0000000300)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0x90}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)=""/202, 0x581}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.133528907s ago: executing program 1 (id=429): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000400)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x18, 0x7ffffff7}, 0x0) 1.032763835s ago: executing program 1 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$cgroup_pressure(r3, &(0x7f0000000000)={'some'}, 0x2f) (async) write$cgroup_pressure(r3, &(0x7f0000000080)={'full'}, 0x2f) (async) read$eventfd(r2, 0x0, 0x0) (async) write$cgroup_pressure(r3, &(0x7f0000000280)={'some'}, 0x2f) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000073907800000000e000050000000000000c907801000000000000000000001c0000000000000000"], 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'veth1_to_batadv\x00', {}, 0x787d}) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000025c0)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=""/28, 0x1c}, 0x9}, {{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f00000005c0)=""/85, 0x55}, {&(0x7f0000000640)=""/79, 0x4f}], 0x3}, 0x8001}, {{&(0x7f0000000700)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000780)=""/67, 0x43}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/239, 0xef}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/211, 0xd3}, {&(0x7f0000001cc0)=""/111, 0x6f}, {&(0x7f0000002700)=""/243, 0xf3}, {&(0x7f0000001e40)=""/71, 0x47}], 0xa, &(0x7f0000001f80)=""/32, 0x20}, 0x8}, {{&(0x7f0000001fc0)=@x25, 0x80, &(0x7f0000002280)=[{&(0x7f0000002040)=""/196, 0xc4}, {&(0x7f0000002140)=""/70, 0x46}, {&(0x7f00000021c0)=""/138, 0x8a}], 0x3, &(0x7f00000022c0)=""/28, 0x1c}, 0x9}, {{&(0x7f0000002300)=@nfc_llcp, 0x80, &(0x7f0000002540)=[{&(0x7f0000002380)=""/201, 0xc9}, {&(0x7f0000002480)=""/42, 0x2a}, {&(0x7f00000024c0)=""/80, 0x50}], 0x3, &(0x7f0000002580)=""/59, 0x3b}, 0xfef}], 0x5, 0x2, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @private1}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0xf}, 0x0, {[0x0, 0x4, 0xffffffff, 0x0, 0xfffffff5]}}, 0x5c) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e6b923d033620b1fc51dcff96cf42632713be747c401fa1f3f48d4def4b19a0c3ae74eb436a6b1ef4d2c89bb2e2ba141f18fcb79d2396d132794ab50e23bad90edec7243be863926bf20e890e99ffc84565c488646dd9c1c28d4a064f72869b073df1635d73b20bdca1949b038ff9ad620e2345d1336962142a147d0436361e03d442f3f18286756994e20fc90d8277316b5ad5195a81d59e34a465e1c177c4c82521f55045bf69cf3e3fdfced947fa605640de3fd48828537017cd310702bb26978e9a87e"], 0x7c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async) ioperm(0x0, 0x2, 0x0) 943.699763ms ago: executing program 1 (id=431): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000010000018010000", @ANYRES32, @ANYBLOB="0000000000000010b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0xa00}, 0x90) 936.542023ms ago: executing program 2 (id=432): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x9e5d) 924.403924ms ago: executing program 1 (id=433): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3>L?\xc8?\x06\x90\xe6B.\xc6\xaaz\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000000000001000000000950000000000004e"], 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x5d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 876.296098ms ago: executing program 2 (id=434): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x305040, 0xe5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000800)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x10000, 0xfffffffd}}, 0x120) readv(0xffffffffffffffff, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000300), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) sched_setscheduler(r2, 0x2, &(0x7f0000002080)=0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4, @remote}, 0x10) 661.373886ms ago: executing program 3 (id=435): sync() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) sync() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1}}) read(r6, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec2", 0x39, r7) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000010a01080000000000000000000000010c0004400000f6ffffffbd18f15f1c2dee71a0fe4931620005"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x8, 0x791, 0x0, @loopback, @mcast1, 0x10, 0x0, 0x0, 0x4}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007e300000900010073797a300000000044000000090a0104000000000000000000002cea0800084000001b000900020073797a31000000000900010073797a30000000000800"], 0x8c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x400000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYRES8=r9], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000280)=[{{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x8) 537.196116ms ago: executing program 0 (id=436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070400000000000000ac1e0001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe6b00000000000000000000000000010000000000000000000000ffffffffffffff8d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) 508.957028ms ago: executing program 0 (id=437): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@local, 0x34ff}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) iopl(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) epoll_wait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x1, 0x1000) fallocate(r5, 0x0, 0x400000000000000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006}]}) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x2, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/308, @ANYRES32=r10, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) 182.952885ms ago: executing program 4 (id=438): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x5436d2e4c8123f08) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create(0x6) syz_clone3(&(0x7f0000000400)={0x2100, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000200), {0x25}, &(0x7f00000004c0)=""/43, 0x2b, &(0x7f0000000300)=""/255, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r5}}, 0x58) getdents64(r9, &(0x7f00000019c0)=""/4096, 0x1000) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c460108f102060000000000000002000600080000001900000038000000a7000000f0f80000070020000100140006000500000000000000007004000000040000000500000004000000ae4b930e0100000030050000040000005a480000070000000500000000040000080000000800000004000000ace57280944224783cc8e2f3305fdbbb21b3f0b4245f95a2b8dea11f7b8228c27716c56c1edc8d00c517d35d3f1ceb80f146b2ec758dabb9045d373e4113bd6385eb57056d9b3b41fcd2cd8d7fdb05011856f11f43e9c5a51dcef47525612bd5515f47404cc4d4f34f2049ff62120455366b00000000000000000000000000000053c689ebea00"/1770], 0x6ea) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000a00)) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000001100)="94", 0x1) tee(r4, r9, 0x81, 0x0) vmsplice(r8, &(0x7f0000000580)=[{&(0x7f00000000c0)="d7", 0x1}], 0x1, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4) open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r0], 0x0, 0x1b}, 0x20) 182.069095ms ago: executing program 1 (id=439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070400000000000000ac1e0001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe6b000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) 117.28017ms ago: executing program 3 (id=440): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000007c0)='./bus\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@subsystem='net_prio'}]}) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) inotify_init() socket(0x15, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0xffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 116.825ms ago: executing program 1 (id=441): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = dup(r1) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) getpeername$l2tp6(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000c40)={&(0x7f0000000b40), 0x10, &(0x7f0000000c00)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 115.46351ms ago: executing program 3 (id=442): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000f423fece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 115.22664ms ago: executing program 3 (id=443): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001000000005000f0053ff3a8805001000000000000800010072b1d99c09c453652da17d0a39014355e4b321f7cebd21acf0700c1434429e0a19e848a9799dede240d5ef8e68fdf67332f8ab8826e062baed22f79438e8b4333958e640333c7fe10922d6997e805b6fdac22c5ff96428a2cbbe21a4369cad908e6e19e21e86156c95567385039c53ad5dc12a27e350921cdd1c18026fe63e343d20def907d5", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000080)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004081}, 0x28805) fcntl$setsig(r3, 0xa, 0x13) (async) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) (async) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000ac0)="d6aeb0") 0s ago: executing program 4 (id=444): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x9e5d) kernel console output (not intermixed with test programs): binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.279617][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.297146][ T29] audit: type=1400 audit(1722989364.151:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.328910][ T29] audit: type=1400 audit(1722989364.211:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.341077][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 26.392493][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 26.424007][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 26.457144][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.464195][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.471359][ T3259] bridge_slave_0: entered allmulticast mode [ 26.477771][ T3259] bridge_slave_0: entered promiscuous mode [ 26.494292][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.501608][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.508903][ T3259] bridge_slave_1: entered allmulticast mode [ 26.515273][ T3259] bridge_slave_1: entered promiscuous mode [ 26.560405][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.569562][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 26.586293][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.593337][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.601169][ T3260] bridge_slave_0: entered allmulticast mode [ 26.607431][ T3260] bridge_slave_0: entered promiscuous mode [ 26.614641][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.626154][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.633327][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.640533][ T3262] bridge_slave_0: entered allmulticast mode [ 26.647335][ T3262] bridge_slave_0: entered promiscuous mode [ 26.653814][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.661339][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.668595][ T3260] bridge_slave_1: entered allmulticast mode [ 26.674895][ T3260] bridge_slave_1: entered promiscuous mode [ 26.693464][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.700542][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.707739][ T3262] bridge_slave_1: entered allmulticast mode [ 26.714074][ T3262] bridge_slave_1: entered promiscuous mode [ 26.744269][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.753948][ T3259] team0: Port device team_slave_0 added [ 26.759772][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 26.771196][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.780961][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.791044][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.800594][ T3259] team0: Port device team_slave_1 added [ 26.835819][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.842884][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.850432][ T3268] bridge_slave_0: entered allmulticast mode [ 26.856899][ T3268] bridge_slave_0: entered promiscuous mode [ 26.879928][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.887063][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.894156][ T3268] bridge_slave_1: entered allmulticast mode [ 26.900625][ T3268] bridge_slave_1: entered promiscuous mode [ 26.911558][ T3260] team0: Port device team_slave_0 added [ 26.918111][ T3262] team0: Port device team_slave_0 added [ 26.924337][ T3260] team0: Port device team_slave_1 added [ 26.930138][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.937113][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.962975][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.974139][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.981170][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.007133][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.028538][ T3262] team0: Port device team_slave_1 added [ 27.040838][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.047849][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.073780][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.089289][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.107658][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.114650][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.140623][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.156725][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.165794][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.172892][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.180101][ T3258] bridge_slave_0: entered allmulticast mode [ 27.186457][ T3258] bridge_slave_0: entered promiscuous mode [ 27.193250][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.200407][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.207585][ T3258] bridge_slave_1: entered allmulticast mode [ 27.213834][ T3258] bridge_slave_1: entered promiscuous mode [ 27.220019][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.226961][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.252884][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.266026][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.272973][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.298859][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.339038][ T3259] hsr_slave_0: entered promiscuous mode [ 27.345109][ T3259] hsr_slave_1: entered promiscuous mode [ 27.360928][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.375671][ T3262] hsr_slave_0: entered promiscuous mode [ 27.381527][ T3262] hsr_slave_1: entered promiscuous mode [ 27.387404][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.394952][ T3262] Cannot create hsr debugfs directory [ 27.400744][ T3268] team0: Port device team_slave_0 added [ 27.407208][ T3268] team0: Port device team_slave_1 added [ 27.418173][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.448627][ T3260] hsr_slave_0: entered promiscuous mode [ 27.454512][ T3260] hsr_slave_1: entered promiscuous mode [ 27.460586][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.468152][ T3260] Cannot create hsr debugfs directory [ 27.483743][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.490740][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.516834][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.528054][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.535016][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.560915][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.596024][ T3258] team0: Port device team_slave_0 added [ 27.604373][ T3258] team0: Port device team_slave_1 added [ 27.636358][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.643300][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.669199][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.682460][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.689413][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.715285][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.753174][ T3268] hsr_slave_0: entered promiscuous mode [ 27.759200][ T3268] hsr_slave_1: entered promiscuous mode [ 27.765757][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.773280][ T3268] Cannot create hsr debugfs directory [ 27.808103][ T3258] hsr_slave_0: entered promiscuous mode [ 27.814117][ T3258] hsr_slave_1: entered promiscuous mode [ 27.820156][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.827719][ T3258] Cannot create hsr debugfs directory [ 27.890832][ T3259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.899141][ T3259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.926250][ T3259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.934490][ T3259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.985620][ T3262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.995965][ T3260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.006010][ T3262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.016880][ T3260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.026451][ T3262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.036646][ T3260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.046448][ T3260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.054643][ T3262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.090155][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.098668][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.127360][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.135896][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.172250][ T3258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.180654][ T3258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.189330][ T3258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.197976][ T3258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.208540][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.234406][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.254379][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.271052][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.282116][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.294693][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.301738][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.314620][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.329374][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.336467][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.346312][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.357820][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.367866][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.374974][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.383917][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.390981][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.409054][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.416185][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.428602][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.435634][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.444086][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.451220][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.480589][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.487696][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.512098][ T3262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.522559][ T3262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.536525][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.567412][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.578134][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.591102][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.607746][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.622342][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.643566][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.650630][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.660968][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.668044][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.683793][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.718380][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.739701][ T3258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.750089][ T3258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.778112][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.813976][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.842810][ T3259] veth0_vlan: entered promiscuous mode [ 28.884107][ T3259] veth1_vlan: entered promiscuous mode [ 28.918071][ T3259] veth0_macvtap: entered promiscuous mode [ 28.927109][ T3262] veth0_vlan: entered promiscuous mode [ 28.935787][ T3259] veth1_macvtap: entered promiscuous mode [ 28.947626][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.966157][ T3262] veth1_vlan: entered promiscuous mode [ 28.973327][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.992351][ T3268] veth0_vlan: entered promiscuous mode [ 29.010475][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.027513][ T3262] veth0_macvtap: entered promiscuous mode [ 29.034762][ T3262] veth1_macvtap: entered promiscuous mode [ 29.042490][ T3259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.051249][ T3259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.060040][ T3259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.068812][ T3259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.093553][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.104096][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.118241][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.130488][ T3268] veth1_vlan: entered promiscuous mode [ 29.144125][ T3260] veth0_vlan: entered promiscuous mode [ 29.155770][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.166291][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.177487][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.198970][ T3262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.207781][ T3262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.216509][ T3262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.225204][ T3262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.244603][ T3260] veth1_vlan: entered promiscuous mode [ 29.254224][ T3268] veth0_macvtap: entered promiscuous mode [ 29.269882][ T3258] veth0_vlan: entered promiscuous mode [ 29.278272][ T3268] veth1_macvtap: entered promiscuous mode [ 29.288114][ T3258] veth1_vlan: entered promiscuous mode [ 29.294196][ T3401] sit0: entered allmulticast mode [ 29.310135][ T3260] veth0_macvtap: entered promiscuous mode [ 29.324080][ C0] hrtimer: interrupt took 51992 ns [ 29.329994][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.340547][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.350486][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.360952][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.377373][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.391513][ T3260] veth1_macvtap: entered promiscuous mode [ 29.399014][ T3401] sit0: entered promiscuous mode [ 29.462619][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.473236][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.483199][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.493761][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.505923][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.517946][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.526744][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.535497][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.544175][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.565082][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.575544][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.585349][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.595864][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.605729][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.616139][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.628318][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.639454][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.650071][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.659934][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.670418][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.680315][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.690932][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.703838][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.718452][ T3260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.727186][ T3260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.735909][ T3260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.744601][ T3260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.763357][ T3258] veth0_macvtap: entered promiscuous mode [ 29.782310][ T3258] veth1_macvtap: entered promiscuous mode [ 29.812124][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.822628][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.832534][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.843077][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.852934][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.863344][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.873158][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.883810][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.896025][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.919428][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.929948][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.939766][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.950241][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.960246][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.970771][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.980573][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.991096][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.008128][ T3413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.014898][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 30.014931][ T29] audit: type=1400 audit(1722989368.981:128): avc: denied { create } for pid=3412 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.020856][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.025842][ T29] audit: type=1400 audit(1722989368.981:129): avc: denied { bind } for pid=3412 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.054459][ T3258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.079869][ T3258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.088551][ T3258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.094950][ T29] audit: type=1400 audit(1722989369.051:130): avc: denied { ioctl } for pid=3412 comm="syz.2.3" path="socket:[3313]" dev="sockfs" ino=3313 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.097299][ T3258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.156009][ T29] audit: type=1400 audit(1722989369.121:131): avc: denied { ioctl } for pid=3412 comm="syz.2.3" path="socket:[3324]" dev="sockfs" ino=3324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.198707][ T29] audit: type=1400 audit(1722989369.167:132): avc: denied { read } for pid=3416 comm="syz.4.5" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.221133][ T29] audit: type=1400 audit(1722989369.167:133): avc: denied { open } for pid=3416 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.244099][ T29] audit: type=1400 audit(1722989369.177:134): avc: denied { ioctl } for pid=3416 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.305844][ T3417] Zero length message leads to an empty skb [ 30.316202][ T29] audit: type=1400 audit(1722989369.257:135): avc: denied { create } for pid=3416 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.335573][ T29] audit: type=1400 audit(1722989369.257:136): avc: denied { ioctl } for pid=3416 comm="syz.4.5" path="socket:[3338]" dev="sockfs" ino=3338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.342508][ T3423] capability: warning: `syz.3.8' uses 32-bit capabilities (legacy support in use) [ 30.359930][ T29] audit: type=1400 audit(1722989369.277:137): avc: denied { create } for pid=3416 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 30.392901][ T3420] sit0: entered allmulticast mode [ 30.420481][ T1637] tipc: Subscription rejected, illegal request [ 30.432649][ T3422] loop3: detected capacity change from 0 to 512 [ 30.471296][ T3422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.484448][ T3422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.490558][ T3428] loop0: detected capacity change from 0 to 1024 [ 30.511015][ T3424] sit0: entered promiscuous mode [ 30.528271][ T3422] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.8: invalid indirect mapped block 83886080 (level 1) [ 30.534460][ T3428] ======================================================= [ 30.534460][ T3428] WARNING: The mand mount option has been deprecated and [ 30.534460][ T3428] and is ignored by this kernel. Remove the mand [ 30.534460][ T3428] option from the mount to silence this warning. [ 30.534460][ T3428] ======================================================= [ 30.548691][ T3435] loop1: detected capacity change from 0 to 128 [ 30.591357][ T3422] EXT4-fs (loop3): Remounting filesystem read-only [ 30.601255][ T3422] EXT4-fs (loop3): 1 orphan inode deleted [ 30.607051][ T3422] EXT4-fs (loop3): 1 truncate cleaned up [ 30.613136][ T3431] loop4: detected capacity change from 0 to 512 [ 30.621839][ T3428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.637553][ T3422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.650407][ T3435] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 30.667481][ T3422] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 30.675321][ T3422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.688573][ T3428] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.756847][ T3435] loop1: detected capacity change from 128 to 0 [ 30.793698][ T3439] syz.1.9: attempt to access beyond end of device [ 30.793698][ T3439] loop1: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 30.889169][ T3439] syz.1.9: attempt to access beyond end of device [ 30.889169][ T3439] loop1: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 30.911919][ T3439] syz.1.9: attempt to access beyond end of device [ 30.911919][ T3439] loop1: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 30.942653][ T3439] syz.1.9: attempt to access beyond end of device [ 30.942653][ T3439] loop1: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 30.972948][ T3442] loop3: detected capacity change from 0 to 8192 [ 30.980373][ T3431] loop4: detected capacity change from 0 to 128 [ 30.988302][ T3428] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 31.006972][ T3428] syz.0.1 (3428) used greatest stack depth: 11648 bytes left [ 31.019405][ T3431] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 31.032906][ T3439] syz.1.9: attempt to access beyond end of device [ 31.032906][ T3439] loop1: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 31.068924][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.085515][ T3439] syz.1.9: attempt to access beyond end of device [ 31.085515][ T3439] loop1: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 31.139657][ T3439] syz.1.9: attempt to access beyond end of device [ 31.139657][ T3439] loop1: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 31.167903][ T3439] syz.1.9: attempt to access beyond end of device [ 31.167903][ T3439] loop1: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 31.181792][ T3449] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.187429][ T3439] syz.1.9: attempt to access beyond end of device [ 31.187429][ T3439] loop1: rw=0, sector=33, nr_sectors = 1 limit=0 [ 31.206629][ T3439] FAT-fs (loop1): Directory bread(block 33) failed [ 31.213948][ T3439] syz.1.9: attempt to access beyond end of device [ 31.213948][ T3439] loop1: rw=0, sector=34, nr_sectors = 1 limit=0 [ 31.227634][ T3439] FAT-fs (loop1): Directory bread(block 34) failed [ 31.234157][ T3439] FAT-fs (loop1): Directory bread(block 35) failed [ 31.241109][ T3439] FAT-fs (loop1): Directory bread(block 36) failed [ 31.248237][ T3439] FAT-fs (loop1): Directory bread(block 37) failed [ 31.254806][ T3439] FAT-fs (loop1): Directory bread(block 38) failed [ 31.262260][ T3439] FAT-fs (loop1): Directory bread(block 39) failed [ 31.269285][ T3439] FAT-fs (loop1): Directory bread(block 40) failed [ 31.276167][ T3435] FAT-fs (loop1): Directory bread(block 33) failed [ 31.276820][ T3452] process 'syz.0.12' launched './file2' with NULL argv: empty string added [ 31.284260][ T3435] FAT-fs (loop1): Directory bread(block 34) failed [ 31.324302][ T3340] IPVS: starting estimator thread 0... [ 31.367489][ T1637] FAT-fs (loop1): bread failed in fat_clusters_flush [ 31.374342][ T3259] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 31.424971][ T3455] IPVS: using max 2880 ests per chain, 144000 per kthread [ 31.975393][ T3474] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 31.990340][ T3474] macsec1: entered promiscuous mode [ 31.995690][ T3474] macsec1: entered allmulticast mode [ 32.000971][ T3474] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 32.036869][ T3474] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 32.044297][ T3474] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 32.123219][ T3459] syz.4.17 (3459) used greatest stack depth: 11288 bytes left [ 32.142038][ T3491] FAULT_INJECTION: forcing a failure. [ 32.142038][ T3491] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.155236][ T3491] CPU: 1 UID: 0 PID: 3491 Comm: syz.0.23 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 32.165789][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 32.175927][ T3491] Call Trace: [ 32.179193][ T3491] [ 32.182107][ T3491] dump_stack_lvl+0xf2/0x150 [ 32.186695][ T3491] dump_stack+0x15/0x20 [ 32.190972][ T3491] should_fail_ex+0x229/0x230 [ 32.195644][ T3491] should_fail+0xb/0x10 [ 32.199790][ T3491] should_fail_usercopy+0x1a/0x20 [ 32.204855][ T3491] _copy_from_user+0x1e/0xd0 [ 32.209480][ T3491] move_addr_to_kernel+0x82/0x120 [ 32.214499][ T3491] copy_msghdr_from_user+0x271/0x2a0 [ 32.219827][ T3491] __sys_sendmsg+0x17d/0x280 [ 32.224462][ T3491] __x64_sys_sendmsg+0x46/0x50 [ 32.229216][ T3491] x64_sys_call+0x2689/0x2d60 [ 32.233886][ T3491] do_syscall_64+0xc9/0x1c0 [ 32.238405][ T3491] ? clear_bhb_loop+0x55/0xb0 [ 32.243151][ T3491] ? clear_bhb_loop+0x55/0xb0 [ 32.247821][ T3491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.253780][ T3491] RIP: 0033:0x7f3fe38679f9 [ 32.258183][ T3491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.278194][ T3491] RSP: 002b:00007f3fe24e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.286680][ T3491] RAX: ffffffffffffffda RBX: 00007f3fe39f5f80 RCX: 00007f3fe38679f9 [ 32.294633][ T3491] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 32.302630][ T3491] RBP: 00007f3fe24e7090 R08: 0000000000000000 R09: 0000000000000000 [ 32.310587][ T3491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.318553][ T3491] R13: 0000000000000000 R14: 00007f3fe39f5f80 R15: 00007ffd941b2bd8 [ 32.326516][ T3491] [ 32.440998][ T3500] bridge_slave_0: left allmulticast mode [ 32.446922][ T3500] bridge_slave_0: left promiscuous mode [ 32.453203][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.471972][ T3500] bridge_slave_1: left allmulticast mode [ 32.477783][ T3500] bridge_slave_1: left promiscuous mode [ 32.483499][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.516855][ T3504] loop2: detected capacity change from 0 to 512 [ 32.553726][ T3500] bond0: (slave bond_slave_0): Releasing backup interface [ 32.591890][ T3500] bond0: (slave bond_slave_1): Releasing backup interface [ 32.675604][ T3500] team0: Port device team_slave_0 removed [ 32.709063][ T3500] team0: Port device team_slave_1 removed [ 32.736780][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.744341][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.761106][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.768734][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.137588][ T3527] sit0: left promiscuous mode [ 33.194745][ T3527] sit0: entered promiscuous mode [ 33.378747][ T3535] FAULT_INJECTION: forcing a failure. [ 33.378747][ T3535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.391835][ T3535] CPU: 1 UID: 0 PID: 3535 Comm: syz.2.39 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 33.402367][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 33.412841][ T3535] Call Trace: [ 33.416128][ T3535] [ 33.419044][ T3535] dump_stack_lvl+0xf2/0x150 [ 33.423674][ T3535] dump_stack+0x15/0x20 [ 33.427886][ T3535] should_fail_ex+0x229/0x230 [ 33.432555][ T3535] should_fail+0xb/0x10 [ 33.436767][ T3535] should_fail_usercopy+0x1a/0x20 [ 33.441788][ T3535] _copy_from_user+0x1e/0xd0 [ 33.446452][ T3535] ____sys_sendmsg+0x1a4/0x410 [ 33.451206][ T3535] __sys_sendmsg+0x1e9/0x280 [ 33.455845][ T3535] __x64_sys_sendmsg+0x46/0x50 [ 33.460596][ T3535] x64_sys_call+0x2689/0x2d60 [ 33.465262][ T3535] do_syscall_64+0xc9/0x1c0 [ 33.469754][ T3535] ? clear_bhb_loop+0x55/0xb0 [ 33.474422][ T3535] ? clear_bhb_loop+0x55/0xb0 [ 33.479140][ T3535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.485021][ T3535] RIP: 0033:0x7f55403579f9 [ 33.489418][ T3535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.509056][ T3535] RSP: 002b:00007f553efd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.517513][ T3535] RAX: ffffffffffffffda RBX: 00007f55404e5f80 RCX: 00007f55403579f9 [ 33.525527][ T3535] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 33.533479][ T3535] RBP: 00007f553efd7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.541444][ T3535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.549401][ T3535] R13: 0000000000000000 R14: 00007f55404e5f80 R15: 00007ffc1003ece8 [ 33.557434][ T3535] [ 33.668546][ T3551] loop0: detected capacity change from 0 to 512 [ 33.697970][ T3551] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.706151][ T3556] loop3: detected capacity change from 0 to 512 [ 33.707087][ T3551] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 33.711384][ T3551] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 33.725139][ T3556] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.44: bg 0: block 288: padding at end of block bitmap is not set [ 33.730867][ T3551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 33.752968][ T3556] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 33.755257][ T3551] System zones: 0-2, 18-18, 34-34 [ 33.762716][ T3556] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.44: attempt to clear invalid blocks 1024 len 1 [ 33.781103][ T3556] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.44: invalid indirect mapped block 1819239214 (level 0) [ 33.782825][ T3562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 33.804155][ T3556] EXT4-fs (loop3): 1 truncate cleaned up [ 33.805504][ T3551] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.810222][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.829094][ T3551] EXT4-fs (loop0): 1 truncate cleaned up [ 33.844706][ T3562] loop2: detected capacity change from 0 to 512 [ 33.853031][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.855756][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.871098][ T3562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.887269][ T3562] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.45: corrupted in-inode xattr: e_name out of bounds [ 33.901714][ T3562] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.915356][ T3562] EXT4-fs (loop2): 1 truncate cleaned up [ 33.921352][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.948623][ T3565] infiniband syz1: set active [ 33.953293][ T3565] infiniband syz1: added bond0 [ 33.963877][ T3565] RDS/IB: syz1: added [ 33.968633][ T3565] smc: adding ib device syz1 with port count 1 [ 33.971191][ T3567] EXT4-fs error (device loop0): ext4_generic_delete_entry:2678: inode #12: block 13: comm syz.0.42: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 33.974824][ T3565] smc: ib device syz1 port 1 has pnetid [ 33.996838][ T3567] EXT4-fs error (device loop0) in ext4_delete_entry:2749: Corrupt filesystem [ 34.113154][ T3565] syz.3.46 (3565) used greatest stack depth: 10944 bytes left [ 34.130936][ T3570] loop3: detected capacity change from 0 to 256 [ 34.138651][ T3570] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.153464][ T3570] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.248703][ T3575] FAULT_INJECTION: forcing a failure. [ 34.248703][ T3575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.261966][ T3575] CPU: 1 UID: 0 PID: 3575 Comm: syz.4.49 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 34.272450][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.282496][ T3575] Call Trace: [ 34.285761][ T3575] [ 34.288760][ T3575] dump_stack_lvl+0xf2/0x150 [ 34.293342][ T3575] dump_stack+0x15/0x20 [ 34.297487][ T3575] should_fail_ex+0x229/0x230 [ 34.302226][ T3575] should_fail+0xb/0x10 [ 34.306373][ T3575] should_fail_usercopy+0x1a/0x20 [ 34.311387][ T3575] strncpy_from_user+0x25/0x270 [ 34.316219][ T3575] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 34.321896][ T3575] getname_flags+0xb0/0x3b0 [ 34.326450][ T3575] __x64_sys_renameat2+0x6e/0xa0 [ 34.331366][ T3575] x64_sys_call+0x2cf1/0x2d60 [ 34.336050][ T3575] do_syscall_64+0xc9/0x1c0 [ 34.340642][ T3575] ? clear_bhb_loop+0x55/0xb0 [ 34.345320][ T3575] ? clear_bhb_loop+0x55/0xb0 [ 34.350019][ T3575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.355892][ T3575] RIP: 0033:0x7f269b1479f9 [ 34.360288][ T3575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.380010][ T3575] RSP: 002b:00007f2699dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 34.388519][ T3575] RAX: ffffffffffffffda RBX: 00007f269b2d5f80 RCX: 00007f269b1479f9 [ 34.396534][ T3575] RDX: 0000000000000005 RSI: 00000000200004c0 RDI: 0000000000000004 [ 34.404498][ T3575] RBP: 00007f2699dc7090 R08: 0000000000000002 R09: 0000000000000000 [ 34.412451][ T3575] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001 [ 34.420417][ T3575] R13: 0000000000000000 R14: 00007f269b2d5f80 R15: 00007ffc3f24f348 [ 34.428371][ T3575] [ 34.556011][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.582559][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.611030][ T3585] FAULT_INJECTION: forcing a failure. [ 34.611030][ T3585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.624317][ T3585] CPU: 0 UID: 0 PID: 3585 Comm: syz.0.52 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 34.634901][ T3585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.644946][ T3585] Call Trace: [ 34.648220][ T3585] [ 34.651151][ T3585] dump_stack_lvl+0xf2/0x150 [ 34.655831][ T3585] dump_stack+0x15/0x20 [ 34.660011][ T3585] should_fail_ex+0x229/0x230 [ 34.664720][ T3585] should_fail+0xb/0x10 [ 34.668882][ T3585] should_fail_usercopy+0x1a/0x20 [ 34.673910][ T3585] _copy_to_user+0x1e/0xa0 [ 34.678728][ T3585] simple_read_from_buffer+0xa0/0x110 [ 34.684122][ T3585] proc_fail_nth_read+0xfc/0x140 [ 34.689095][ T3585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 34.694649][ T3585] vfs_read+0x1a2/0x6e0 [ 34.698825][ T3585] ? __rcu_read_unlock+0x4e/0x70 [ 34.703926][ T3585] ? __fget_files+0x1da/0x210 [ 34.708693][ T3585] ksys_read+0xeb/0x1b0 [ 34.712929][ T3585] __x64_sys_read+0x42/0x50 [ 34.717438][ T3585] x64_sys_call+0x27d3/0x2d60 [ 34.722112][ T3585] do_syscall_64+0xc9/0x1c0 [ 34.726679][ T3585] ? clear_bhb_loop+0x55/0xb0 [ 34.731363][ T3585] ? clear_bhb_loop+0x55/0xb0 [ 34.736040][ T3585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.741990][ T3585] RIP: 0033:0x7f3fe386643c [ 34.746391][ T3585] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 34.766103][ T3585] RSP: 002b:00007f3fe24e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.774568][ T3585] RAX: ffffffffffffffda RBX: 00007f3fe39f5f80 RCX: 00007f3fe386643c [ 34.782527][ T3585] RDX: 000000000000000f RSI: 00007f3fe24e70a0 RDI: 0000000000000004 [ 34.790484][ T3585] RBP: 00007f3fe24e7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.798445][ T3585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.806400][ T3585] R13: 0000000000000000 R14: 00007f3fe39f5f80 R15: 00007ffd941b2bd8 [ 34.814361][ T3585] [ 34.853149][ T3590] loop0: detected capacity change from 0 to 256 [ 34.867967][ T3590] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.880560][ T3590] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.194896][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 35.194910][ T29] audit: type=1400 audit(1722989374.157:348): avc: denied { lock } for pid=3598 comm="syz.3.56" path="socket:[4530]" dev="sockfs" ino=4530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.412756][ T3603] rdma_rxe: rxe_newlink: failed to add bond0 [ 35.425549][ T3605] loop3: detected capacity change from 0 to 512 [ 35.441333][ T3605] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.59: bg 0: block 288: padding at end of block bitmap is not set [ 35.459949][ T3605] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 35.472923][ T3605] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.59: attempt to clear invalid blocks 1024 len 1 [ 35.486991][ T3605] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.59: invalid indirect mapped block 1819239214 (level 0) [ 35.501620][ T3605] EXT4-fs (loop3): 1 truncate cleaned up [ 35.508513][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.547465][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.566843][ T3618] loop2: detected capacity change from 0 to 512 [ 35.576604][ T3618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.589791][ T29] audit: type=1400 audit(1722989374.567:349): avc: denied { getopt } for pid=3619 comm="syz.3.65" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.610433][ T29] audit: type=1400 audit(1722989374.567:350): avc: denied { create } for pid=3619 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.629794][ T29] audit: type=1400 audit(1722989374.567:351): avc: denied { connect } for pid=3619 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.649239][ T29] audit: type=1400 audit(1722989374.567:352): avc: denied { write } for pid=3619 comm="syz.3.65" laddr=fe80::a lport=1 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.671733][ T29] audit: type=1400 audit(1722989374.567:353): avc: denied { read } for pid=3619 comm="syz.3.65" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.694139][ T29] audit: type=1400 audit(1722989374.567:354): avc: denied { open } for pid=3619 comm="syz.3.65" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.776003][ T3618] EXT4-fs (loop2): 1 truncate cleaned up [ 35.786490][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.826649][ T3626] loop0: detected capacity change from 0 to 1024 [ 35.833562][ T3626] EXT4-fs: Ignoring removed orlov option [ 35.839370][ T3626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.857185][ T3626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.867329][ T3618] capability: warning: `syz.2.64' uses deprecated v2 capabilities in a way that may be insecure [ 35.895643][ T29] audit: type=1400 audit(1722989374.877:355): avc: denied { read } for pid=3615 comm="syz.2.64" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.925108][ T3626] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.67: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 35.951039][ T3630] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.67: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 35.986240][ T3618] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.64: corrupted in-inode xattr: overlapping e_value [ 36.008737][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 36.020836][ T29] audit: type=1400 audit(1722989374.997:356): avc: denied { getopt } for pid=3623 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.027178][ T3618] EXT4-fs (loop2): Remounting filesystem read-only [ 36.047393][ T3618] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.64: unable to update i_inline_off [ 36.067186][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 36.092659][ T29] audit: type=1400 audit(1722989375.067:357): avc: denied { search } for pid=2998 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.132571][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.144605][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.250357][ T3638] rdma_rxe: rxe_newlink: failed to add bond0 [ 36.415792][ T3656] loop3: detected capacity change from 0 to 256 [ 36.439311][ T3656] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.475096][ T3656] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.611971][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 36.632760][ T3661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 36.641805][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 36.745687][ T3661] netlink: 72 bytes leftover after parsing attributes in process `syz.4.79'. [ 36.817443][ T3664] loop4: detected capacity change from 0 to 256 [ 36.840070][ T3664] vfat: Unknown parameter 'rodirnnumtail' [ 37.026039][ T3667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 37.053647][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.076321][ T3667] loop4: detected capacity change from 0 to 512 [ 37.098738][ T3667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.125194][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.148911][ T3667] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.80: corrupted in-inode xattr: e_name out of bounds [ 37.184806][ T3667] EXT4-fs (loop4): 1 truncate cleaned up [ 37.200221][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.212294][ T3667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.326296][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.359951][ T3682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 37.451018][ T28] bridge_slave_1: left allmulticast mode [ 37.456773][ T28] bridge_slave_1: left promiscuous mode [ 37.462445][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.471790][ T28] bridge_slave_0: left allmulticast mode [ 37.477523][ T28] bridge_slave_0: left promiscuous mode [ 37.483203][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.521682][ T3694] loop0: detected capacity change from 0 to 128 [ 37.557874][ T3694] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 37.565762][ T3694] FAT-fs (loop0): Filesystem has been set read-only [ 37.598569][ T3694] bio_check_eod: 122 callbacks suppressed [ 37.598580][ T3694] syz.0.86: attempt to access beyond end of device [ 37.598580][ T3694] loop0: rw=0, sector=97, nr_sectors = 128 limit=128 [ 37.621712][ T3694] syz.0.86: attempt to access beyond end of device [ 37.621712][ T3694] loop0: rw=1, sector=225, nr_sectors = 816 limit=128 [ 37.669033][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.679382][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.689664][ T28] bond0 (unregistering): Released all slaves [ 37.701383][ T3702] sit0: left promiscuous mode [ 37.742441][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.749896][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.757317][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.764695][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.766201][ T3705] sit0: entered promiscuous mode [ 37.772175][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772199][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772221][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772242][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772265][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772350][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772371][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.772392][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.836633][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.844161][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.851670][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.859091][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.866514][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.873933][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.881359][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.888847][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.896270][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.903655][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.911060][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.918510][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.925968][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.933398][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.940857][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.948267][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.955752][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.963204][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.970595][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.978045][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.985526][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 37.992966][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.000603][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008070][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008142][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008164][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008186][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008208][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008229][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008251][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.008325][ T8] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 38.010610][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.017744][ T8] hid-generic 0001:0000:0000.0001: hidraw0: HID v7.f7 Device [syz1] on syz1 [ 38.108623][ T3723] loop4: detected capacity change from 0 to 256 [ 38.115774][ T3723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.129059][ T3723] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.274225][ T28] hsr_slave_0: left promiscuous mode [ 38.282633][ T28] hsr_slave_1: left promiscuous mode [ 38.332900][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.340382][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.357677][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.365106][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.376558][ T28] veth1_macvtap: left promiscuous mode [ 38.382067][ T28] veth0_macvtap: left promiscuous mode [ 38.387585][ T28] veth1_vlan: left promiscuous mode [ 38.392884][ T28] veth0_vlan: left promiscuous mode [ 38.439911][ T3735] FAULT_INJECTION: forcing a failure. [ 38.439911][ T3735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.453122][ T3735] CPU: 1 UID: 0 PID: 3735 Comm: syz.0.95 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 38.463631][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 38.473827][ T3735] Call Trace: [ 38.477110][ T3735] [ 38.480041][ T3735] dump_stack_lvl+0xf2/0x150 [ 38.484713][ T3735] dump_stack+0x15/0x20 [ 38.488873][ T3735] should_fail_ex+0x229/0x230 [ 38.493580][ T3735] should_fail+0xb/0x10 [ 38.497777][ T3735] should_fail_usercopy+0x1a/0x20 [ 38.502802][ T3735] _copy_from_iter+0xd3/0xb00 [ 38.507504][ T3735] ? ___kmalloc_large_node+0xba/0x120 [ 38.512927][ T3735] ? __kmalloc_large_node_noprof+0x17/0xa0 [ 38.518733][ T3735] ? __virt_addr_valid+0x1ed/0x250 [ 38.523868][ T3735] ? __check_object_size+0x35b/0x510 [ 38.529200][ T3735] bcm_tx_setup+0x3cb/0xd30 [ 38.533708][ T3735] bcm_sendmsg+0x38b/0x470 [ 38.538212][ T3735] ? __pfx_bcm_sendmsg+0x10/0x10 [ 38.543178][ T3735] __sock_sendmsg+0x140/0x180 [ 38.547861][ T3735] ____sys_sendmsg+0x312/0x410 [ 38.552726][ T3735] __sys_sendmsg+0x1e9/0x280 [ 38.557323][ T3735] __x64_sys_sendmsg+0x46/0x50 [ 38.562154][ T3735] x64_sys_call+0x2689/0x2d60 [ 38.566841][ T3735] do_syscall_64+0xc9/0x1c0 [ 38.571430][ T3735] ? clear_bhb_loop+0x55/0xb0 [ 38.576123][ T3735] ? clear_bhb_loop+0x55/0xb0 [ 38.580806][ T3735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.586681][ T3735] RIP: 0033:0x7f3fe38679f9 [ 38.591071][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.610730][ T3735] RSP: 002b:00007f3fe24e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.619655][ T3735] RAX: ffffffffffffffda RBX: 00007f3fe39f5f80 RCX: 00007f3fe38679f9 [ 38.627660][ T3735] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 38.635616][ T3735] RBP: 00007f3fe24e7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.643654][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.652294][ T3735] R13: 0000000000000000 R14: 00007f3fe39f5f80 R15: 00007ffd941b2bd8 [ 38.660265][ T3735] [ 38.719248][ T3749] loop2: detected capacity change from 0 to 164 [ 38.743542][ T3749] Unable to read rock-ridge attributes [ 38.822281][ T3749] can: request_module (can-proto-0) failed. [ 38.872319][ T28] team0 (unregistering): Port device team_slave_1 removed [ 38.894610][ T28] team0 (unregistering): Port device team_slave_0 removed [ 39.073516][ T3776] loop4: detected capacity change from 0 to 256 [ 39.138657][ T3780] loop3: detected capacity change from 0 to 512 [ 39.146594][ T3780] hub 9-0:1.0: USB hub found [ 39.151220][ T3780] hub 9-0:1.0: 8 ports detected [ 39.320105][ T3790] sit0: left promiscuous mode [ 39.519184][ T3797] sit0: entered promiscuous mode [ 39.612940][ T3804] loop4: detected capacity change from 0 to 512 [ 39.869437][ T3808] loop3: detected capacity change from 0 to 1024 [ 39.879291][ T3808] EXT4-fs: Ignoring removed i_version option [ 39.889023][ T3810] FAULT_INJECTION: forcing a failure. [ 39.889023][ T3810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.902215][ T3808] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.902269][ T3808] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.908656][ T3810] CPU: 0 UID: 0 PID: 3810 Comm: syz.0.109 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 39.925789][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 39.935896][ T3810] Call Trace: [ 39.937825][ T3808] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 39.939165][ T3810] [ 39.939173][ T3810] dump_stack_lvl+0xf2/0x150 [ 39.955826][ T3810] dump_stack+0x15/0x20 [ 39.960038][ T3810] should_fail_ex+0x229/0x230 [ 39.964732][ T3810] should_fail+0xb/0x10 [ 39.968900][ T3810] should_fail_usercopy+0x1a/0x20 [ 39.974031][ T3810] _copy_from_iter+0xd3/0xb00 [ 39.978710][ T3810] ? __virt_addr_valid+0x1ed/0x250 [ 39.983822][ T3810] ? __check_object_size+0x35b/0x510 [ 39.989189][ T3810] bcm_tx_setup+0x3cb/0xd30 [ 39.993699][ T3810] bcm_sendmsg+0x38b/0x470 [ 39.998158][ T3810] ? __pfx_bcm_sendmsg+0x10/0x10 [ 40.003099][ T3810] __sock_sendmsg+0x140/0x180 [ 40.007808][ T3810] ____sys_sendmsg+0x312/0x410 [ 40.012576][ T3810] __sys_sendmsg+0x1e9/0x280 [ 40.017207][ T3810] __x64_sys_sendmsg+0x46/0x50 [ 40.022029][ T3810] x64_sys_call+0x2689/0x2d60 [ 40.026711][ T3810] do_syscall_64+0xc9/0x1c0 [ 40.031239][ T3810] ? clear_bhb_loop+0x55/0xb0 [ 40.035920][ T3810] ? clear_bhb_loop+0x55/0xb0 [ 40.040618][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.046527][ T3810] RIP: 0033:0x7f3fe38679f9 [ 40.050943][ T3810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.070570][ T3810] RSP: 002b:00007f3fe24e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.078981][ T3810] RAX: ffffffffffffffda RBX: 00007f3fe39f5f80 RCX: 00007f3fe38679f9 [ 40.087049][ T3810] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 40.095056][ T3810] RBP: 00007f3fe24e7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.102806][ T3669] chnl_net:caif_netlink_parms(): no params data found [ 40.103015][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.117715][ T3810] R13: 0000000000000000 R14: 00007f3fe39f5f80 R15: 00007ffd941b2bd8 [ 40.125676][ T3810] [ 40.185537][ T28] IPVS: stop unused estimator thread 0... [ 40.203834][ T3822] loop0: detected capacity change from 0 to 512 [ 40.236063][ T3822] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.112: bg 0: block 288: padding at end of block bitmap is not set [ 40.256930][ T3822] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 40.266058][ T3822] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.112: attempt to clear invalid blocks 1024 len 1 [ 40.279659][ T3822] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.112: invalid indirect mapped block 1819239214 (level 0) [ 40.280592][ T3828] netlink: 'syz.3.108': attribute type 3 has an invalid length. [ 40.302318][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 40.302330][ T29] audit: type=1400 audit(1722989379.257:395): avc: denied { sqpoll } for pid=3807 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.343311][ T3822] EXT4-fs (loop0): 1 truncate cleaned up [ 40.349626][ T3822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.375083][ T29] audit: type=1400 audit(1722989379.347:396): avc: denied { read } for pid=3834 comm="syz.2.116" path="socket:[5318]" dev="sockfs" ino=5318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.400335][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.407470][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.416427][ T3669] bridge_slave_0: entered allmulticast mode [ 40.422989][ T3669] bridge_slave_0: entered promiscuous mode [ 40.434998][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.442099][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.450634][ T3669] bridge_slave_1: entered allmulticast mode [ 40.460243][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.473049][ T3669] bridge_slave_1: entered promiscuous mode [ 40.554398][ T3669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.574417][ T3669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.628282][ T3669] team0: Port device team_slave_0 added [ 40.635228][ T3669] team0: Port device team_slave_1 added [ 40.691919][ T3669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.698967][ T3669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.724888][ T3669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.749987][ T29] audit: type=1326 audit(1722989379.717:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.773326][ T29] audit: type=1326 audit(1722989379.717:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.796445][ T29] audit: type=1326 audit(1722989379.717:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.819695][ T29] audit: type=1326 audit(1722989379.717:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.826636][ T3669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.842882][ T29] audit: type=1326 audit(1722989379.717:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.849873][ T3669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.873038][ T29] audit: type=1326 audit(1722989379.717:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.898980][ T3669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.902179][ T3866] loop0: detected capacity change from 0 to 512 [ 40.922768][ T29] audit: type=1326 audit(1722989379.717:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.934980][ T3866] hub 9-0:1.0: USB hub found [ 40.939498][ T29] audit: type=1326 audit(1722989379.717:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2677f379f9 code=0x7fc00000 [ 40.962774][ T3866] hub 9-0:1.0: 8 ports detected [ 41.033797][ T3669] hsr_slave_0: entered promiscuous mode [ 41.040079][ T3669] hsr_slave_1: entered promiscuous mode [ 41.122581][ T3880] FAULT_INJECTION: forcing a failure. [ 41.122581][ T3880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.135659][ T3880] CPU: 0 UID: 0 PID: 3880 Comm: syz.3.121 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 41.146263][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 41.156341][ T3880] Call Trace: [ 41.159656][ T3880] [ 41.162582][ T3880] dump_stack_lvl+0xf2/0x150 [ 41.167260][ T3880] dump_stack+0x15/0x20 [ 41.171444][ T3880] should_fail_ex+0x229/0x230 [ 41.176160][ T3880] should_fail+0xb/0x10 [ 41.180364][ T3880] should_fail_usercopy+0x1a/0x20 [ 41.185382][ T3880] _copy_from_iter+0xd3/0xb00 [ 41.190122][ T3880] ? __virt_addr_valid+0x1ed/0x250 [ 41.195281][ T3880] ? __check_object_size+0x35b/0x510 [ 41.200568][ T3880] bcm_tx_setup+0x3cb/0xd30 [ 41.205066][ T3880] bcm_sendmsg+0x38b/0x470 [ 41.209550][ T3880] ? __pfx_bcm_sendmsg+0x10/0x10 [ 41.214476][ T3880] __sock_sendmsg+0x140/0x180 [ 41.219152][ T3880] ____sys_sendmsg+0x312/0x410 [ 41.223904][ T3880] __sys_sendmsg+0x1e9/0x280 [ 41.228566][ T3880] __x64_sys_sendmsg+0x46/0x50 [ 41.233332][ T3880] x64_sys_call+0x2689/0x2d60 [ 41.237998][ T3880] do_syscall_64+0xc9/0x1c0 [ 41.242495][ T3880] ? clear_bhb_loop+0x55/0xb0 [ 41.247224][ T3880] ? clear_bhb_loop+0x55/0xb0 [ 41.251937][ T3880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.257865][ T3880] RIP: 0033:0x7f2677f379f9 [ 41.262328][ T3880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.281933][ T3880] RSP: 002b:00007f2676bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.290334][ T3880] RAX: ffffffffffffffda RBX: 00007f26780c5f80 RCX: 00007f2677f379f9 [ 41.298292][ T3880] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 41.306248][ T3880] RBP: 00007f2676bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.314202][ T3880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.322158][ T3880] R13: 0000000000000000 R14: 00007f26780c5f80 R15: 00007ffeae1dd6c8 [ 41.330117][ T3880] [ 41.510618][ T3898] tipc: Can't bind to reserved service type 2 [ 41.732803][ T3669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.788569][ T3669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.803678][ T3669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.821519][ T3669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.921718][ T3669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.949924][ T3669] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.965613][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.972776][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.000837][ T3669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.011219][ T3669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.027561][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.034692][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.053590][ T3939] FAULT_INJECTION: forcing a failure. [ 42.053590][ T3939] name failslab, interval 1, probability 0, space 0, times 1 [ 42.066289][ T3939] CPU: 1 UID: 0 PID: 3939 Comm: syz.4.128 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 42.076870][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 42.086981][ T3939] Call Trace: [ 42.090249][ T3939] [ 42.093246][ T3939] dump_stack_lvl+0xf2/0x150 [ 42.097842][ T3939] dump_stack+0x15/0x20 [ 42.102001][ T3939] should_fail_ex+0x229/0x230 [ 42.106705][ T3939] ? alloc_slab_obj_exts+0x32/0x80 [ 42.111820][ T3939] should_failslab+0x8f/0xb0 [ 42.116482][ T3939] __kmalloc_node_noprof+0xa8/0x380 [ 42.121678][ T3939] alloc_slab_obj_exts+0x32/0x80 [ 42.126617][ T3939] __memcg_slab_post_alloc_hook+0x31b/0x650 [ 42.132522][ T3939] ? __alloc_skb+0x10b/0x310 [ 42.137181][ T3939] kmem_cache_alloc_node_noprof+0x1c3/0x2b0 [ 42.143076][ T3939] __alloc_skb+0x10b/0x310 [ 42.147520][ T3939] alloc_skb_with_frags+0x7f/0x400 [ 42.152629][ T3939] ? handle_mm_fault+0x169a/0x2940 [ 42.157784][ T3939] sock_alloc_send_pskb+0x435/0x4f0 [ 42.162992][ T3939] unix_dgram_sendmsg+0x472/0xff0 [ 42.168088][ T3939] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 42.173634][ T3939] __sock_sendmsg+0x140/0x180 [ 42.178326][ T3939] ____sys_sendmsg+0x312/0x410 [ 42.183091][ T3939] __sys_sendmmsg+0x269/0x500 [ 42.187802][ T3939] __x64_sys_sendmmsg+0x57/0x70 [ 42.192666][ T3939] x64_sys_call+0xa49/0x2d60 [ 42.197307][ T3939] do_syscall_64+0xc9/0x1c0 [ 42.201825][ T3939] ? clear_bhb_loop+0x55/0xb0 [ 42.206508][ T3939] ? clear_bhb_loop+0x55/0xb0 [ 42.211186][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.217185][ T3939] RIP: 0033:0x7f269b1479f9 [ 42.221600][ T3939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.241383][ T3939] RSP: 002b:00007f2699dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.249845][ T3939] RAX: ffffffffffffffda RBX: 00007f269b2d5f80 RCX: 00007f269b1479f9 [ 42.257898][ T3939] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000005 [ 42.265863][ T3939] RBP: 00007f2699dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.273870][ T3939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.281846][ T3939] R13: 0000000000000000 R14: 00007f269b2d5f80 R15: 00007ffc3f24f348 [ 42.289838][ T3939] [ 42.357444][ T3669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.383164][ T3957] netlink: 184 bytes leftover after parsing attributes in process `syz.3.129'. [ 42.407094][ T3957] loop3: detected capacity change from 0 to 128 [ 42.430399][ T3957] vfat: Unknown parameter '0xffffffffffffffff' [ 42.545493][ T3669] veth0_vlan: entered promiscuous mode [ 42.563004][ T3669] veth1_vlan: entered promiscuous mode [ 42.579859][ T3973] pim6reg: entered allmulticast mode [ 42.590660][ T3973] pim6reg: left allmulticast mode [ 42.690080][ T3669] veth0_macvtap: entered promiscuous mode [ 42.716974][ T3669] veth1_macvtap: entered promiscuous mode [ 42.743629][ T3669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.754140][ T3669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.764038][ T3669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.774500][ T3669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.784339][ T3669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.794798][ T3669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.845969][ T3669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.870992][ T3669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.881526][ T3669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.891332][ T3669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.901789][ T3669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.911658][ T3669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.922098][ T3669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.947902][ T3669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.962628][ T3669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.971574][ T3669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.980346][ T3669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.989064][ T3669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.050615][ T4018] loop0: detected capacity change from 0 to 512 [ 43.059604][ T4018] hub 9-0:1.0: USB hub found [ 43.064225][ T4018] hub 9-0:1.0: 8 ports detected [ 43.152554][ T4027] rdma_rxe: rxe_newlink: failed to add bond0 [ 43.274092][ T4033] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 43.274482][ T4035] loop1: detected capacity change from 0 to 512 [ 43.288667][ T4035] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.307865][ T4037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.141'. [ 43.310704][ T4035] EXT4-fs (loop1): 1 truncate cleaned up [ 43.346003][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.364308][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 43.385579][ T4043] dccp_invalid_packet: P.Data Offset(172) too large [ 43.412500][ T4047] IPVS: Unknown mcast interface: le0 [ 43.493085][ T4061] FAULT_INJECTION: forcing a failure. [ 43.493085][ T4061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.506201][ T4061] CPU: 1 UID: 0 PID: 4061 Comm: syz.4.145 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 43.516798][ T4061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.526854][ T4061] Call Trace: [ 43.530178][ T4061] [ 43.533098][ T4061] dump_stack_lvl+0xf2/0x150 [ 43.537701][ T4061] dump_stack+0x15/0x20 [ 43.541899][ T4061] should_fail_ex+0x229/0x230 [ 43.546587][ T4061] should_fail+0xb/0x10 [ 43.550746][ T4061] should_fail_usercopy+0x1a/0x20 [ 43.555863][ T4061] _copy_from_iter+0xd3/0xb00 [ 43.560572][ T4061] ? ___kmalloc_large_node+0xba/0x120 [ 43.565988][ T4061] ? __kmalloc_large_node_noprof+0x17/0xa0 [ 43.571796][ T4061] ? __virt_addr_valid+0x1ed/0x250 [ 43.577021][ T4061] ? __check_object_size+0x35b/0x510 [ 43.582365][ T4061] bcm_tx_setup+0x3cb/0xd30 [ 43.586956][ T4061] bcm_sendmsg+0x38b/0x470 [ 43.591457][ T4061] ? __pfx_bcm_sendmsg+0x10/0x10 [ 43.596393][ T4061] __sock_sendmsg+0x140/0x180 [ 43.601077][ T4061] ____sys_sendmsg+0x312/0x410 [ 43.605915][ T4061] __sys_sendmsg+0x1e9/0x280 [ 43.610523][ T4061] __x64_sys_sendmsg+0x46/0x50 [ 43.615295][ T4061] x64_sys_call+0x2689/0x2d60 [ 43.620148][ T4061] do_syscall_64+0xc9/0x1c0 [ 43.624662][ T4061] ? clear_bhb_loop+0x55/0xb0 [ 43.629369][ T4061] ? clear_bhb_loop+0x55/0xb0 [ 43.634043][ T4061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.640000][ T4061] RIP: 0033:0x7f269b1479f9 [ 43.644406][ T4061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.664016][ T4061] RSP: 002b:00007f2699dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.672434][ T4061] RAX: ffffffffffffffda RBX: 00007f269b2d5f80 RCX: 00007f269b1479f9 [ 43.680450][ T4061] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 43.688568][ T4061] RBP: 00007f2699dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.696796][ T4061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.704760][ T4061] R13: 0000000000000000 R14: 00007f269b2d5f80 R15: 00007ffc3f24f348 [ 43.712729][ T4061] [ 43.756660][ T4035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.785693][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 43.809988][ T4071] loop2: detected capacity change from 0 to 512 [ 43.845683][ T4080] syz1: rxe_newlink: already configured on bond0 [ 43.861395][ T4076] loop4: detected capacity change from 0 to 128 [ 43.881652][ T4071] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.147: bg 0: block 288: padding at end of block bitmap is not set [ 43.935004][ T4076] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 43.941356][ T4071] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 43.979329][ T4095] loop1: detected capacity change from 0 to 1024 [ 43.988795][ T4076] usb usb5: usbfs: process 4076 (syz.4.149) did not claim interface 0 before use [ 44.005317][ T4071] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.147: attempt to clear invalid blocks 1024 len 1 [ 44.023949][ T4095] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.034898][ T4095] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.048756][ T4071] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.147: invalid indirect mapped block 1819239214 (level 0) [ 44.064520][ T4071] EXT4-fs (loop2): 1 truncate cleaned up [ 44.070844][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.083101][ T4095] jbd2_journal_init_inode: Cannot locate journal superblock [ 44.090537][ T4095] EXT4-fs (loop1): Could not load journal inode [ 44.119557][ T4095] loop1: detected capacity change from 0 to 1024 [ 44.126771][ T4095] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 44.218346][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.622467][ T4134] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 44.690374][ T4136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 44.730721][ T4138] loop1: detected capacity change from 0 to 512 [ 44.739960][ T4136] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 44.777148][ T4138] EXT4-fs: Ignoring removed bh option [ 44.784271][ T4136] bond1: (slave vcan1): Error -95 calling set_mac_address [ 44.792542][ T4141] FAULT_INJECTION: forcing a failure. [ 44.792542][ T4141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.805671][ T4141] CPU: 1 UID: 0 PID: 4141 Comm: syz.3.162 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 44.816252][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 44.826301][ T4141] Call Trace: [ 44.829598][ T4141] [ 44.832524][ T4141] dump_stack_lvl+0xf2/0x150 [ 44.837164][ T4141] dump_stack+0x15/0x20 [ 44.841346][ T4141] should_fail_ex+0x229/0x230 [ 44.846056][ T4141] should_fail+0xb/0x10 [ 44.850282][ T4141] should_fail_usercopy+0x1a/0x20 [ 44.855312][ T4141] _copy_from_iter+0xd3/0xb00 [ 44.859989][ T4141] ? ___kmalloc_large_node+0xba/0x120 [ 44.865423][ T4141] ? __kmalloc_large_node_noprof+0x17/0xa0 [ 44.871338][ T4141] ? __virt_addr_valid+0x1ed/0x250 [ 44.876477][ T4141] ? __check_object_size+0x35b/0x510 [ 44.881763][ T4141] bcm_tx_setup+0x3cb/0xd30 [ 44.886338][ T4141] bcm_sendmsg+0x38b/0x470 [ 44.890833][ T4141] ? __pfx_bcm_sendmsg+0x10/0x10 [ 44.895782][ T4141] __sock_sendmsg+0x140/0x180 [ 44.900467][ T4141] ____sys_sendmsg+0x312/0x410 [ 44.905236][ T4141] __sys_sendmsg+0x1e9/0x280 [ 44.909908][ T4141] __x64_sys_sendmsg+0x46/0x50 [ 44.914746][ T4141] x64_sys_call+0x2689/0x2d60 [ 44.919500][ T4141] do_syscall_64+0xc9/0x1c0 [ 44.924007][ T4141] ? clear_bhb_loop+0x55/0xb0 [ 44.928684][ T4141] ? clear_bhb_loop+0x55/0xb0 [ 44.933365][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.939342][ T4141] RIP: 0033:0x7f2677f379f9 [ 44.943745][ T4141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.963350][ T4141] RSP: 002b:00007f2676bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.971797][ T4141] RAX: ffffffffffffffda RBX: 00007f26780c5f80 RCX: 00007f2677f379f9 [ 44.979770][ T4141] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 44.987831][ T4141] RBP: 00007f2676bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.995847][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.004472][ T4141] R13: 0000000000000000 R14: 00007f26780c5f80 R15: 00007ffeae1dd6c8 [ 45.012445][ T4141] [ 45.020799][ T4138] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.161: invalid block [ 45.045181][ T4138] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.161: couldn't read orphan inode 15 (err -117) [ 45.057476][ T4138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.072028][ T4145] syz1: rxe_newlink: already configured on bond0 [ 45.136503][ T3669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.150167][ T4151] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.177641][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 45.207799][ T4155] loop2: detected capacity change from 0 to 512 [ 45.231447][ T4155] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.168: bg 0: block 288: padding at end of block bitmap is not set [ 45.250497][ T4175] loop3: detected capacity change from 0 to 256 [ 45.258478][ T4155] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 45.271867][ T4175] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.291989][ T4155] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.168: attempt to clear invalid blocks 1024 len 1 [ 45.306448][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 45.306460][ T29] audit: type=1400 audit(1722989384.285:491): avc: denied { mount } for pid=4172 comm="syz.3.173" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.348267][ T29] audit: type=1400 audit(1722989384.325:492): avc: denied { map } for pid=4172 comm="syz.3.173" path="socket:[6550]" dev="sockfs" ino=6550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.371402][ T29] audit: type=1400 audit(1722989384.325:493): avc: denied { read } for pid=4172 comm="syz.3.173" path="socket:[6550]" dev="sockfs" ino=6550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.387973][ T4186] rdma_rxe: rxe_newlink: failed to add bond0 [ 45.400477][ T4155] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.168: invalid indirect mapped block 1819239214 (level 0) [ 45.426030][ T4155] EXT4-fs (loop2): 1 truncate cleaned up [ 45.434477][ T4189] FAULT_INJECTION: forcing a failure. [ 45.434477][ T4189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.434921][ T4155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.447610][ T4189] CPU: 0 UID: 0 PID: 4189 Comm: syz.1.177 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 45.470154][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 45.480257][ T4189] Call Trace: [ 45.483526][ T4189] [ 45.486483][ T4189] dump_stack_lvl+0xf2/0x150 [ 45.491074][ T4189] dump_stack+0x15/0x20 [ 45.495240][ T4189] should_fail_ex+0x229/0x230 [ 45.499914][ T4189] should_fail+0xb/0x10 [ 45.504051][ T4189] should_fail_usercopy+0x1a/0x20 [ 45.509107][ T4189] _copy_from_iter+0xd3/0xb00 [ 45.513827][ T4189] ? ___kmalloc_large_node+0xba/0x120 [ 45.519224][ T4189] ? __kmalloc_large_node_noprof+0x17/0xa0 [ 45.525047][ T4189] ? __virt_addr_valid+0x1ed/0x250 [ 45.530148][ T4189] ? __check_object_size+0x35b/0x510 [ 45.535438][ T4189] bcm_tx_setup+0x3cb/0xd30 [ 45.540003][ T4189] bcm_sendmsg+0x38b/0x470 [ 45.544477][ T4189] ? __pfx_bcm_sendmsg+0x10/0x10 [ 45.549415][ T4189] __sock_sendmsg+0x140/0x180 [ 45.554153][ T4189] ____sys_sendmsg+0x312/0x410 [ 45.558908][ T4189] __sys_sendmsg+0x1e9/0x280 [ 45.563481][ T4189] __x64_sys_sendmsg+0x46/0x50 [ 45.568228][ T4189] x64_sys_call+0x2689/0x2d60 [ 45.572918][ T4189] do_syscall_64+0xc9/0x1c0 [ 45.577467][ T4189] ? clear_bhb_loop+0x55/0xb0 [ 45.582124][ T4189] ? clear_bhb_loop+0x55/0xb0 [ 45.585792][ T29] audit: type=1400 audit(1722989384.565:494): avc: denied { unmount } for pid=3262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.586821][ T4189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.586848][ T4189] RIP: 0033:0x7f7d79ff79f9 [ 45.586863][ T4189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.586878][ T4189] RSP: 002b:00007f7d78c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.586912][ T4189] RAX: ffffffffffffffda RBX: 00007f7d7a185f80 RCX: 00007f7d79ff79f9 [ 45.586925][ T4189] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 45.660863][ T4189] RBP: 00007f7d78c77090 R08: 0000000000000000 R09: 0000000000000000 [ 45.668817][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.676779][ T4189] R13: 0000000000000000 R14: 00007f7d7a185f80 R15: 00007ffdba5d02e8 [ 45.684731][ T4189] [ 45.721839][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.738825][ T4196] loop3: detected capacity change from 0 to 1024 [ 45.764293][ T4196] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.786946][ T4196] EXT4-fs: quotafile must be on filesystem root [ 45.801608][ T4200] loop2: detected capacity change from 0 to 4096 [ 45.814371][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.848616][ T4200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 45.860506][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.862426][ T29] audit: type=1400 audit(1722989384.835:495): avc: denied { ioctl } for pid=4199 comm="syz.2.182" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.894351][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.923760][ T4200] team0 (unregistering): Port device team_slave_0 removed [ 45.934818][ T29] audit: type=1400 audit(1722989384.895:496): avc: denied { append } for pid=4199 comm="syz.2.182" path="/39/file0/blkio.bfq.empty_time" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.959676][ T29] audit: type=1400 audit(1722989384.895:497): avc: denied { create } for pid=4201 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 45.982829][ T4200] team0 (unregistering): Port device team_slave_1 removed [ 46.057668][ T29] audit: type=1400 audit(1722989384.955:498): avc: denied { name_bind } for pid=4203 comm="syz.0.184" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 46.623129][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.625599][ T4290] rdma_rxe: rxe_newlink: failed to add bond0 [ 46.744792][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 46.809959][ T4335] loop0: detected capacity change from 0 to 512 [ 46.832642][ T29] audit: type=1400 audit(1722989385.795:499): avc: denied { setattr } for pid=4351 comm="syz.4.195" name="tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 46.856580][ T4335] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.193: bg 0: block 288: padding at end of block bitmap is not set [ 46.897839][ T4335] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 46.920337][ T4335] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.193: attempt to clear invalid blocks 1024 len 1 [ 46.957456][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 46.966762][ T4335] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.193: invalid indirect mapped block 1819239214 (level 0) [ 46.986605][ T4292] netlink: 'syz.3.188': attribute type 15 has an invalid length. [ 46.994331][ T4292] netlink: 'syz.3.188': attribute type 7 has an invalid length. [ 47.007013][ T4335] EXT4-fs (loop0): 1 truncate cleaned up [ 47.013343][ T4335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.074032][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.098747][ T4381] rdma_rxe: rxe_newlink: failed to add bond0 [ 47.119801][ T4370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4370 comm=syz.1.198 [ 47.153429][ T29] audit: type=1400 audit(1722989386.127:500): avc: denied { bind } for pid=4385 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.516206][ T4435] kernel profiling enabled (shift: 8) [ 47.951980][ T4488] netlink: 'syz.2.212': attribute type 5 has an invalid length. [ 47.962458][ T4487] netlink: 'syz.2.212': attribute type 5 has an invalid length. [ 48.048435][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 48.157612][ T4499] loop2: detected capacity change from 0 to 512 [ 48.191217][ T4546] sit0: entered allmulticast mode [ 48.198900][ T4499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.214: bg 0: block 288: padding at end of block bitmap is not set [ 48.214337][ T4499] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 48.220484][ T4549] loop3: detected capacity change from 0 to 1024 [ 48.223516][ T4499] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.214: attempt to clear invalid blocks 1024 len 1 [ 48.243615][ T4499] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.214: invalid indirect mapped block 1819239214 (level 0) [ 48.259063][ T4499] EXT4-fs (loop2): 1 truncate cleaned up [ 48.265034][ T4499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.282208][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.308807][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.319479][ T4546] sit0: entered promiscuous mode [ 48.425323][ T4560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 48.446046][ T4564] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 48.446046][ T4564] The task syz.3.219 (4564) triggered the difference, watch for misbehavior. [ 48.667289][ T4570] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 48.687232][ T4570] team0: Port device dummy0 added [ 49.052250][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.330847][ T4568] syz.1.225 (4568) used greatest stack depth: 10856 bytes left [ 49.452594][ T4670] sit0: left promiscuous mode [ 49.529281][ T4680] loop4: detected capacity change from 0 to 512 [ 49.831375][ T4718] sit0: entered promiscuous mode [ 50.083454][ T4758] loop2: detected capacity change from 0 to 1024 [ 50.101484][ T4758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.170351][ T4761] loop1: detected capacity change from 0 to 256 [ 50.338673][ T4782] netlink: 136 bytes leftover after parsing attributes in process `syz.2.245'. [ 50.365551][ T4173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 50.476884][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 50.476896][ T29] audit: type=1400 audit(1722989389.454:551): avc: denied { write } for pid=4806 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.514900][ T29] audit: type=1400 audit(1722989389.484:552): avc: denied { ioctl } for pid=4806 comm="syz.3.251" path="socket:[7357]" dev="sockfs" ino=7357 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.783709][ T4860] loop3: detected capacity change from 0 to 512 [ 50.791460][ T4860] EXT4-fs: Invalid commit interval -2147483648, must be smaller than 21474836 [ 50.830237][ T4860] loop3: detected capacity change from 0 to 2048 [ 50.849047][ T4860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.922927][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.088677][ T4906] sit0: entered allmulticast mode [ 51.118980][ T4906] sit0: entered promiscuous mode [ 51.196238][ T4915] loop2: detected capacity change from 0 to 512 [ 51.613876][ T4958] loop0: detected capacity change from 0 to 128 [ 51.628806][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.640666][ T4958] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.662629][ T4958] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.688252][ T29] audit: type=1400 audit(1722989390.664:553): avc: denied { execute } for pid=4957 comm="syz.0.264" path="/51/mnt/cgroup.stat" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.714182][ T29] audit: type=1400 audit(1722989390.684:554): avc: denied { getopt } for pid=4957 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.765239][ T3258] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.771435][ T29] audit: type=1400 audit(1722989390.744:555): avc: denied { write } for pid=4969 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.795852][ T29] audit: type=1400 audit(1722989390.774:556): avc: denied { execute } for pid=4964 comm="syz.3.265" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.830905][ T4976] FAULT_INJECTION: forcing a failure. [ 51.830905][ T4976] name failslab, interval 1, probability 0, space 0, times 0 [ 51.843596][ T4976] CPU: 0 UID: 0 PID: 4976 Comm: syz.4.271 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 51.854183][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.864393][ T4976] Call Trace: [ 51.867672][ T4976] [ 51.870604][ T4976] dump_stack_lvl+0xf2/0x150 [ 51.875208][ T4976] dump_stack+0x15/0x20 [ 51.879375][ T4976] should_fail_ex+0x229/0x230 [ 51.884062][ T4976] ? __alloc_skb+0x10b/0x310 [ 51.888661][ T4976] should_failslab+0x8f/0xb0 [ 51.893343][ T4976] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 51.899152][ T4976] __alloc_skb+0x10b/0x310 [ 51.903577][ T4976] ? __rcu_read_unlock+0x4e/0x70 [ 51.908524][ T4976] alloc_skb_with_frags+0x7f/0x400 [ 51.913689][ T4976] ? cgroup_rstat_updated+0x99/0x550 [ 51.918972][ T4976] ? __rcu_read_lock+0x36/0x50 [ 51.923729][ T4976] sock_alloc_send_pskb+0x435/0x4f0 [ 51.928985][ T4976] unix_dgram_sendmsg+0x472/0xff0 [ 51.934020][ T4976] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 51.939679][ T4976] __sock_sendmsg+0x140/0x180 [ 51.944387][ T4976] ____sys_sendmsg+0x312/0x410 [ 51.949162][ T4976] __sys_sendmmsg+0x269/0x500 [ 51.953851][ T4976] __x64_sys_sendmmsg+0x57/0x70 [ 51.958789][ T4976] x64_sys_call+0xa49/0x2d60 [ 51.963379][ T4976] do_syscall_64+0xc9/0x1c0 [ 51.967909][ T4976] ? clear_bhb_loop+0x55/0xb0 [ 51.972592][ T4976] ? clear_bhb_loop+0x55/0xb0 [ 51.977271][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.983202][ T4976] RIP: 0033:0x7f269b1479f9 [ 51.987605][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.007273][ T4976] RSP: 002b:00007f2699dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.015935][ T4976] RAX: ffffffffffffffda RBX: 00007f269b2d5f80 RCX: 00007f269b1479f9 [ 52.023974][ T4976] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000005 [ 52.031951][ T4976] RBP: 00007f2699dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.039973][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.047943][ T4976] R13: 0000000000000000 R14: 00007f269b2d5f80 R15: 00007ffc3f24f348 [ 52.055926][ T4976] [ 52.150134][ T4986] loop3: detected capacity change from 0 to 1024 [ 52.164376][ T29] audit: type=1400 audit(1722989391.134:557): avc: denied { lock } for pid=4980 comm="syz.0.272" path="socket:[7484]" dev="sockfs" ino=7484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 52.177103][ T4986] EXT4-fs: Ignoring removed oldalloc option [ 52.206245][ T4986] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.230121][ T4986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.262906][ T29] audit: type=1400 audit(1722989391.234:558): avc: denied { ioctl } for pid=4985 comm="syz.3.275" path="socket:[7485]" dev="sockfs" ino=7485 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.312191][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.377568][ T5002] sit0: entered allmulticast mode [ 52.407839][ T5002] sit0: entered promiscuous mode [ 52.626048][ T29] audit: type=1400 audit(1722989391.604:559): avc: denied { read } for pid=5008 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.660660][ T29] audit: type=1400 audit(1722989391.604:560): avc: denied { mounton } for pid=5008 comm="syz.3.280" path="/72/file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 52.768842][ T5026] loop0: detected capacity change from 0 to 512 [ 52.818383][ T5030] program syz.1.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.821901][ T5026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.840366][ T5026] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.881203][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.950899][ T5036] loop3: detected capacity change from 0 to 512 [ 52.960937][ T5036] hub 9-0:1.0: USB hub found [ 52.965657][ T5036] hub 9-0:1.0: 8 ports detected [ 53.097206][ T5040] sit0: left promiscuous mode [ 53.209465][ T5043] sit0: entered promiscuous mode [ 53.361291][ T5050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.294'. [ 53.517856][ T5059] loop2: detected capacity change from 0 to 128 [ 53.526629][ T5059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.539361][ T5059] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.619460][ T3268] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.702528][ T5076] sit0: entered allmulticast mode [ 53.750723][ T5076] sit0: entered promiscuous mode [ 54.194436][ T5132] 9pnet_fd: p9_fd_create_unix (5132): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 54.197898][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 54.278861][ T5146] loop4: detected capacity change from 0 to 512 [ 54.296789][ T5132] dummy0: entered promiscuous mode [ 54.312023][ T5153] loop1: detected capacity change from 0 to 128 [ 54.319940][ T5129] hub 9-0:1.0: USB hub found [ 54.324575][ T5129] hub 9-0:1.0: 8 ports detected [ 54.671998][ T5238] FAULT_INJECTION: forcing a failure. [ 54.671998][ T5238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.676454][ T5240] loop3: detected capacity change from 0 to 512 [ 54.685213][ T5238] CPU: 0 UID: 0 PID: 5238 Comm: syz.0.325 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 54.685239][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.685250][ T5238] Call Trace: [ 54.685256][ T5238] [ 54.685269][ T5238] dump_stack_lvl+0xf2/0x150 [ 54.723094][ T5238] dump_stack+0x15/0x20 [ 54.727262][ T5238] should_fail_ex+0x229/0x230 [ 54.732061][ T5238] should_fail+0xb/0x10 [ 54.736215][ T5238] should_fail_usercopy+0x1a/0x20 [ 54.741277][ T5238] _copy_from_user+0x1e/0xd0 [ 54.745944][ T5238] copy_msghdr_from_user+0x54/0x2a0 [ 54.751146][ T5238] __sys_sendmmsg+0x22a/0x500 [ 54.755827][ T5238] __x64_sys_sendmmsg+0x57/0x70 [ 54.760703][ T5238] x64_sys_call+0xa49/0x2d60 [ 54.765304][ T5238] do_syscall_64+0xc9/0x1c0 [ 54.769839][ T5238] ? clear_bhb_loop+0x55/0xb0 [ 54.774512][ T5238] ? clear_bhb_loop+0x55/0xb0 [ 54.779247][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.785133][ T5238] RIP: 0033:0x7f3fe38679f9 [ 54.789535][ T5238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.809154][ T5238] RSP: 002b:00007f3fe24e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.817575][ T5238] RAX: ffffffffffffffda RBX: 00007f3fe39f5f80 RCX: 00007f3fe38679f9 [ 54.825566][ T5238] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000005 [ 54.833550][ T5238] RBP: 00007f3fe24e7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.841542][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.849592][ T5238] R13: 0000000000000000 R14: 00007f3fe39f5f80 R15: 00007ffd941b2bd8 [ 54.857555][ T5238] [ 54.876969][ T5240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.891776][ T5240] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.956136][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.989695][ T5248] sit0: left promiscuous mode [ 55.077334][ T5248] sit0: entered promiscuous mode [ 55.346738][ T5306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 55.355722][ T5306] netlink: 3 bytes leftover after parsing attributes in process `syz.2.338'. [ 55.399593][ T5313] loop4: detected capacity change from 0 to 1024 [ 55.444089][ T5323] loop2: detected capacity change from 0 to 512 [ 55.452079][ T5323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.489863][ T5323] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.498347][ T5313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.505415][ T5329] loop0: detected capacity change from 0 to 2048 [ 55.511657][ T5323] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.338: bg 0: block 248: padding at end of block bitmap is not set [ 55.543867][ T5323] __quota_error: 11 callbacks suppressed [ 55.543909][ T5323] Quota error (device loop2): write_blk: dquota write failed [ 55.557050][ T5323] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 55.566963][ T5323] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.338: Failed to acquire dquot type 1 [ 55.597379][ T5333] loop1: detected capacity change from 0 to 512 [ 55.610531][ T5333] hub 9-0:1.0: USB hub found [ 55.615316][ T5333] hub 9-0:1.0: 8 ports detected [ 55.648649][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.678356][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.706793][ T5323] EXT4-fs (loop2): 1 truncate cleaned up [ 55.728614][ T5329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.815371][ T5342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.343'. [ 55.833531][ T29] audit: type=1400 audit(1722989394.804:572): avc: denied { getopt } for pid=5326 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.848111][ T5339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.343'. [ 55.862558][ T5323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.889735][ T5323] TCP: TCP_TX_DELAY enabled [ 55.969108][ T5369] sit0: left promiscuous mode [ 56.130379][ T5369] sit0: entered promiscuous mode [ 56.154785][ T5323] syz.2.338 (5323) used greatest stack depth: 9408 bytes left [ 56.175243][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.274390][ T29] audit: type=1400 audit(1722989395.244:573): avc: denied { bind } for pid=5411 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.325343][ T29] audit: type=1400 audit(1722989395.264:574): avc: denied { read } for pid=5414 comm="syz.1.353" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.348308][ T29] audit: type=1400 audit(1722989395.264:575): avc: denied { open } for pid=5414 comm="syz.1.353" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.371714][ T29] audit: type=1400 audit(1722989395.264:576): avc: denied { ioctl } for pid=5414 comm="syz.1.353" path="/dev/rtc0" dev="devtmpfs" ino=220 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.457760][ T5434] FAULT_INJECTION: forcing a failure. [ 56.457760][ T5434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.470820][ T5434] CPU: 1 UID: 0 PID: 5434 Comm: syz.1.358 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 56.481470][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 56.491527][ T5434] Call Trace: [ 56.494792][ T5434] [ 56.497708][ T5434] dump_stack_lvl+0xf2/0x150 [ 56.502333][ T5434] dump_stack+0x15/0x20 [ 56.506580][ T5434] should_fail_ex+0x229/0x230 [ 56.511265][ T5434] should_fail+0xb/0x10 [ 56.515413][ T5434] should_fail_usercopy+0x1a/0x20 [ 56.520481][ T5434] _copy_from_user+0x1e/0xd0 [ 56.525083][ T5434] copy_msghdr_from_user+0x54/0x2a0 [ 56.530371][ T5434] __sys_sendmmsg+0x22a/0x500 [ 56.535091][ T5434] __x64_sys_sendmmsg+0x57/0x70 [ 56.539951][ T5434] x64_sys_call+0xa49/0x2d60 [ 56.544546][ T5434] do_syscall_64+0xc9/0x1c0 [ 56.549058][ T5434] ? clear_bhb_loop+0x55/0xb0 [ 56.553747][ T5434] ? clear_bhb_loop+0x55/0xb0 [ 56.558463][ T5434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.564360][ T5434] RIP: 0033:0x7f7d79ff79f9 [ 56.568769][ T5434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.588497][ T5434] RSP: 002b:00007f7d78c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.596894][ T5434] RAX: ffffffffffffffda RBX: 00007f7d7a185f80 RCX: 00007f7d79ff79f9 [ 56.597218][ T5437] loop0: detected capacity change from 0 to 512 [ 56.604852][ T5434] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000005 [ 56.604867][ T5434] RBP: 00007f7d78c77090 R08: 0000000000000000 R09: 0000000000000000 [ 56.604878][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.604890][ T5434] R13: 0000000000000000 R14: 00007f7d7a185f80 R15: 00007ffdba5d02e8 [ 56.642951][ T5434] [ 56.656488][ T5437] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.665415][ T5446] loop4: detected capacity change from 0 to 2048 [ 56.668032][ T5437] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 56.684382][ T5437] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.356: Corrupt directory, running e2fsck is recommended [ 56.699778][ T5437] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 56.708979][ T5437] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.356: corrupted in-inode xattr: invalid ea_ino [ 56.724122][ T5446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.757399][ T29] audit: type=1400 audit(1722989395.714:577): avc: denied { mount } for pid=5449 comm="syz.3.363" name="/" dev="configfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.780080][ T29] audit: type=1400 audit(1722989395.714:578): avc: denied { read } for pid=5449 comm="syz.3.363" name="/" dev="configfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.801975][ T29] audit: type=1400 audit(1722989395.714:579): avc: denied { open } for pid=5449 comm="syz.3.363" path="/89/file0" dev="configfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.855015][ T5437] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.356: couldn't read orphan inode 15 (err -117) [ 56.878077][ T5437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.920172][ T5437] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.356: Abort forced by user [ 56.937495][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.951259][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 57.005909][ T5463] sit0: left promiscuous mode [ 57.117382][ T5463] sit0: entered promiscuous mode [ 57.248372][ T5474] loop3: detected capacity change from 0 to 512 [ 57.260180][ T5474] hub 9-0:1.0: USB hub found [ 57.264913][ T5474] hub 9-0:1.0: 8 ports detected [ 57.438755][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 57.504140][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.517451][ T5479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.372'. [ 57.543124][ T5481] siw: device registration error -23 [ 57.687285][ T5507] sctp: [Deprecated]: syz.2.378 (pid 5507) Use of int in max_burst socket option deprecated. [ 57.687285][ T5507] Use struct sctp_assoc_value instead [ 57.706960][ T5510] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 57.717553][ T5512] sit0: left promiscuous mode [ 57.737245][ T5510] loop0: detected capacity change from 0 to 512 [ 57.766197][ T5510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.790119][ T5512] sit0: entered promiscuous mode [ 57.800090][ T5510] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.017683][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.033717][ T5546] loop4: detected capacity change from 0 to 512 [ 58.058925][ T5546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.085820][ T5546] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.127608][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 58.151569][ T5560] sit0: left promiscuous mode [ 58.273878][ T5565] sit0: entered promiscuous mode [ 58.604263][ T5582] loop3: detected capacity change from 0 to 512 [ 58.617906][ T5582] hub 9-0:1.0: USB hub found [ 58.622745][ T5582] hub 9-0:1.0: 8 ports detected [ 58.819653][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.829824][ T5583] loop2: detected capacity change from 0 to 512 [ 58.865168][ T5583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.871853][ T5583] ext3: Bad value for 'jqfmt' [ 59.361192][ T5624] sit0: left promiscuous mode [ 59.462149][ T5624] sit0: entered promiscuous mode [ 59.476979][ T5638] FAULT_INJECTION: forcing a failure. [ 59.476979][ T5638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.490158][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz.2.421 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 59.500818][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 59.510918][ T5638] Call Trace: [ 59.514219][ T5638] [ 59.517142][ T5638] dump_stack_lvl+0xf2/0x150 [ 59.521807][ T5638] dump_stack+0x15/0x20 [ 59.525997][ T5638] should_fail_ex+0x229/0x230 [ 59.530783][ T5638] should_fail+0xb/0x10 [ 59.534945][ T5638] should_fail_usercopy+0x1a/0x20 [ 59.540028][ T5638] _copy_from_user+0x1e/0xd0 [ 59.544741][ T5638] copy_msghdr_from_user+0x54/0x2a0 [ 59.549966][ T5638] __sys_sendmmsg+0x22a/0x500 [ 59.554693][ T5638] __x64_sys_sendmmsg+0x57/0x70 [ 59.559594][ T5638] x64_sys_call+0xa49/0x2d60 [ 59.564258][ T5638] do_syscall_64+0xc9/0x1c0 [ 59.568768][ T5638] ? clear_bhb_loop+0x55/0xb0 [ 59.573447][ T5638] ? clear_bhb_loop+0x55/0xb0 [ 59.578127][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.584061][ T5638] RIP: 0033:0x7f55403579f9 [ 59.588468][ T5638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.608073][ T5638] RSP: 002b:00007f553efd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.616481][ T5638] RAX: ffffffffffffffda RBX: 00007f55404e5f80 RCX: 00007f55403579f9 [ 59.624436][ T5638] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000005 [ 59.632436][ T5638] RBP: 00007f553efd7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.640429][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.648384][ T5638] R13: 0000000000000000 R14: 00007f55404e5f80 R15: 00007ffc1003ece8 [ 59.656392][ T5638] [ 60.232856][ T5669] loop0: detected capacity change from 0 to 512 [ 60.246487][ T5669] hub 9-0:1.0: USB hub found [ 60.251164][ T5669] hub 9-0:1.0: 8 ports detected [ 60.471377][ T5683] sit0: left promiscuous mode [ 60.547283][ T5685] sit0: entered promiscuous mode [ 60.847845][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 60.847876][ T29] audit: type=1326 audit(1722989399.824:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 60.877261][ T29] audit: type=1326 audit(1722989399.824:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 60.921232][ T29] audit: type=1326 audit(1722989399.824:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 60.944503][ T29] audit: type=1326 audit(1722989399.824:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 60.967722][ T29] audit: type=1326 audit(1722989399.824:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 60.990997][ T29] audit: type=1326 audit(1722989399.824:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 61.014272][ T29] audit: type=1326 audit(1722989399.824:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 61.037471][ T29] audit: type=1326 audit(1722989399.824:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 61.038925][ T5690] netlink: 'syz.3.435': attribute type 21 has an invalid length. [ 61.060659][ T29] audit: type=1326 audit(1722989399.824:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 61.060684][ T29] audit: type=1326 audit(1722989399.824:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe38679f9 code=0x7ffc0000 [ 61.115441][ T5690] netlink: 156 bytes leftover after parsing attributes in process `syz.3.435'. [ 61.417494][ C1] ================================================================== [ 61.425584][ C1] BUG: KCSAN: data-race in can_send / can_send [ 61.431743][ C1] [ 61.434056][ C1] read-write to 0xffff888114e32a70 of 8 bytes by interrupt on cpu 0: [ 61.442119][ C1] can_send+0x576/0x5d0 [ 61.446274][ C1] j1939_send_one+0x1a9/0x1e0 [ 61.450951][ C1] j1939_tp_txtimer+0xcab/0x1a70 [ 61.455897][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 61.461106][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 61.466142][ C1] handle_softirqs+0xc3/0x280 [ 61.470828][ C1] do_softirq+0x5e/0x90 [ 61.475077][ C1] __local_bh_enable_ip+0x6e/0x70 [ 61.480114][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 61.485060][ C1] addrconf_dad_work+0x359/0xbd0 [ 61.490008][ C1] process_scheduled_works+0x483/0x9a0 [ 61.495474][ C1] worker_thread+0x526/0x700 [ 61.500073][ C1] kthread+0x1d1/0x210 [ 61.504147][ C1] ret_from_fork+0x4b/0x60 [ 61.508566][ C1] ret_from_fork_asm+0x1a/0x30 [ 61.513336][ C1] [ 61.515652][ C1] read-write to 0xffff888114e32a70 of 8 bytes by interrupt on cpu 1: [ 61.523714][ C1] can_send+0x576/0x5d0 [ 61.527877][ C1] bcm_can_tx+0x314/0x420 [ 61.532211][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 61.537508][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 61.542719][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 61.547747][ C1] handle_softirqs+0xc3/0x280 [ 61.552432][ C1] do_softirq+0x5e/0x90 [ 61.556606][ C1] __local_bh_enable_ip+0x6e/0x70 [ 61.561640][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 61.566590][ C1] batadv_nc_purge_paths+0x21d/0x270 [ 61.571892][ C1] batadv_nc_worker+0x3db/0xac0 [ 61.576753][ C1] process_scheduled_works+0x483/0x9a0 [ 61.582221][ C1] worker_thread+0x526/0x700 [ 61.586815][ C1] kthread+0x1d1/0x210 [ 61.590893][ C1] ret_from_fork+0x4b/0x60 [ 61.595311][ C1] ret_from_fork_asm+0x1a/0x30 [ 61.600094][ C1] [ 61.602410][ C1] value changed: 0x0000000000001b4a -> 0x0000000000001b4b [ 61.609519][ C1] [ 61.611835][ C1] Reported by Kernel Concurrency Sanitizer on: [ 61.617985][ C1] CPU: 1 UID: 0 PID: 3278 Comm: kworker/u8:6 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 61.628850][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.638911][ C1] Workqueue: bat_events batadv_nc_worker [ 61.644568][ C1] ================================================================== SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 61.858849][ C0] ================================================================== [ 61.866941][ C0] BUG: KCSAN: data-race in can_send / can_send [ 61.873099][ C0] [ 61.875407][ C0] read-write to 0xffff888114e32a10 of 8 bytes by interrupt on cpu 1: [ 61.883465][ C0] can_send+0x562/0x5d0 [ 61.887723][ C0] bcm_can_tx+0x314/0x420 [ 61.892071][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 61.897377][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 61.902586][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 61.907615][ C0] handle_softirqs+0xc3/0x280 [ 61.912320][ C0] do_softirq+0x5e/0x90 [ 61.916498][ C0] __local_bh_enable_ip+0x6e/0x70 [ 61.921627][ C0] _raw_read_unlock_bh+0x1b/0x20 [ 61.926584][ C0] addrconf_dad_completed+0x20d/0x8a0 [ 61.932036][ C0] addrconf_dad_work+0x891/0xbd0 [ 61.936982][ C0] process_scheduled_works+0x483/0x9a0 [ 61.942445][ C0] worker_thread+0x526/0x700 [ 61.947043][ C0] kthread+0x1d1/0x210 [ 61.951131][ C0] ret_from_fork+0x4b/0x60 [ 61.955987][ C0] ret_from_fork_asm+0x1a/0x30 [ 61.960774][ C0] [ 61.963089][ C0] read-write to 0xffff888114e32a10 of 8 bytes by interrupt on cpu 0: [ 61.971153][ C0] can_send+0x562/0x5d0 [ 61.975312][ C0] j1939_send_one+0x1a9/0x1e0 [ 61.979992][ C0] j1939_tp_txtimer+0xcab/0x1a70 [ 61.984932][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 61.990145][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 61.995179][ C0] handle_softirqs+0xc3/0x280 [ 61.999866][ C0] do_softirq+0x5e/0x90 [ 62.004040][ C0] __local_bh_enable_ip+0x6e/0x70 [ 62.009073][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 62.014019][ C0] batadv_nc_purge_paths+0x21d/0x270 [ 62.019317][ C0] batadv_nc_worker+0x3db/0xac0 [ 62.024164][ C0] process_scheduled_works+0x483/0x9a0 [ 62.029630][ C0] worker_thread+0x526/0x700 [ 62.034220][ C0] kthread+0x1d1/0x210 [ 62.038290][ C0] ret_from_fork+0x4b/0x60 [ 62.042706][ C0] ret_from_fork_asm+0x1a/0x30 [ 62.047555][ C0] [ 62.049861][ C0] value changed: 0x0000000000005dcf -> 0x0000000000005dd0 [ 62.056948][ C0] [ 62.059256][ C0] Reported by Kernel Concurrency Sanitizer on: [ 62.065384][ C0] CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 62.076131][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 62.086180][ C0] Workqueue: bat_events batadv_nc_worker [ 62.091808][ C0] ================================================================== [ 62.559274][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.659447][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.707586][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.758128][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.845792][ T28] bridge_slave_1: left allmulticast mode [ 62.851429][ T28] bridge_slave_1: left promiscuous mode [ 62.857032][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.864794][ T28] bridge_slave_0: left allmulticast mode [ 62.870535][ T28] bridge_slave_0: left promiscuous mode [ 62.876219][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.977338][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.987577][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.997922][ T28] bond0 (unregistering): Released all slaves [ 63.021883][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888114c0d000: rx timeout, send abort [ 63.148746][ T28] hsr_slave_0: left promiscuous mode [ 63.154324][ T28] hsr_slave_1: left promiscuous mode [ 63.160698][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.168078][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.176958][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.184355][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.192902][ T28] dummy0: left promiscuous mode [ 63.197821][ T28] veth1_macvtap: left promiscuous mode [ 63.203284][ T28] veth0_macvtap: left promiscuous mode [ 63.208812][ T28] veth1_vlan: left promiscuous mode [ 63.213997][ T28] veth0_vlan: left promiscuous mode [ 63.530158][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888114c0d000: abort rx timeout. Force session deactivation [ 63.599132][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.648837][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.708589][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.767968][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.827696][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.897837][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.947508][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.998122][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.068119][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.117887][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.157940][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.197782][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.256187][ T28] bridge_slave_1: left allmulticast mode [ 64.261820][ T28] bridge_slave_1: left promiscuous mode [ 64.267510][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.275001][ T28] bridge_slave_0: left allmulticast mode [ 64.280627][ T28] bridge_slave_0: left promiscuous mode [ 64.286365][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.294465][ T28] bridge_slave_1: left allmulticast mode [ 64.300126][ T28] bridge_slave_1: left promiscuous mode [ 64.305722][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.313273][ T28] bridge_slave_0: left allmulticast mode [ 64.318966][ T28] bridge_slave_0: left promiscuous mode [ 64.324616][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.447733][ T28] infiniband syz1: set down [ 64.676876][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.686673][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.696596][ T28] bond0 (unregistering): Released all slaves [ 64.705231][ T28] bond0 (unregistering): Released all slaves [ 64.713263][ T28] bond1 (unregistering): Released all slaves [ 64.721773][ T4708] smc: removing ib device syz1 [ 64.726742][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.736706][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.746397][ T28] bond0 (unregistering): Released all slaves [ 64.761425][ T3715] infiniband syz1: ib_query_port failed (-19) [ 64.947364][ T28] hsr_slave_0: left promiscuous mode [ 64.953085][ T28] hsr_slave_1: left promiscuous mode [ 64.958667][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.966066][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.973472][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.980836][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.989426][ T28] hsr_slave_0: left promiscuous mode [ 64.994941][ T28] hsr_slave_1: left promiscuous mode [ 65.002114][ T28] hsr_slave_0: left promiscuous mode [ 65.007641][ T28] hsr_slave_1: left promiscuous mode [ 65.013220][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.020660][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.027990][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.035394][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.046116][ T28] veth1_macvtap: left promiscuous mode [ 65.051568][ T28] veth0_macvtap: left promiscuous mode [ 65.057132][ T28] veth1_vlan: left promiscuous mode [ 65.062394][ T28] veth0_vlan: left promiscuous mode [ 65.068141][ T28] veth1_macvtap: left promiscuous mode [ 65.073599][ T28] veth0_macvtap: left promiscuous mode [ 65.079086][ T28] veth1_vlan: left promiscuous mode [ 65.084283][ T28] veth0_vlan: left promiscuous mode [ 65.090144][ T28] veth1_macvtap: left promiscuous mode [ 65.095622][ T28] veth0_macvtap: left promiscuous mode [ 65.101221][ T28] veth1_vlan: left promiscuous mode [ 65.106456][ T28] veth0_vlan: left promiscuous mode [ 65.243588][ T28] team0 (unregistering): Port device team_slave_1 removed [ 65.255050][ T28] team0 (unregistering): Port device team_slave_0 removed [ 65.354516][ T28] team0 (unregistering): Port device team_slave_1 removed [ 65.363947][ T28] team0 (unregistering): Port device team_slave_0 removed