last executing test programs: 6.427534917s ago: executing program 0 (id=5982): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0xffff0000}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a030000000000000000000200"], 0x98}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f00000000c0)=0x4000000, 0x4) ftruncate(r7, 0x8002007ffb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2401, 0xffffdfff) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.349977525s ago: executing program 0 (id=5986): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, 0x0, 0x840) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x32, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xac}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x9, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}, @tail_call, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0x8, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x7, 0x2, 0x4, 0x800}, 0x10, 0x16fa2, 0xffffffffffffffff, 0x7, &(0x7f0000000840)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f00000013c0)=[{0x4, 0x3, 0x2, 0x3}, {0x3, 0x3, 0x8, 0xb}, {0x0, 0x3, 0x4, 0x8}, {0x0, 0x4, 0xf, 0x9}, {0x0, 0x5, 0xe, 0x1}, {0x5, 0x2, 0x9, 0x6}, {0x0, 0x4, 0x10, 0xc}], 0x10, 0x6, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = signalfd4(r1, &(0x7f0000000580)={[0x1]}, 0x8, 0x40800) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000001600), &(0x7f0000001640)=0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES32=r2, @ANYRES32=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYRES64=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000002c0)='fib6_table_lookup\x00', r11, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r10}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x80000003}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f1, &(0x7f0000000080)) bind$unix(r7, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 6.123454995s ago: executing program 0 (id=5991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x4, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x206d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071112d00000000008510000002000000716c00000000000095004c00000000009500001200000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xd3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="070000000100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'net_prio'}, {0x2b, 'devices'}]}, 0x13) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r9, 0xc0a85352, &(0x7f00000002c0)={{0x7, 0x1e}, 'port1\x00', 0xb2, 0x800, 0x10, 0x9, 0x8, 0x8, 0x2fb, 0x0, 0x1}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000100)='4', 0x1}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') fchdir(r10) 1.502301271s ago: executing program 0 (id=6001): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0xe01, 0x0) r4 = syz_open_procfs(r1, 0x0) pread64(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.381834742s ago: executing program 0 (id=6039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='jbd2_checkpoint_stats\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) close(r1) r2 = socket(0x11, 0x800000003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000005c0)={[{@jqfmt_vfsold}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x3, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 1.332679787s ago: executing program 3 (id=6040): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1.251150295s ago: executing program 3 (id=6041): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) close(r0) 1.214312928s ago: executing program 3 (id=6042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='rpcb_setport\x00', r2}, 0x18) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1.048168353s ago: executing program 3 (id=6043): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 901.724877ms ago: executing program 3 (id=6044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=r3}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x8}}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x274, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "38834183405fc462349d854fe75a6a4b8e57023debf7b6e57698beaabd3b2f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x75, 0x3, "a8fddd5a3e3d5b929f09756f07b3582395a60052461a737b59f923badf828bdd2c1c3ca84b7721270e00628a2386d77cc4f6bbf177b272f314744665054b1f1d07c1632a6ccfd7c76e488379f027f409bf8ae7f40a90d83db2b2bd47f926e0158971382057a3987bc80ef717e1eb04d8b2"}, @TIPC_NLA_NODE_ID={0x57, 0x3, "38413e1e9f3d23dbec578043a3a5dd77d32bb6c64ef04718b57dcb077a380b31eb8f75ac5e7b50da25a99a6c20d58979482769363bca59e9d7c24fc9438ccd1674f206bfbcc281fa5894643a852087c5919e07"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff817}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd11}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbd}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000340)=0x3, 0x4) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001800)=@newchain={0x26c, 0x64, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x9, 0x6}, {0x4, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5b, 0xc4}}, @filter_kind_options=@f_route={{0xa}, {0x214, 0x2, [@TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_mirred={0x1ec, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x847, 0x9, 0xffffffffffffffff, 0x8, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf, 0x6, 0x7, 0x81}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x3, 0x3e11, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x3, 0x1, 0x1be716d1, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff8001, 0x1, 0x2, 0x6, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xfffffff9, 0x8, 0x80, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x20000000, 0xe, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x7, 0x9}, 0x4}}]}, {0xbf, 0x6, "58f38cb682ed25b1e88b9c11df441484504b40e76d9de5981e3be8753be0f31482cc7d7416ed6b3a44a731f0ca30aef139a452351b0f130a90e4e9952454494da62f01cb8f0a0466ae521fc670efbdd4c56896d248ccd1de793bf6f5c4fd2342950ae19707c5dd2c902df4c02b79516b615fca8d1a3dc2adace0cb6ad0808028e066c8ef9cb0b07dcb56103a612a083ef19172ac6b3a0043b8f68a76b478e808a3b75af5ba14aecff22f770cf05a9e28b8daab585103b517b63831"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x26}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x56}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 743.908601ms ago: executing program 2 (id=6050): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) (async) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) pipe2$9p(0x0, 0x0) (async) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f0000000200)={{0xc, @local, 0x0, 0x0, 'lc\x00'}, {@loopback, 0x0, 0x1}}, 0x44) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000006eb9e26cc14c23cd609faa000000002c"], &(0x7f0000000140)=""/72, 0x4b, 0x48, 0x1, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000240)={0x5, 0x100000, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000240)={0x5, 0x100000, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 586.888435ms ago: executing program 2 (id=6054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000343749ea6f7363516316ae68aab4584a279672a4cd38e75aaad133e861b1b5646b5204b6c646932e7190a702f4923a17c2b0c82dff3988e56f6f2979212d295b78c8d2c3d7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$eJzs3ctvW1kZAPDPTuw4aWaSGUYIEMyUmYGCqjqJOxONuqGsEEKVEF2C1IbEjaLYcZRHaUIX6ZoFGyQqsYIlfwDrrtizQbBjUxZIPCJQg8TC6F5fp25iN1HzcBT/ftLVPY/U3zlx7zm9x/U9AQysqxGxExHFiLgfERNZeS474nbrSH7uxe7j+b3dx/O5aDbv/jOX1idl0fFnEley1yxFxA++E/Hj3OG461vby3O1WnUty09t1Fen1re2byzV5xari9WVSmV2Znb6s5ufVk6trx/Ui1nqK8//sPPNnybNGs9KOvtxmlpdL+zHSQxHxPfOIlgfDGX9Kfa7IbyRfES8GxEfptf/RAyl7yYAcJk1mxPRnOjMAwCXXT5dA8vly9lawHjk8+Vyaw3vvRjL1xrrG9cfNDZXFlprZZNRyD9YqlWns7XCySjkkvxMmn6ZrxzI34yIdyLiFyOjab4836gt9PMfPgAwwK4cmP//M9Ka/wGAS67U7wYAAOfO/A8Ag8f8DwCDx/wPAIOnNf+P9rsZAMA5cv8PAIPn0Pz/+S5P7AQALovv37mTHM297PnXCw+3NpcbD28sVNeXy/XN+fJ8Y221vNhoLKbP7Kkf9Xq1RmN15pPYfDT58zutknv1xubKxr30ud73qoW0bOesuwUAvMY7Hzz7c3Kzv3NrND2iYy+HQl9bBpy1fL8bAPTNUL8bAPSN3b5gcJ3gHt/yAFwSR/2Hn1K3Lwg1m83m2TUJOGPXvmj9HwZVx/q/bwHBgLH+D4PL+j8MrmYzd9w9/6N4tlsRAwDnxBo/0OPz/3ez82+zDwd+tHDwJ56eZasAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYmvv/1vO9gIfj3y+XI54KyImo5B7sFSrTkfE2xHxp5HCSJKf6XObAYCTyv8tl+3/dW3i4/FXqt6/sp8sRsRPfnX3l4/mNjbW/hhRzP1rpF2+8TQrr5x/6wGAo7Xn6fTccSP/YvfxfPs4z/b8/dsRUWrF39stxt5+/OEYTs+lKETE2L9zWb4l17F2cRI7TyLiC936n4vxdA2ktfPpwfhJ7LfONX7+lfj5tK51Tn4XnzuFtsCgeZaMP7e7XX/5uJqeu1//pXSEOrls/Etean4vHQNfxm+Pf0M9xr+rx43xye+/20qNHq57EvGl4Yh27L2O8acdP9cj/sfHjP+XL7//4cGy9r7zzV9HXIvu8TtjTW3UV6fWt7ZvLNXnFquL1ZVKZXZmdvqzm59WptI16qnes8E/bl1/u1dd0v+xHvFLR/T/a8fs/2/+d/+HX31N/G981C1+Pt57Tfzk9/f1Y8afG/tdqVddEn+hR/+Pev+vHzP+879uH9o2HADon/Wt7eW5Wq26JiFx8RPJX9kL0IyuiW91rSqcfqxidK/62Ueta/pAVbP5RrF6jRinseoGXAT7F31E/LffjQEAAAAAAAAAAAAAALo6j29H9buPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXF7/DwAA//89QcyD") r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/54, 0x36}], 0x17, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) close(r6) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81ea033200fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="17000000000000001b0000000207000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000340), 0x1, 0x3) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f0000000b40)=0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}}, 0x0) 406.496372ms ago: executing program 1 (id=6060): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xfff, 0xa4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8d2, 0x2, @perf_config_ext={0x6, 0x2}, 0x80, 0x0, 0x0, 0x7, 0x5, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x9, &(0x7f00000002c0)=[{0x1, 0x9c, 0x8, 0x6ade}, {0x7, 0x3f, 0x3, 0x1}, {0x4, 0x1, 0x7, 0x4f8}, {0xfff7, 0x6, 0xa8, 0x9}, {0xfff, 0x0, 0x6, 0x4}, {0x200, 0xe, 0x3}, {0x0, 0x5, 0x8}, {0x8, 0xff, 0x2, 0x80000000}, {0x9, 0x4, 0x5, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000671a455300"/32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x400000000001, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00030058d97700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) 320.48763ms ago: executing program 0 (id=6063): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={0xd8}) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000d00)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) syz_create_resource$binfmt(0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x17) 287.578033ms ago: executing program 1 (id=6064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r2, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 286.581264ms ago: executing program 2 (id=6065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$auto(&(0x7f0000000900)='kfree\x00', r5) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0, 0x2}]) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x0, 0xe9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f00000006c0)={@generic={0x27, "ddb075ee13cb3d1eb8786cf2a8b11e4c1e0b755df7c9eed34b0e9a54d1c5703a0ff04055f2cc99e820ac272cd8e04a7dbac872a0814ce4dcb2e2f393c880513b0e3f0b5cafb7103432b3857cb9d6cd36eb563f62ad34c09891bb7171c560b9cc2224eeeda294b2c24c1a9597523e192af55e0ff51724109394ce7bf7ce7a"}, {&(0x7f00000005c0)=""/12, 0xc}, &(0x7f0000000600), 0x1}, 0xa0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{0x100, 0xb4, 0x1, 0x700000}, {0x7fff, 0x3, 0x8, 0x3}, {0x1, 0x8, 0xf, 0xb89f}, {0x3, 0x45, 0x5, 0x9}]}) 191.363062ms ago: executing program 4 (id=6071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000280)='\x00', 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r5, r1}) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000700)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c0000646ec44875e0f9", @ANYRESHEX, @ANYBLOB=',\x00']) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x8, 0x307, &(0x7f0000000a00)="$eJzs3M9LG2kYwPEnP4xJRONh2WUXFl92L7uXQbN7XgyLQmmgYk3pDyiMOmlDpolkgiWlVAuFXkv/iB7Eozeh9R/w0lt76aU3L4Ue6qF0SiYziSaTWGN+2Pr9gMzDPO8zed+MkWeCMwfXn93LZy0tq5clGFUSEBE5FJmUoHgC7jboxBE5alP+Hvv45verN25eTqXTc4tKzaeW/kkqpSamXt5/GHOH7Y7K/uTtgw/J9/s/7/968GXpbs5SOUsVimWlq+Xiu7K+bBpqNWflNaUWTEO3DJUrWEapli/W8lmzuLZWUXphdTy+VjIsS+mFisobFVUuqnKpokJ39FxBaZqmxuOCk2S2Fhf1VJfFKz2eDPqkVErpIRGJtWQyW0OZEAAAGKrm/j8oqpf9//Yfe+WxazsTbv+/G/Hr//99WzvWsf4/KiK+/b/3+r79v366/r+1I7pYztT/43yYirTsCjTCarKU0uPu59fx+Nb2tBPQ/wMAAAAAAAAAAAAAAAAAAAAA8D04tO2EbdsJdxt2dydGRSQqIrabbym0azYGPmP0UtP5r//Uz79sDnuK6KPGjXvhCRHz6XpmPVPbugP2RMQUQ6YlIZ/rH3vbtquxd+eRqpqUV+aGW7+xngk5mVRWck79jCRGpLnetucvpedmVM3x+hGJH61PSkJ+8q9P+tZH5K8/j9RrkpDXK1IUU1adeTTqH80o9f+VdFN9zBkHAAAAAMCPQFN1vtfvmtYuX6uvX183fz8QalxfT/ten4flt/Bw1w4AAAAAwEVhVR7kddM0Sh2CmJw8pvsg3Kcjeyv81irvfxn6t9IOgffix1JRd2fP35bAKd6WNkFQuqmaqq5GnXUV3tdG7cbIwuzgz6AT/PL8xafeHfC/negJK+0+CHX+BRgZ2B8gAAAAAAPTaPq9PbPDnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdQ+yeEPWl+HJ1f4D2grOMjx4a8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+BoAAP//Mjf9DA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0xc0, 0x7, 0x840, 0x4, {{0x33, 0x4, 0x0, 0x23, 0xcc, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0x24, 0xec, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x8}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x400}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x0, [{0x0, 0xc, "c39a516a80fa8dde5a1b"}, {0x2, 0x11, "ea7b9065e4d7d61363298c0ea7607c"}, {0x3, 0xe, "015ac34575583cfb4250da8f"}]}, @rr={0x7, 0x17, 0x24, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}]}, @noop, @rr={0x7, 0x7, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x27, 0x2c, [@private=0xa010102, @local, @multicast1, @rand_addr=0x64010100, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @local]}, @lsrr={0x83, 0xb, 0x13, [@loopback, @loopback]}, @generic={0xc8, 0xb, "5dc6d78628a6842420"}]}}}}}) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000600"/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 190.866692ms ago: executing program 1 (id=6072): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llx}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 147.058646ms ago: executing program 1 (id=6073): r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)={0x1c, 0x52, 0x100, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20400001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c) 131.238387ms ago: executing program 1 (id=6074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) dup2(r0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x3, 0x7, 0xff, 0xb}, {0xf485, 0xd9, 0xd, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000de00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001e000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) unshare(0x2000400) fsmount(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0xff77, 0x3, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000b00)="659374c93085ac22d68a8235ed45e757340e446ef31aadd0887903291a8196662f4f9ccf463528e244a06faadfdc56e9cbb3a1f764e3334a574685a28fc24333abcdedc03e011e77bb4f94f4c96056c44ae15b01725f1ecfdc0b7589c1d089742f06f53eea206669754c3cdb77fa373419b2fd731d1e00"/132, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r7}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='neigh_create\x00', r4, 0x0, 0x20000000000}, 0x18) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) setregid(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 130.164697ms ago: executing program 4 (id=6075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x0) 112.113199ms ago: executing program 4 (id=6076): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) 86.057901ms ago: executing program 1 (id=6077): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000010000080002007f0000010c"], 0x6c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) listxattr(0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 63.847574ms ago: executing program 2 (id=6078): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000010000080002007f0000010c"], 0x6c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) listxattr(0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r0) close_range(r8, 0xffffffffffffffff, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 0s ago: executing program 4 (id=6079): unshare(0x64020800) (async) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{0x0}], 0x1, 0x100000, 0x0, 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f00000008c0)="dc", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) (async) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) (async) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b900e200"}) (async) r8 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x4, 0x8, 0x7, 0x2a, 0x0, 0x1, 0x28, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8d, 0x1, @perf_bp={&(0x7f0000000900), 0x4}, 0x100020, 0x56, 0x3, 0x7, 0x89a, 0x4, 0x6, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0xa) writev(r8, &(0x7f0000001100)=[{&(0x7f00000009c0)="77c700042dfa4e6bb9d51af3d6bbae0afbc9941a9b7055cee9e9bbd02c215654af894f3d7ce304f9d4bef6c2466d167038abe75eefd2466e130b", 0x3a}, {&(0x7f0000000b40)="059667302403c283e86fe375742de7b9c9912c2b3658ef050e1845aaa589985415311d285b10cab880936b19029a725fdb694fb49b2ac3fd288a87776ecfdcb71818acce8cbb12730c9175d294f4c3ecd84aad89967bd3cc799dda39f5f0cfb9775afb057655f5fadee51ca8c93ef24108b3ec0c35e2da20736911ed9c1ef996592cf9b9a3f2cef8ebdad0f67cd81ab11edd71763108121c87a40ef2fac4a155bb1fb8e7a01abea0959be30b1ebe24b2206a5fa8f1ab1059408ade1c4934e921e738a45d880d25b678581043b830d10ec1309718edba01b5f9d954ff2ad27b284268b06781c20963bcb4dd38bf0720", 0xef}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f0000000c40)="e6ee415f71e2ba90a1b152e1178c53bcc9217d6c7a970e7d873af0f6bfbe55d91a427f4d4cec4199bd42855ebd8579ab9ce29a7b5cd37065959a1b2c0d46b15e5658d38190", 0x45}, {&(0x7f0000000cc0)="f627b3aa864e53f7d70f58ea91b104dc53e8e46c896ea6d5293bc48aac8041350113a6d6d56997afa7f1d19da4f4212aa36544ba39d202829c9b53c7bb102e689497b526005de3fee1", 0x49}, {&(0x7f0000000d40)="bf2fcb6e5747cf4ab4b5079b6d7723188e7cd35e4c2d8919ec7678a7bd8db66d287f033e93d75130d894b404053693c8ec3525c588064e6f48f017a1273ae4c911f6c487dade7d01ea0d7cb36a0367a5dcd2c1dd617ebb8d899047d30fd8d3c0c17edad2d12f1787156bcbebad6d8ae7aedeee9c8f73edb3d51d84c8e524748cfd3a2a9960c19b20dcb734d4ba8397a5c5ccb334b4b7838d3c39a6da05b3230b4c2d8d57ea15ac3e5a6ddcb7c8d657180bf18c2855fa546b60a7c152a5b71350b2f9f56f851a222d0eb7234ce8b78d396ffef2d3ae2ad05f1e22f5984a537b1009edf44bbcb5e895730fdd41ef8c7277ec", 0xf1}, {&(0x7f0000000e40)="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", 0xfc}, {&(0x7f0000000f40)="b18d4213a61aedbb79248908ce4b5d7514972876d693f5c93db17f63532771b1230beae636ce01f5b944ac62ede28c1dbeda7fffd6b4aa9f1a8539eb5b144e76ece8065c012f4f042fc9586676968e559a7300ffb6919b96002af2c445a012ce4584a0f14e419ca4676cbe3e1da4693246b7ffecfe58e25264e10922f937634054f07395970c56", 0x87}, {&(0x7f0000001000)="70a7ea7099d0e51896cc7c644334aed5dd44e186e07c7aa29155f3ffedbedd6abe5a79add84647f1089268cb25644b493dfc67557289f325944e596061bfd27fa78a45dd66c608a1b3fa2643898c6abb1b941dfe62c409abb64bdf2f6be9d1ccb67314bf5d06e959bbf7d9f1ed362d70040ae9d485b22f32912d5ec9c44e01c3ffd4ecf58aa271c63a806e13f7a484507ba113bfd785ca0eeb94d77d55486ef5c4cf164d1de1363e2e17f4eef24ddd71d2e6d1ecd55fcce9abde1ef8aa43e96d004af448089932a2d19bcf110c91f3bc3cd05286158b62e43b4d43", 0xdb}], 0x9) (async) sendfile(r1, r3, 0x0, 0x100001) (async) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 02][ T7144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.020572][T17839] chnl_net:caif_netlink_parms(): no params data found [ 366.054201][ T7144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.083774][T17839] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.090989][T17839] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.098221][T17839] bridge_slave_0: entered allmulticast mode [ 366.104921][T17839] bridge_slave_0: entered promiscuous mode [ 366.111493][T17788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.119970][T17868] loop1: detected capacity change from 0 to 128 [ 366.120882][T17839] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.126723][T17868] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 366.133442][T17839] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.152481][T17839] bridge_slave_1: entered allmulticast mode [ 366.152705][T17868] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 366.158738][T17839] bridge_slave_1: entered promiscuous mode [ 366.178587][T17788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.190797][ T7144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.206823][T17788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.217150][T17839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.226677][T17727] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 366.228306][T17839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.234309][T17727] FAT-fs (loop1): Filesystem has been set read-only [ 366.250217][T17727] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 366.250820][T17788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.269325][ T7144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.285072][T17839] team0: Port device team_slave_0 added [ 366.297201][T17839] team0: Port device team_slave_1 added [ 366.313629][T17839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.320701][T17839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.346688][T17839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.358090][T17839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.365102][T17839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.391014][T17839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.424118][T17839] hsr_slave_0: entered promiscuous mode [ 366.430059][T17839] hsr_slave_1: entered promiscuous mode [ 366.436439][T17839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.443968][T17839] Cannot create hsr debugfs directory [ 366.496446][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.506853][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.517939][ T7144] bond0 (unregistering): Released all slaves [ 366.550656][T17872] FAULT_INJECTION: forcing a failure. [ 366.550656][T17872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.563747][T17872] CPU: 1 UID: 0 PID: 17872 Comm: syz.4.5786 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 366.574156][T17872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.584231][T17872] Call Trace: [ 366.587499][T17872] [ 366.590408][T17872] dump_stack_lvl+0xf2/0x150 [ 366.595019][T17872] dump_stack+0x15/0x20 [ 366.599156][T17872] should_fail_ex+0x223/0x230 [ 366.603947][T17872] should_fail+0xb/0x10 [ 366.608113][T17872] should_fail_usercopy+0x1a/0x20 [ 366.613124][T17872] _copy_from_user+0x1e/0xd0 [ 366.617868][T17872] copy_msghdr_from_user+0x54/0x2a0 [ 366.623148][T17872] __sys_sendmsg+0x171/0x270 [ 366.627771][T17872] __x64_sys_sendmsg+0x46/0x50 [ 366.632561][T17872] x64_sys_call+0x2689/0x2d60 [ 366.637301][T17872] do_syscall_64+0xc9/0x1c0 [ 366.641784][T17872] ? clear_bhb_loop+0x55/0xb0 [ 366.646495][T17872] ? clear_bhb_loop+0x55/0xb0 [ 366.651177][T17872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.657082][T17872] RIP: 0033:0x7fce602ddf39 [ 366.661472][T17872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.681124][T17872] RSP: 002b:00007fce5ef51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.689513][T17872] RAX: ffffffffffffffda RBX: 00007fce60495f80 RCX: 00007fce602ddf39 [ 366.697499][T17872] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 366.705565][T17872] RBP: 00007fce5ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 366.713517][T17872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.721503][T17872] R13: 0000000000000000 R14: 00007fce60495f80 R15: 00007ffc33472478 [ 366.729458][T17872] [ 366.756360][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.763861][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.771533][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.779056][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.790208][ T7144] veth1_macvtap: left promiscuous mode [ 366.795999][ T7144] veth1_vlan: left promiscuous mode [ 366.801391][ T7144] veth0_vlan: left promiscuous mode [ 366.875087][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 366.885104][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 366.941550][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.959326][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.969719][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.976795][ T7146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.997718][T17788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.008261][T17788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.022208][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.029278][ T7146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.084265][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.101326][T17895] FAULT_INJECTION: forcing a failure. [ 367.101326][T17895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.114435][T17895] CPU: 1 UID: 0 PID: 17895 Comm: syz.4.5794 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 367.124898][T17895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.134955][T17895] Call Trace: [ 367.138298][T17895] [ 367.141274][T17895] dump_stack_lvl+0xf2/0x150 [ 367.145898][T17895] dump_stack+0x15/0x20 [ 367.150141][T17895] should_fail_ex+0x223/0x230 [ 367.153668][T17788] veth0_vlan: entered promiscuous mode [ 367.154896][T17895] should_fail+0xb/0x10 [ 367.163287][T17788] veth1_vlan: entered promiscuous mode [ 367.164557][T17895] should_fail_usercopy+0x1a/0x20 [ 367.175066][T17895] _copy_from_user+0x1e/0xd0 [ 367.179663][T17895] move_addr_to_kernel+0x82/0x120 [ 367.180955][T17788] veth0_macvtap: entered promiscuous mode [ 367.184682][T17895] __sys_bind+0xd3/0x1c0 [ 367.184708][T17895] __x64_sys_bind+0x41/0x50 [ 367.192882][T17788] veth1_macvtap: entered promiscuous mode [ 367.194607][T17895] x64_sys_call+0x201c/0x2d60 [ 367.203221][T17788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.204795][T17895] do_syscall_64+0xc9/0x1c0 [ 367.204826][T17895] ? clear_bhb_loop+0x55/0xb0 [ 367.209481][T17788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.219856][T17895] ? clear_bhb_loop+0x55/0xb0 [ 367.219880][T17895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.224410][T17788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.229037][T17895] RIP: 0033:0x7fce602ddf39 [ 367.238971][T17788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.243536][T17895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.254120][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.259820][T17895] RSP: 002b:00007fce5ef51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 367.268362][T17788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.273990][T17895] RAX: ffffffffffffffda RBX: 00007fce60495f80 RCX: 00007fce602ddf39 [ 367.274005][T17895] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 367.274017][T17895] RBP: 00007fce5ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 367.274033][T17895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.274044][T17895] R13: 0000000000000000 R14: 00007fce60495f80 R15: 00007ffc33472478 [ 367.293677][T17788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.300811][T17895] [ 367.373896][T17788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.384341][T17788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.396969][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.406866][T17788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.415639][T17788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.424452][T17788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.433186][T17788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.449269][T17903] xt_hashlimit: max too large, truncated to 1048576 [ 367.476175][T17903] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5795'. [ 367.515124][T17908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5796'. [ 367.524991][T17908] syz.0.5796[17908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.525109][T17908] syz.0.5796[17908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.538982][T17908] syz.0.5796[17908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.588145][T17839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.609569][T17839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.632098][T17839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.641908][T17839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.677363][T17839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.688834][T17839] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.698003][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.705132][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.737655][ T7144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.755072][T17839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.765451][T17839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.781164][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.788245][ T7149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.847679][ T7144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.909372][ T7144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.917567][T17932] xt_hashlimit: max too large, truncated to 1048576 [ 367.931884][T17839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.967327][ T7144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.985844][T17932] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5803'. [ 368.050927][ T7144] bridge_slave_1: left allmulticast mode [ 368.056752][ T7144] bridge_slave_1: left promiscuous mode [ 368.062400][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.091483][ T7144] bridge_slave_0: left allmulticast mode [ 368.097241][ T7144] bridge_slave_0: left promiscuous mode [ 368.102851][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.188403][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.199835][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.210900][ T7144] bond0 (unregistering): Released all slaves [ 368.253785][T17839] veth0_vlan: entered promiscuous mode [ 368.269097][T17839] veth1_vlan: entered promiscuous mode [ 368.286072][T17919] chnl_net:caif_netlink_parms(): no params data found [ 368.300234][ T7144] hsr_slave_0: left promiscuous mode [ 368.307113][ T7144] hsr_slave_1: left promiscuous mode [ 368.312735][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.320222][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.328526][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.335935][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.346157][ T7144] veth1_macvtap: left promiscuous mode [ 368.351639][ T7144] veth0_macvtap: left promiscuous mode [ 368.357247][ T7144] veth1_vlan: left promiscuous mode [ 368.362489][ T7144] veth0_vlan: left promiscuous mode [ 368.459367][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 368.471315][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 368.512949][T17948] netlink: 'syz.4.5806': attribute type 10 has an invalid length. [ 368.521959][T17948] veth0_macvtap: entered promiscuous mode [ 368.529726][T17948] team0: Device macvtap0 failed to register rx_handler [ 368.536902][T17948] veth0_macvtap: left promiscuous mode [ 368.553566][T17839] veth0_macvtap: entered promiscuous mode [ 368.575811][T17839] veth1_macvtap: entered promiscuous mode [ 368.603637][T17839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.614364][T17839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.624195][T17839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.634688][T17839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.652627][T17839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.666873][T17953] block device autoloading is deprecated and will be removed. [ 368.680689][T17839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.691342][T17839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.701213][T17839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.711691][T17839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.722361][T17839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.738631][T17839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.747400][T17839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.756149][T17839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.764840][T17839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.776043][T17919] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.783084][T17919] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.809353][T17919] bridge_slave_0: entered allmulticast mode [ 368.820678][T17919] bridge_slave_0: entered promiscuous mode [ 368.832972][T17919] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.840295][T17919] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.847593][T17919] bridge_slave_1: entered allmulticast mode [ 368.855076][T17919] bridge_slave_1: entered promiscuous mode [ 368.886563][T17919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.899837][T17919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.937235][T17919] team0: Port device team_slave_0 added [ 368.943705][T17919] team0: Port device team_slave_1 added [ 368.973663][T17919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.980651][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.006592][T17919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.022189][T17919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.029211][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.055239][T17919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.104068][T17973] netlink: 'syz.4.5815': attribute type 10 has an invalid length. [ 369.111960][T17973] veth0_macvtap: entered promiscuous mode [ 369.119276][T17973] team0: Device macvtap0 failed to register rx_handler [ 369.128176][T17973] veth0_macvtap: left promiscuous mode [ 369.128377][T17971] xt_hashlimit: max too large, truncated to 1048576 [ 369.144184][T17975] FAULT_INJECTION: forcing a failure. [ 369.144184][T17975] name failslab, interval 1, probability 0, space 0, times 0 [ 369.156963][T17975] CPU: 1 UID: 0 PID: 17975 Comm: syz.3.5816 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 369.167437][T17975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.177490][T17975] Call Trace: [ 369.180770][T17975] [ 369.183697][T17975] dump_stack_lvl+0xf2/0x150 [ 369.188359][T17975] dump_stack+0x15/0x20 [ 369.192566][T17975] should_fail_ex+0x223/0x230 [ 369.197259][T17975] ? __rds_conn_create+0x3c9/0xfb0 [ 369.202416][T17975] should_failslab+0x8f/0xb0 [ 369.207080][T17975] kmem_cache_alloc_noprof+0x4c/0x290 [ 369.212461][T17975] __rds_conn_create+0x3c9/0xfb0 [ 369.217522][T17975] rds_conn_create_outgoing+0x43/0x60 [ 369.222896][T17975] rds_sendmsg+0xba7/0x1400 [ 369.227474][T17975] ? __pfx_rds_sendmsg+0x10/0x10 [ 369.232404][T17975] __sock_sendmsg+0x140/0x180 [ 369.237114][T17975] ____sys_sendmsg+0x312/0x410 [ 369.241912][T17975] __sys_sendmsg+0x1d9/0x270 [ 369.246549][T17975] __x64_sys_sendmsg+0x46/0x50 [ 369.251308][T17975] x64_sys_call+0x2689/0x2d60 [ 369.255979][T17975] do_syscall_64+0xc9/0x1c0 [ 369.260499][T17975] ? clear_bhb_loop+0x55/0xb0 [ 369.265168][T17975] ? clear_bhb_loop+0x55/0xb0 [ 369.269845][T17975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.275752][T17975] RIP: 0033:0x7faae158df39 [ 369.280211][T17975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.299812][T17975] RSP: 002b:00007faae0207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.308215][T17975] RAX: ffffffffffffffda RBX: 00007faae1745f80 RCX: 00007faae158df39 [ 369.316175][T17975] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 369.324191][T17975] RBP: 00007faae0207090 R08: 0000000000000000 R09: 0000000000000000 [ 369.332151][T17975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.340108][T17975] R13: 0000000000000000 R14: 00007faae1745f80 R15: 00007ffc5a4a3ce8 [ 369.348095][T17975] [ 369.364870][T17919] hsr_slave_0: entered promiscuous mode [ 369.423418][T17919] hsr_slave_1: entered promiscuous mode [ 369.528155][T17994] netlink: 'syz.3.5821': attribute type 10 has an invalid length. [ 369.536444][T17994] veth0_macvtap: left promiscuous mode [ 369.543707][T17994] veth0_macvtap: entered promiscuous mode [ 369.550448][T17994] team0: Device macvtap0 failed to register rx_handler [ 369.559169][T17994] veth0_macvtap: left promiscuous mode [ 369.670142][ T7144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.734624][ T7144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.766631][T17979] chnl_net:caif_netlink_parms(): no params data found [ 369.819810][ T7144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.833125][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5827'. [ 369.842814][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5827'. [ 369.875850][T17979] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.882971][T17979] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.904289][T17979] bridge_slave_0: entered allmulticast mode [ 369.910742][T17979] bridge_slave_0: entered promiscuous mode [ 369.921818][T17919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.933069][ T7144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.950005][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.957147][T17979] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.967214][T17979] bridge_slave_1: entered allmulticast mode [ 369.973709][T17979] bridge_slave_1: entered promiscuous mode [ 369.985994][T17919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.995357][T17919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.005379][T17919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.015388][T18032] FAULT_INJECTION: forcing a failure. [ 370.015388][T18032] name failslab, interval 1, probability 0, space 0, times 0 [ 370.028084][T18032] CPU: 0 UID: 0 PID: 18032 Comm: syz.3.5830 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 370.038493][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.048775][T18032] Call Trace: [ 370.052105][T18032] [ 370.055044][T18032] dump_stack_lvl+0xf2/0x150 [ 370.059634][T18032] dump_stack+0x15/0x20 [ 370.063857][T18032] should_fail_ex+0x223/0x230 [ 370.068581][T18032] ? __alloc_skb+0x10b/0x310 [ 370.073189][T18032] should_failslab+0x8f/0xb0 [ 370.077772][T18032] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 370.083654][T18032] __alloc_skb+0x10b/0x310 [ 370.088157][T18032] __ip_append_data+0x18ee/0x2350 [ 370.093204][T18032] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 370.098746][T18032] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 370.104285][T18032] ip_append_data+0x11f/0x150 [ 370.108955][T18032] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 370.114493][T18032] udp_sendmsg+0x366/0x12f0 [ 370.118994][T18032] ? __rcu_read_unlock+0x4e/0x70 [ 370.123928][T18032] ? avc_has_perm_noaudit+0x1cc/0x210 [ 370.129367][T18032] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 370.134919][T18032] ? avc_has_perm+0xd4/0x160 [ 370.139502][T18032] ? __pfx_udp_sendmsg+0x10/0x10 [ 370.144493][T18032] inet_sendmsg+0xaf/0xd0 [ 370.148818][T18032] __sock_sendmsg+0x102/0x180 [ 370.153560][T18032] sock_sendmsg+0x96/0xe0 [ 370.157886][T18032] splice_to_socket+0x657/0x9d0 [ 370.162741][T18032] ? rw_verify_area+0x8a/0x150 [ 370.167498][T18032] ? __pfx_splice_to_socket+0x10/0x10 [ 370.172950][T18032] do_splice+0x98f/0x1120 [ 370.177275][T18032] ? get_pid_task+0x8e/0xc0 [ 370.181767][T18032] ? proc_fail_nth_write+0x12a/0x150 [ 370.187048][T18032] ? __fget_files+0x1d4/0x210 [ 370.191783][T18032] __se_sys_splice+0x24c/0x390 [ 370.196572][T18032] __x64_sys_splice+0x78/0x90 [ 370.201242][T18032] x64_sys_call+0x2945/0x2d60 [ 370.205909][T18032] do_syscall_64+0xc9/0x1c0 [ 370.210520][T18032] ? clear_bhb_loop+0x55/0xb0 [ 370.215247][T18032] ? clear_bhb_loop+0x55/0xb0 [ 370.219912][T18032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.225798][T18032] RIP: 0033:0x7faae158df39 [ 370.230296][T18032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.249897][T18032] RSP: 002b:00007faae01c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 370.258370][T18032] RAX: ffffffffffffffda RBX: 00007faae1746130 RCX: 00007faae158df39 [ 370.266329][T18032] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 370.274287][T18032] RBP: 00007faae01c5090 R08: 0000000000007151 R09: 0000000000000000 [ 370.282243][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.290202][T18032] R13: 0000000000000001 R14: 00007faae1746130 R15: 00007ffc5a4a3ce8 [ 370.298196][T18032] [ 370.314696][T17979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.332123][T17979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.380546][T17979] team0: Port device team_slave_0 added [ 370.393264][T18041] xt_hashlimit: max too large, truncated to 1048576 [ 370.400582][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5838'. [ 370.415318][T17979] team0: Port device team_slave_1 added [ 370.427270][ T7144] bridge_slave_1: left allmulticast mode [ 370.432927][ T7144] bridge_slave_1: left promiscuous mode [ 370.438648][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.450848][ T7144] bridge_slave_0: left allmulticast mode [ 370.456568][ T7144] bridge_slave_0: left promiscuous mode [ 370.462239][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.547606][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.558050][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.572903][ T7144] bond0 (unregistering): Released all slaves [ 370.594982][T17979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.601946][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.627857][T17979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.646115][T17979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.653059][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.679056][T17979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.691969][T18046] netlink: 'syz.0.5840': attribute type 10 has an invalid length. [ 370.701230][T18046] veth0_macvtap: left promiscuous mode [ 370.710757][T18046] veth0_macvtap: entered promiscuous mode [ 370.718803][T18046] team0: Device macvtap0 failed to register rx_handler [ 370.726046][T18046] veth0_macvtap: left promiscuous mode [ 370.746990][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.754433][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.763172][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.770641][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.780573][ T7144] veth1_macvtap: left promiscuous mode [ 370.786145][ T7144] veth0_macvtap: left promiscuous mode [ 370.791729][ T7144] veth1_vlan: left promiscuous mode [ 370.797050][ T7144] veth0_vlan: left promiscuous mode [ 370.889270][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 370.900111][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 370.950367][T17979] hsr_slave_0: entered promiscuous mode [ 370.957578][T17979] hsr_slave_1: entered promiscuous mode [ 370.963473][T17979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.972142][T17979] Cannot create hsr debugfs directory [ 370.984200][T17919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.003501][T17919] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.013740][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.020815][ T7161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.040262][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.047358][ T7146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.066521][T17919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.077073][T17919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.161152][T17919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.230212][T17919] veth0_vlan: entered promiscuous mode [ 371.239336][T17919] veth1_vlan: entered promiscuous mode [ 371.252805][T17919] veth0_macvtap: entered promiscuous mode [ 371.260517][T17919] veth1_macvtap: entered promiscuous mode [ 371.270367][T17919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.280890][T17919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.290841][T17919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.301317][T17919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.313556][T17919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.329068][T17919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.339562][T17919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.349394][T17919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.359902][T17919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.371104][T17919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.381928][T17919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.390789][T17919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.399531][T17919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.408288][T17919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.459180][T18069] FAULT_INJECTION: forcing a failure. [ 371.459180][T18069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.472308][T18069] CPU: 0 UID: 0 PID: 18069 Comm: syz.4.5845 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 371.482733][T18069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.492783][T18069] Call Trace: [ 371.496055][T18069] [ 371.498985][T18069] dump_stack_lvl+0xf2/0x150 [ 371.503608][T18069] dump_stack+0x15/0x20 [ 371.507767][T18069] should_fail_ex+0x223/0x230 [ 371.512453][T18069] should_fail+0xb/0x10 [ 371.516633][T18069] should_fail_usercopy+0x1a/0x20 [ 371.521682][T18069] _copy_from_user+0x1e/0xd0 [ 371.526281][T18069] do_ipv6_setsockopt+0x1ef/0x2250 [ 371.531494][T18069] ? __rcu_read_unlock+0x4e/0x70 [ 371.536488][T18069] ? avc_has_perm_noaudit+0x1cc/0x210 [ 371.541909][T18069] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 371.548323][T18069] ipv6_setsockopt+0x57/0x130 [ 371.553028][T18069] udpv6_setsockopt+0x95/0xb0 [ 371.557691][T18069] sock_common_setsockopt+0x64/0x80 [ 371.562914][T18069] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 371.568858][T18069] __sys_setsockopt+0x1cc/0x240 [ 371.571421][T18072] mmap: syz.3.5844 (18072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 371.573689][T18069] __x64_sys_setsockopt+0x66/0x80 [ 371.590720][T18069] x64_sys_call+0x278d/0x2d60 [ 371.595436][T18069] do_syscall_64+0xc9/0x1c0 [ 371.599951][T18069] ? clear_bhb_loop+0x55/0xb0 [ 371.604638][T18069] ? clear_bhb_loop+0x55/0xb0 [ 371.609391][T18069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.615314][T18069] RIP: 0033:0x7fce602ddf39 [ 371.619736][T18069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.639392][T18069] RSP: 002b:00007fce5ef51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 371.647814][T18069] RAX: ffffffffffffffda RBX: 00007fce60495f80 RCX: 00007fce602ddf39 [ 371.655855][T18069] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006 [ 371.663849][T18069] RBP: 00007fce5ef51090 R08: 0000000000000018 R09: 0000000000000000 [ 371.671822][T18069] R10: 0000000020001e80 R11: 0000000000000246 R12: 0000000000000001 [ 371.679824][T18069] R13: 0000000000000000 R14: 00007fce60495f80 R15: 00007ffc33472478 [ 371.687857][T18069] [ 371.717828][T17979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.730050][T17979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.739411][T17979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.756012][T17979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.784229][T18083] netlink: 'syz.0.5849': attribute type 3 has an invalid length. [ 371.814475][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 371.814489][ T29] audit: type=1400 audit(1727396709.276:16084): avc: denied { create } for pid=18082 comm="syz.0.5849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.855437][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5849'. [ 371.884269][T18087] IPv6: Can't replace route, no match found [ 371.906510][T17979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.920606][ T29] audit: type=1400 audit(1727396709.296:16085): avc: denied { setopt } for pid=18082 comm="syz.0.5849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.940189][ T29] audit: type=1400 audit(1727396709.356:16086): avc: denied { write } for pid=18086 comm="syz.1.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.959742][ T29] audit: type=1326 audit(1727396709.356:16087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 371.964802][T18087] block device autoloading is deprecated and will be removed. [ 371.983431][ T29] audit: type=1326 audit(1727396709.356:16088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 371.999259][T17979] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.014423][ T29] audit: type=1326 audit(1727396709.356:16089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 372.044753][ T29] audit: type=1326 audit(1727396709.356:16090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 372.061756][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.068359][ T29] audit: type=1326 audit(1727396709.376:16091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 372.075378][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.098868][ T29] audit: type=1326 audit(1727396709.376:16092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 372.138624][T18087] syz.1.5850: attempt to access beyond end of device [ 372.138624][T18087] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 372.213710][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.220866][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.232692][T18090] loop0: detected capacity change from 0 to 512 [ 372.259374][ T29] audit: type=1326 audit(1727396709.596:16093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.1.5850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a0cdf39 code=0x7ffc0000 [ 372.301765][T17979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.400879][T17979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.418999][T18106] netlink: 'syz.0.5857': attribute type 10 has an invalid length. [ 372.435647][T18106] veth0_macvtap: entered promiscuous mode [ 372.449004][T18106] team0: Device macvtap0 failed to register rx_handler [ 372.465545][T18106] veth0_macvtap: left promiscuous mode [ 372.517953][T18110] hub 8-0:1.0: USB hub found [ 372.522671][T18110] hub 8-0:1.0: 8 ports detected [ 372.565316][T18119] FAULT_INJECTION: forcing a failure. [ 372.565316][T18119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.578604][T18119] CPU: 0 UID: 0 PID: 18119 Comm: syz.1.5860 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 372.589066][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.599126][T18119] Call Trace: [ 372.602397][T18119] [ 372.605324][T18119] dump_stack_lvl+0xf2/0x150 [ 372.609974][T18119] dump_stack+0x15/0x20 [ 372.614149][T18119] should_fail_ex+0x223/0x230 [ 372.619192][T18119] should_fail_alloc_page+0xfd/0x110 [ 372.624493][T18119] __alloc_pages_noprof+0x109/0x360 [ 372.629697][T18119] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 372.635202][T18119] alloc_pages_noprof+0xe1/0x100 [ 372.640262][T18119] pte_alloc_one+0x32/0xf0 [ 372.644761][T18119] __pte_alloc+0x33/0x270 [ 372.649099][T18119] ? xa_load+0xb9/0xe0 [ 372.653206][T18119] handle_mm_fault+0x1b05/0x2a80 [ 372.658175][T18119] exc_page_fault+0x296/0x650 [ 372.662907][T18119] asm_exc_page_fault+0x26/0x30 [ 372.667767][T18119] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 372.673587][T18119] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 372.693287][T18119] RSP: 0018:ffffc900015afb70 EFLAGS: 00050216 [ 372.699586][T18119] RAX: ffff88810f3ecc78 RBX: 0000000020b3ffac RCX: 0000000000000020 [ 372.707618][T18119] RDX: 0000000000000001 RSI: 0000000020b3ffac RDI: ffffc900015afc80 [ 372.715596][T18119] RBP: ffffc900015afce0 R08: 0000000080000000 R09: 0000000000000000 [ 372.723565][T18119] R10: 0001c900015afc80 R11: 0001c900015afc9f R12: 0000000020b3ffcc [ 372.731534][T18119] R13: ffffc900015afd44 R14: ffffc900015afc80 R15: 0000000000000020 [ 372.739548][T18119] _copy_from_user+0x80/0xd0 [ 372.744199][T18119] do_ip6t_get_ctl+0x1f6/0xc00 [ 372.748989][T18119] ? terminate_walk+0x260/0x280 [ 372.753831][T18119] ? should_fail_ex+0xd7/0x230 [ 372.758630][T18119] ? _copy_from_user+0x9a/0xd0 [ 372.763381][T18119] ? do_ipv6_getsockopt+0xcaf/0x1430 [ 372.768683][T18119] ? __rcu_read_unlock+0x4e/0x70 [ 372.773673][T18119] nf_getsockopt+0x18c/0x1b0 [ 372.778332][T18119] ipv6_getsockopt+0x172/0x1e0 [ 372.783153][T18119] tcp_getsockopt+0xaa/0xe0 [ 372.787794][T18119] sock_common_getsockopt+0x5b/0x70 [ 372.793035][T18119] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 372.799021][T18119] do_sock_getsockopt+0x1ca/0x260 [ 372.804079][T18119] __sys_getsockopt+0x18a/0x200 [ 372.808921][T18119] __x64_sys_getsockopt+0x66/0x80 [ 372.813957][T18119] x64_sys_call+0x11cd/0x2d60 [ 372.818627][T18119] do_syscall_64+0xc9/0x1c0 [ 372.823169][T18119] ? clear_bhb_loop+0x55/0xb0 [ 372.827898][T18119] ? clear_bhb_loop+0x55/0xb0 [ 372.832578][T18119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.838467][T18119] RIP: 0033:0x7f269a0cdf39 [ 372.842924][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.862626][T18119] RSP: 002b:00007f2698d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 372.871031][T18119] RAX: ffffffffffffffda RBX: 00007f269a285f80 RCX: 00007f269a0cdf39 [ 372.878989][T18119] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 372.886970][T18119] RBP: 00007f2698d47090 R08: 0000000020001ffc R09: 0000000000000000 [ 372.894928][T18119] R10: 0000000020b3ffac R11: 0000000000000246 R12: 0000000000000001 [ 372.902888][T18119] R13: 0000000000000000 R14: 00007f269a285f80 R15: 00007ffd24fb1088 [ 372.910849][T18119] [ 372.950906][T17979] veth0_vlan: entered promiscuous mode [ 373.030070][T17979] veth1_vlan: entered promiscuous mode [ 373.057170][T17979] veth0_macvtap: entered promiscuous mode [ 373.064818][T17979] veth1_macvtap: entered promiscuous mode [ 373.075003][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.085477][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.095390][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.105852][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.115726][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.126198][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.137026][T17979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.146254][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.156849][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.166710][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.177216][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.187084][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.197536][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.208222][T17979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.226657][T17979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.235517][T17979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.244557][T17979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.253313][T17979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.266854][T18142] netlink: 'syz.1.5868': attribute type 10 has an invalid length. [ 373.276951][T18142] veth0_macvtap: left promiscuous mode [ 373.285374][T18142] veth0_macvtap: entered promiscuous mode [ 373.292270][T18142] team0: Device macvtap0 failed to register rx_handler [ 373.299866][T18142] veth0_macvtap: left promiscuous mode [ 373.309862][T18134] IPv6: Can't replace route, no match found [ 373.315494][T18144] syz.3.5865: attempt to access beyond end of device [ 373.315494][T18144] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.455905][T18149] FAULT_INJECTION: forcing a failure. [ 373.455905][T18149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.456848][T18158] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 373.469032][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.2.5817 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 373.487232][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.497294][T18149] Call Trace: [ 373.500556][T18149] [ 373.503475][T18149] dump_stack_lvl+0xf2/0x150 [ 373.508189][T18149] dump_stack+0x15/0x20 [ 373.512337][T18149] should_fail_ex+0x223/0x230 [ 373.517124][T18149] should_fail+0xb/0x10 [ 373.521319][T18149] should_fail_usercopy+0x1a/0x20 [ 373.526389][T18149] _copy_to_user+0x1e/0xa0 [ 373.530853][T18149] simple_read_from_buffer+0xa0/0x110 [ 373.536329][T18149] proc_fail_nth_read+0xf9/0x140 [ 373.541268][T18149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.546932][T18149] vfs_read+0x195/0x720 [ 373.551178][T18149] ? __rcu_read_unlock+0x4e/0x70 [ 373.556179][T18149] ? __fget_files+0x1d4/0x210 [ 373.560904][T18149] ksys_read+0xeb/0x1b0 [ 373.565178][T18149] __x64_sys_read+0x42/0x50 [ 373.569676][T18149] x64_sys_call+0x27d3/0x2d60 [ 373.574356][T18149] do_syscall_64+0xc9/0x1c0 [ 373.578918][T18149] ? clear_bhb_loop+0x55/0xb0 [ 373.583654][T18149] ? clear_bhb_loop+0x55/0xb0 [ 373.588337][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.594222][T18149] RIP: 0033:0x7fdd0045c97c [ 373.598624][T18149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 373.618275][T18149] RSP: 002b:00007fdcff0d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.626674][T18149] RAX: ffffffffffffffda RBX: 00007fdd00615f80 RCX: 00007fdd0045c97c [ 373.634714][T18149] RDX: 000000000000000f RSI: 00007fdcff0d10a0 RDI: 0000000000000003 [ 373.642710][T18149] RBP: 00007fdcff0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 373.650670][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.658631][T18149] R13: 0000000000000000 R14: 00007fdd00615f80 R15: 00007ffc74d43c98 [ 373.666711][T18149] [ 373.670029][T18155] FAULT_INJECTION: forcing a failure. [ 373.670029][T18155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.683182][T18155] CPU: 0 UID: 0 PID: 18155 Comm: syz.0.5874 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 373.693623][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.703663][T18155] Call Trace: [ 373.706929][T18155] [ 373.709850][T18155] dump_stack_lvl+0xf2/0x150 [ 373.714511][T18155] dump_stack+0x15/0x20 [ 373.718733][T18155] should_fail_ex+0x223/0x230 [ 373.723426][T18155] should_fail+0xb/0x10 [ 373.727624][T18155] should_fail_usercopy+0x1a/0x20 [ 373.732718][T18155] _copy_from_iter+0xd3/0xd20 [ 373.737397][T18155] ? should_fail_ex+0xd7/0x230 [ 373.742234][T18155] ? qrtr_tun_write_iter+0x8b/0x130 [ 373.747426][T18155] ? __virt_addr_valid+0x1ed/0x250 [ 373.752533][T18155] ? __check_object_size+0x364/0x520 [ 373.757814][T18155] qrtr_tun_write_iter+0xae/0x130 [ 373.762833][T18155] vfs_write+0x76a/0x910 [ 373.767071][T18155] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 373.772819][T18155] ksys_write+0xeb/0x1b0 [ 373.777060][T18155] __x64_sys_write+0x42/0x50 [ 373.781653][T18155] x64_sys_call+0x27dd/0x2d60 [ 373.786325][T18155] do_syscall_64+0xc9/0x1c0 [ 373.790865][T18155] ? clear_bhb_loop+0x55/0xb0 [ 373.795545][T18155] ? clear_bhb_loop+0x55/0xb0 [ 373.800268][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.806155][T18155] RIP: 0033:0x7fba737adf39 [ 373.810562][T18155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.830313][T18155] RSP: 002b:00007fba72427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.838722][T18155] RAX: ffffffffffffffda RBX: 00007fba73965f80 RCX: 00007fba737adf39 [ 373.846697][T18155] RDX: 0000000000000920 RSI: 0000000000000000 RDI: 0000000000000006 [ 373.854800][T18155] RBP: 00007fba72427090 R08: 0000000000000000 R09: 0000000000000000 [ 373.862763][T18155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.870735][T18155] R13: 0000000000000000 R14: 00007fba73965f80 R15: 00007fff3bf27338 [ 373.878701][T18155] [ 373.946794][T18175] FAULT_INJECTION: forcing a failure. [ 373.946794][T18175] name failslab, interval 1, probability 0, space 0, times 0 [ 373.959473][T18175] CPU: 1 UID: 0 PID: 18175 Comm: syz.3.5881 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 373.969961][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.980120][T18175] Call Trace: [ 373.983437][T18175] [ 373.986362][T18175] dump_stack_lvl+0xf2/0x150 [ 373.991032][T18175] dump_stack+0x15/0x20 [ 373.995248][T18175] should_fail_ex+0x223/0x230 [ 373.999964][T18175] ? __se_sys_memfd_create+0x230/0x5c0 [ 374.005483][T18175] should_failslab+0x8f/0xb0 [ 374.010062][T18175] __kmalloc_noprof+0xa5/0x370 [ 374.014825][T18175] __se_sys_memfd_create+0x230/0x5c0 [ 374.020181][T18175] __x64_sys_memfd_create+0x31/0x40 [ 374.025522][T18175] x64_sys_call+0x2891/0x2d60 [ 374.030221][T18175] do_syscall_64+0xc9/0x1c0 [ 374.034722][T18175] ? clear_bhb_loop+0x55/0xb0 [ 374.039580][T18175] ? clear_bhb_loop+0x55/0xb0 [ 374.044268][T18175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.050157][T18175] RIP: 0033:0x7faae158df39 [ 374.054585][T18175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.074272][T18175] RSP: 002b:00007faae0206e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 374.082677][T18175] RAX: ffffffffffffffda RBX: 00000000000004b4 RCX: 00007faae158df39 [ 374.090707][T18175] RDX: 00007faae0206ef0 RSI: 0000000000000000 RDI: 00007faae1600a09 [ 374.098692][T18175] RBP: 0000000020000c80 R08: 00007faae0206bb7 R09: 00007faae0206e40 [ 374.106687][T18175] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000080 [ 374.114650][T18175] R13: 00007faae0206ef0 R14: 00007faae0206eb0 R15: 00000000200000c0 [ 374.122643][T18175] [ 374.150575][T18182] loop1: detected capacity change from 0 to 512 [ 374.161415][T18184] netlink: 'syz.4.5884': attribute type 10 has an invalid length. [ 374.172318][T18184] veth0_macvtap: entered promiscuous mode [ 374.179382][T18184] team0: Device macvtap0 failed to register rx_handler [ 374.190532][T18184] veth0_macvtap: left promiscuous mode [ 374.197228][T18182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5883: bg 0: block 393: padding at end of block bitmap is not set [ 374.212470][T18182] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 374.287151][T18182] EXT4-fs (loop1): 2 truncates cleaned up [ 374.293326][T18182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.331453][T18194] loop0: detected capacity change from 0 to 128 [ 374.339383][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.390054][T18194] syz.0.5888: attempt to access beyond end of device [ 374.390054][T18194] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 374.431392][T18207] FAULT_INJECTION: forcing a failure. [ 374.431392][T18207] name failslab, interval 1, probability 0, space 0, times 0 [ 374.444135][T18207] CPU: 1 UID: 0 PID: 18207 Comm: syz.3.5893 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 374.454641][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.464716][T18207] Call Trace: [ 374.468011][T18207] [ 374.470954][T18207] dump_stack_lvl+0xf2/0x150 [ 374.475558][T18207] dump_stack+0x15/0x20 [ 374.479832][T18207] should_fail_ex+0x223/0x230 [ 374.484501][T18207] ? ceph_key_preparse+0x92/0x220 [ 374.489519][T18207] should_failslab+0x8f/0xb0 [ 374.494136][T18207] __kmalloc_cache_noprof+0x4b/0x2a0 [ 374.499682][T18207] ceph_key_preparse+0x92/0x220 [ 374.504520][T18207] __key_create_or_update+0x29f/0x750 [ 374.510058][T18207] key_create_or_update+0x42/0x60 [ 374.515155][T18207] __se_sys_add_key+0x280/0x320 [ 374.520013][T18207] ? fput+0x14e/0x190 [ 374.524079][T18207] __x64_sys_add_key+0x67/0x80 [ 374.528932][T18207] x64_sys_call+0x157d/0x2d60 [ 374.533634][T18207] do_syscall_64+0xc9/0x1c0 [ 374.538124][T18207] ? clear_bhb_loop+0x55/0xb0 [ 374.542860][T18207] ? clear_bhb_loop+0x55/0xb0 [ 374.547597][T18207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.553535][T18207] RIP: 0033:0x7faae158df39 [ 374.557949][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.577664][T18207] RSP: 002b:00007faae0207038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 374.586933][T18207] RAX: ffffffffffffffda RBX: 00007faae1745f80 RCX: 00007faae158df39 [ 374.594905][T18207] RDX: 0000000020000bc0 RSI: 0000000000000000 RDI: 0000000020000040 [ 374.602916][T18207] RBP: 00007faae0207090 R08: 00000000234f80ce R09: 0000000000000000 [ 374.610884][T18207] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 374.618910][T18207] R13: 0000000000000000 R14: 00007faae1745f80 R15: 00007ffc5a4a3ce8 [ 374.626879][T18207] [ 374.629978][T18199] hsr_slave_0: left promiscuous mode [ 374.641263][T18199] hsr_slave_1: left promiscuous mode [ 374.641542][T18210] loop1: detected capacity change from 0 to 1024 [ 374.653728][T18210] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 374.668936][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5894'. [ 374.684667][T18210] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 374.695825][T18210] EXT4-fs (loop1): orphan cleanup on readonly fs [ 374.701609][T18216] FAULT_INJECTION: forcing a failure. [ 374.701609][T18216] name failslab, interval 1, probability 0, space 0, times 0 [ 374.703005][T18210] EXT4-fs error (device loop1): ext4_map_blocks:705: inode #3: block 3: comm syz.1.5890: lblock 3 mapped to illegal pblock 3 (length 1) [ 374.714870][T18216] CPU: 1 UID: 0 PID: 18216 Comm: syz.4.5897 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 374.731105][ T7144] kworker/u8:48: attempt to access beyond end of device [ 374.731105][ T7144] loop0: rw=1, sector=249, nr_sectors = 792 limit=128 [ 374.739228][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.739241][T18216] Call Trace: [ 374.739247][T18216] [ 374.739255][T18216] dump_stack_lvl+0xf2/0x150 [ 374.739283][T18216] dump_stack+0x15/0x20 [ 374.777858][T18216] should_fail_ex+0x223/0x230 [ 374.782536][T18216] ? __kvmalloc_node_noprof+0x72/0x170 [ 374.788128][T18216] should_failslab+0x8f/0xb0 [ 374.792710][T18216] __kmalloc_node_noprof+0xa8/0x380 [ 374.797925][T18216] __kvmalloc_node_noprof+0x72/0x170 [ 374.803281][T18216] alloc_fdtable+0xf8/0x190 [ 374.807823][T18216] dup_fd+0x56c/0x6c0 [ 374.811816][T18216] unshare_fd+0xa8/0x120 [ 374.816053][T18216] __close_range+0x129/0x490 [ 374.820659][T18216] ? ksys_write+0x17a/0x1b0 [ 374.825159][T18216] __x64_sys_close_range+0x3f/0x50 [ 374.830377][T18216] x64_sys_call+0x14ce/0x2d60 [ 374.835113][T18216] do_syscall_64+0xc9/0x1c0 [ 374.839653][T18216] ? clear_bhb_loop+0x55/0xb0 [ 374.844395][T18216] ? clear_bhb_loop+0x55/0xb0 [ 374.849105][T18216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.855070][T18216] RIP: 0033:0x7fce602ddf39 [ 374.859533][T18216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.879130][T18216] RSP: 002b:00007fce5ef51038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 374.887633][T18216] RAX: ffffffffffffffda RBX: 00007fce60495f80 RCX: 00007fce602ddf39 [ 374.895613][T18216] RDX: 0000000000000006 RSI: 0000000000000004 RDI: 0000000000000004 [ 374.903588][T18216] RBP: 00007fce5ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 374.911548][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.919514][T18216] R13: 0000000000000000 R14: 00007fce60495f80 R15: 00007ffc33472478 [ 374.927477][T18216] [ 374.939791][T18210] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.5890: Failed to acquire dquot type 0 [ 374.952113][T18210] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.5890: lblock 3 mapped to illegal pblock 3 (length 1) [ 374.967498][T18210] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.5890: Failed to acquire dquot type 0 [ 374.993502][T18210] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.5890: Freeing blocks not in datazone - block = 0, count = 4096 [ 374.998863][T18222] netlink: 'syz.4.5899': attribute type 10 has an invalid length. [ 375.015652][T18222] veth0_macvtap: entered promiscuous mode [ 375.023355][T18222] team0: Device macvtap0 failed to register rx_handler [ 375.030688][T18210] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.5890: lblock 3 mapped to illegal pblock 3 (length 1) [ 375.039164][T18222] veth0_macvtap: left promiscuous mode [ 375.046418][T18210] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.5890: Failed to acquire dquot type 0 [ 375.061525][T18210] EXT4-fs (loop1): 1 orphan inode deleted [ 375.101500][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5905'. [ 375.111417][T18235] FAULT_INJECTION: forcing a failure. [ 375.111417][T18235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.124507][T18235] CPU: 1 UID: 0 PID: 18235 Comm: syz.4.5905 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 375.134926][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 375.145054][T18235] Call Trace: [ 375.148322][T18235] [ 375.151301][T18235] dump_stack_lvl+0xf2/0x150 [ 375.155904][T18235] dump_stack+0x15/0x20 [ 375.160059][T18235] should_fail_ex+0x223/0x230 [ 375.164854][T18235] should_fail+0xb/0x10 [ 375.169060][T18235] should_fail_usercopy+0x1a/0x20 [ 375.174081][T18235] _copy_from_iter+0xd3/0xd20 [ 375.178840][T18235] ? kmalloc_reserve+0x16e/0x190 [ 375.183767][T18235] ? __build_skb_around+0x196/0x1f0 [ 375.188970][T18235] ? __alloc_skb+0x21f/0x310 [ 375.193600][T18235] ? __virt_addr_valid+0x1ed/0x250 [ 375.198703][T18235] ? __check_object_size+0x364/0x520 [ 375.204056][T18235] netlink_sendmsg+0x460/0x6e0 [ 375.208898][T18235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.214178][T18235] __sock_sendmsg+0x140/0x180 [ 375.219031][T18235] ____sys_sendmsg+0x312/0x410 [ 375.223829][T18235] __sys_sendmsg+0x1d9/0x270 [ 375.228447][T18235] __x64_sys_sendmsg+0x46/0x50 [ 375.233252][T18235] x64_sys_call+0x2689/0x2d60 [ 375.237925][T18235] do_syscall_64+0xc9/0x1c0 [ 375.242459][T18235] ? clear_bhb_loop+0x55/0xb0 [ 375.247238][T18235] ? clear_bhb_loop+0x55/0xb0 [ 375.251954][T18235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.257872][T18235] RIP: 0033:0x7fce602ddf39 [ 375.262274][T18235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.281871][T18235] RSP: 002b:00007fce5ef51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.290327][T18235] RAX: ffffffffffffffda RBX: 00007fce60495f80 RCX: 00007fce602ddf39 [ 375.298285][T18235] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000005 [ 375.306268][T18235] RBP: 00007fce5ef51090 R08: 0000000000000000 R09: 0000000000000000 [ 375.314226][T18235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.322196][T18235] R13: 0000000000000000 R14: 00007fce60495f80 R15: 00007ffc33472478 [ 375.330181][T18235] [ 375.337529][T18210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.386711][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.441861][T18248] loop1: detected capacity change from 0 to 128 [ 375.448432][T18248] vfat: Unknown parameter '{' [ 375.473967][T18246] loop0: detected capacity change from 0 to 512 [ 375.512257][T18254] loop1: detected capacity change from 0 to 256 [ 375.526082][T18254] FAT-fs (loop1): Directory bread(block 64) failed [ 375.532718][T18254] FAT-fs (loop1): Directory bread(block 65) failed [ 375.539927][T18254] FAT-fs (loop1): Directory bread(block 66) failed [ 375.546616][T18254] FAT-fs (loop1): Directory bread(block 67) failed [ 375.553405][T18254] FAT-fs (loop1): Directory bread(block 68) failed [ 375.554432][T18258] tipc: Can't bind to reserved service type 2 [ 375.560438][T18254] FAT-fs (loop1): Directory bread(block 69) failed [ 375.572710][T18254] FAT-fs (loop1): Directory bread(block 70) failed [ 375.579322][T18254] FAT-fs (loop1): Directory bread(block 71) failed [ 375.580049][T18258] pim6reg1: entered promiscuous mode [ 375.586984][T18254] FAT-fs (loop1): Directory bread(block 72) failed [ 375.591212][T18258] pim6reg1: entered allmulticast mode [ 375.597785][T18254] FAT-fs (loop1): Directory bread(block 73) failed [ 375.614806][T18254] Process accounting resumed [ 375.620006][T18254] syz.1.5914: attempt to access beyond end of device [ 375.620006][T18254] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 376.628771][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 376.710307][T18280] FAULT_INJECTION: forcing a failure. [ 376.710307][T18280] name failslab, interval 1, probability 0, space 0, times 0 [ 376.723006][T18280] CPU: 1 UID: 0 PID: 18280 Comm: syz.1.5926 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 376.733429][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.743566][T18280] Call Trace: [ 376.746869][T18280] [ 376.749782][T18280] dump_stack_lvl+0xf2/0x150 [ 376.754372][T18280] dump_stack+0x15/0x20 [ 376.758534][T18280] should_fail_ex+0x223/0x230 [ 376.763324][T18280] ? __alloc_skb+0x10b/0x310 [ 376.767925][T18280] should_failslab+0x8f/0xb0 [ 376.772540][T18280] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 376.778351][T18280] __alloc_skb+0x10b/0x310 [ 376.782751][T18280] netlink_alloc_large_skb+0xad/0xe0 [ 376.788081][T18280] netlink_sendmsg+0x3b4/0x6e0 [ 376.792833][T18280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.798103][T18280] __sock_sendmsg+0x140/0x180 [ 376.802803][T18280] ____sys_sendmsg+0x312/0x410 [ 376.807560][T18280] __sys_sendmsg+0x1d9/0x270 [ 376.812143][T18280] __x64_sys_sendmsg+0x46/0x50 [ 376.816968][T18280] x64_sys_call+0x2689/0x2d60 [ 376.821661][T18280] do_syscall_64+0xc9/0x1c0 [ 376.826218][T18280] ? clear_bhb_loop+0x55/0xb0 [ 376.830967][T18280] ? clear_bhb_loop+0x55/0xb0 [ 376.835643][T18280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.841521][T18280] RIP: 0033:0x7f269a0cdf39 [ 376.845948][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.865582][T18280] RSP: 002b:00007f2698d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.873976][T18280] RAX: ffffffffffffffda RBX: 00007f269a285f80 RCX: 00007f269a0cdf39 [ 376.881929][T18280] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 376.889882][T18280] RBP: 00007f2698d47090 R08: 0000000000000000 R09: 0000000000000000 [ 376.897915][T18280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.905870][T18280] R13: 0000000000000000 R14: 00007f269a285f80 R15: 00007ffd24fb1088 [ 376.913826][T18280] [ 376.927705][T18282] IPv6: Can't replace route, no match found [ 376.945435][T18284] loop1: detected capacity change from 0 to 512 [ 376.956634][T18284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.969422][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 376.969420][T18284] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.969437][ T29] audit: type=1400 audit(1727396714.426:16331): avc: denied { mount } for pid=18283 comm="syz.1.5928" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 377.010799][ T29] audit: type=1400 audit(1727396714.466:16332): avc: denied { write } for pid=18283 comm="syz.1.5928" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.033363][ T29] audit: type=1400 audit(1727396714.466:16333): avc: denied { add_name } for pid=18283 comm="syz.1.5928" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.056111][ T29] audit: type=1400 audit(1727396714.466:16334): avc: denied { create } for pid=18283 comm="syz.1.5928" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 377.078402][ T29] audit: type=1400 audit(1727396714.466:16335): avc: denied { read append open } for pid=18283 comm="syz.1.5928" path="/25/file0/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 377.104185][ T29] audit: type=1400 audit(1727396714.466:16336): avc: denied { map } for pid=18283 comm="syz.1.5928" path="/25/file0/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 377.128675][ T29] audit: type=1400 audit(1727396714.466:16337): avc: denied { execute } for pid=18283 comm="syz.1.5928" path="/25/file0/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 377.153625][ T29] audit: type=1400 audit(1727396714.466:16338): avc: denied { read write } for pid=18283 comm="syz.1.5928" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.177844][ T29] audit: type=1400 audit(1727396714.466:16339): avc: denied { open } for pid=18283 comm="syz.1.5928" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.202003][ T29] audit: type=1400 audit(1727396714.466:16340): avc: denied { ioctl } for pid=18283 comm="syz.1.5928" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.228377][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.264566][T18291] IPv6: Can't replace route, no match found [ 378.153722][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5935'. [ 378.235190][T18311] loop1: detected capacity change from 0 to 128 [ 378.241731][T18311] vfat: Unknown parameter '{' [ 378.281054][T18313] loop1: detected capacity change from 0 to 512 [ 378.287936][T18313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.315572][T18313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.328131][T18313] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.532159][T18319] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5941'. [ 378.758191][T18323] IPv6: Can't replace route, no match found [ 379.026779][T18313] syz.1.5940 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 379.041018][T18313] CPU: 1 UID: 0 PID: 18313 Comm: syz.1.5940 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 379.051427][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.062322][T18313] Call Trace: [ 379.065595][T18313] [ 379.068517][T18313] dump_stack_lvl+0xf2/0x150 [ 379.073122][T18313] dump_stack+0x15/0x20 [ 379.077317][T18313] dump_header+0x83/0x2d0 [ 379.081771][T18313] oom_kill_process+0x341/0x4c0 [ 379.086625][T18313] out_of_memory+0x9af/0xbe0 [ 379.091221][T18313] ? css_next_descendant_pre+0x11c/0x140 [ 379.096872][T18313] mem_cgroup_out_of_memory+0x13e/0x190 [ 379.102492][T18313] try_charge_memcg+0x51b/0x810 [ 379.107410][T18313] obj_cgroup_charge_pages+0xbd/0x1a0 [ 379.112789][T18313] __memcg_kmem_charge_page+0x9d/0x170 [ 379.118250][T18313] __alloc_pages_noprof+0x1bc/0x360 [ 379.123449][T18313] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 379.128937][T18313] alloc_pages_noprof+0xe1/0x100 [ 379.133931][T18313] __vmalloc_node_range_noprof+0x72e/0xec0 [ 379.139761][T18313] __kvmalloc_node_noprof+0x121/0x170 [ 379.145192][T18313] ? ip_set_alloc+0x1f/0x30 [ 379.149747][T18313] ip_set_alloc+0x1f/0x30 [ 379.154080][T18313] hash_netiface_create+0x273/0x730 [ 379.159306][T18313] ? __nla_parse+0x40/0x60 [ 379.163718][T18313] ? __pfx_hash_netiface_create+0x10/0x10 [ 379.169499][T18313] ip_set_create+0x359/0x8a0 [ 379.174178][T18313] ? memchr+0x21/0x50 [ 379.178194][T18313] ? __nla_parse+0x40/0x60 [ 379.182662][T18313] nfnetlink_rcv_msg+0x4a9/0x570 [ 379.187747][T18313] netlink_rcv_skb+0x12c/0x230 [ 379.192568][T18313] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 379.198154][T18313] nfnetlink_rcv+0x16c/0x15c0 [ 379.202843][T18313] ? kmem_cache_free+0xdc/0x2d0 [ 379.207785][T18313] ? nlmon_xmit+0x51/0x60 [ 379.212138][T18313] ? __kfree_skb+0x102/0x150 [ 379.216761][T18313] ? consume_skb+0x49/0x160 [ 379.221341][T18313] ? nlmon_xmit+0x51/0x60 [ 379.225744][T18313] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 379.231103][T18313] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 379.236293][T18313] ? ref_tracker_free+0x3a5/0x410 [ 379.241323][T18313] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 379.247364][T18313] ? __dev_queue_xmit+0x161/0x1fe0 [ 379.252489][T18313] ? __netlink_deliver_tap+0x495/0x4c0 [ 379.258046][T18313] netlink_unicast+0x599/0x670 [ 379.262810][T18313] netlink_sendmsg+0x5cc/0x6e0 [ 379.267618][T18313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.272977][T18313] __sock_sendmsg+0x140/0x180 [ 379.277664][T18313] ____sys_sendmsg+0x312/0x410 [ 379.282432][T18313] __sys_sendmsg+0x1d9/0x270 [ 379.287026][T18313] ? futex_wait+0x18e/0x1c0 [ 379.291996][T18313] __x64_sys_sendmsg+0x46/0x50 [ 379.296874][T18313] x64_sys_call+0x2689/0x2d60 [ 379.301683][T18313] do_syscall_64+0xc9/0x1c0 [ 379.306246][T18313] ? clear_bhb_loop+0x55/0xb0 [ 379.310941][T18313] ? clear_bhb_loop+0x55/0xb0 [ 379.315669][T18313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.321663][T18313] RIP: 0033:0x7f269a0cdf39 [ 379.326071][T18313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.345748][T18313] RSP: 002b:00007f2698d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.354156][T18313] RAX: ffffffffffffffda RBX: 00007f269a285f80 RCX: 00007f269a0cdf39 [ 379.362115][T18313] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 379.370076][T18313] RBP: 00007f269a140216 R08: 0000000000000000 R09: 0000000000000000 [ 379.378114][T18313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.386077][T18313] R13: 0000000000000000 R14: 00007f269a285f80 R15: 00007ffd24fb1088 [ 379.394136][T18313] [ 379.397421][T18313] memory: usage 307200kB, limit 307200kB, failcnt 2171 [ 379.404365][T18313] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 379.412244][T18313] kmem: usage 306948kB, limit 9007199254740988kB, failcnt 0 [ 379.419561][T18313] Memory cgroup stats for /syz1: [ 379.420340][T18313] cache 249856 [ 379.428682][T18313] rss 0 [ 379.431478][T18313] shmem 0 [ 379.434437][T18313] mapped_file 229376 [ 379.438324][T18313] dirty 229376 [ 379.441728][T18313] writeback 0 [ 379.445044][T18313] workingset_refault_anon 584 [ 379.449706][T18313] workingset_refault_file 650 [ 379.454380][T18313] swap 450560 [ 379.457803][T18313] swapcached 8192 [ 379.461503][T18313] pgpgin 250043 [ 379.464967][T18313] pgpgout 249980 [ 379.468524][T18313] pgfault 398052 [ 379.472054][T18313] pgmajfault 255 [ 379.475636][T18313] inactive_anon 8192 [ 379.479698][T18313] active_anon 0 [ 379.483327][T18313] inactive_file 229376 [ 379.487450][T18313] active_file 20480 [ 379.492036][T18313] unevictable 0 [ 379.495555][T18313] hierarchical_memory_limit 314572800 [ 379.500907][T18313] hierarchical_memsw_limit 9223372036854771712 [ 379.507118][T18313] total_cache 249856 [ 379.511047][T18313] total_rss 0 [ 379.514416][T18313] total_shmem 0 [ 379.517870][T18313] total_mapped_file 229376 [ 379.522290][T18313] total_dirty 229376 [ 379.526234][T18313] total_writeback 0 [ 379.530171][T18313] total_workingset_refault_anon 584 [ 379.535479][T18313] total_workingset_refault_file 650 [ 379.540678][T18313] total_swap 450560 [ 379.544478][T18313] total_swapcached 8192 [ 379.548677][T18313] total_pgpgin 250043 [ 379.552738][T18313] total_pgpgout 249980 [ 379.556884][T18313] total_pgfault 398052 [ 379.560928][T18313] total_pgmajfault 255 [ 379.565004][T18313] total_inactive_anon 8192 [ 379.569422][T18313] total_active_anon 0 [ 379.573378][T18313] total_inactive_file 229376 [ 379.577952][T18313] total_active_file 20480 [ 379.582276][T18313] total_unevictable 0 [ 379.586248][T18313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5940,pid=18312,uid=0 [ 379.600953][T18313] Memory cgroup out of memory: Killed process 18312 (syz.1.5940) total-vm:89028kB, anon-rss:608kB, file-rss:16320kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 379.698531][T18330] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 379.723135][T18330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5946'. [ 379.735278][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5947'. [ 380.009877][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.066449][T18349] IPv6: Can't replace route, no match found [ 380.132558][T18352] loop1: detected capacity change from 0 to 8192 [ 380.160926][T18352] loop1: detected capacity change from 0 to 764 [ 380.168876][T18352] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 380.327112][T18353] coredump: 91(syz.1.5955): interrupted: fatal signal pending [ 380.334699][T18353] coredump: 91(syz.1.5955): written to core: VMAs: 29, size 91123712; core: 10085038 bytes, pos 10424320 [ 380.553366][T18337] syz.2.5949 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 380.567587][T18337] CPU: 1 UID: 0 PID: 18337 Comm: syz.2.5949 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 380.578110][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.588167][T18337] Call Trace: [ 380.591441][T18337] [ 380.594376][T18337] dump_stack_lvl+0xf2/0x150 [ 380.599027][T18337] dump_stack+0x15/0x20 [ 380.603334][T18337] dump_header+0x83/0x2d0 [ 380.607710][T18337] oom_kill_process+0x341/0x4c0 [ 380.612573][T18337] out_of_memory+0x9af/0xbe0 [ 380.617181][T18337] ? css_next_descendant_pre+0x11c/0x140 [ 380.622885][T18337] mem_cgroup_out_of_memory+0x13e/0x190 [ 380.628447][T18337] try_charge_memcg+0x51b/0x810 [ 380.633313][T18337] obj_cgroup_charge_pages+0xbd/0x1a0 [ 380.638708][T18337] __memcg_kmem_charge_page+0x9d/0x170 [ 380.644262][T18337] __alloc_pages_noprof+0x1bc/0x360 [ 380.649557][T18337] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 380.654942][T18337] alloc_pages_noprof+0xe1/0x100 [ 380.659892][T18337] __vmalloc_node_range_noprof+0x72e/0xec0 [ 380.665825][T18337] __kvmalloc_node_noprof+0x121/0x170 [ 380.671247][T18337] ? ip_set_alloc+0x1f/0x30 [ 380.675785][T18337] ip_set_alloc+0x1f/0x30 [ 380.680114][T18337] hash_netiface_create+0x273/0x730 [ 380.685352][T18337] ? __nla_parse+0x40/0x60 [ 380.689758][T18337] ? __pfx_hash_netiface_create+0x10/0x10 [ 380.695492][T18337] ip_set_create+0x359/0x8a0 [ 380.700092][T18337] ? finish_task_switch+0xb5/0x2b0 [ 380.705215][T18337] ? __pfx_ip_set_create+0x10/0x10 [ 380.710371][T18337] nfnetlink_rcv_msg+0x4a9/0x570 [ 380.715351][T18337] netlink_rcv_skb+0x12c/0x230 [ 380.720111][T18337] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 380.725627][T18337] nfnetlink_rcv+0x16c/0x15c0 [ 380.730434][T18337] ? kmem_cache_free+0xdc/0x2d0 [ 380.735282][T18337] ? nlmon_xmit+0x51/0x60 [ 380.739781][T18337] ? __kfree_skb+0x102/0x150 [ 380.744372][T18337] ? consume_skb+0x49/0x160 [ 380.748878][T18337] ? nlmon_xmit+0x51/0x60 [ 380.753252][T18337] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 380.758536][T18337] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 380.763659][T18337] ? ref_tracker_free+0x3a5/0x410 [ 380.768682][T18337] ? __dev_queue_xmit+0x161/0x1fe0 [ 380.773788][T18337] ? __netlink_deliver_tap+0x495/0x4c0 [ 380.779332][T18337] netlink_unicast+0x599/0x670 [ 380.784090][T18337] netlink_sendmsg+0x5cc/0x6e0 [ 380.788850][T18337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.794183][T18337] __sock_sendmsg+0x140/0x180 [ 380.799059][T18337] ____sys_sendmsg+0x312/0x410 [ 380.803825][T18337] __sys_sendmsg+0x1d9/0x270 [ 380.808406][T18337] ? futex_wait+0x18e/0x1c0 [ 380.812912][T18337] __x64_sys_sendmsg+0x46/0x50 [ 380.817668][T18337] x64_sys_call+0x2689/0x2d60 [ 380.822348][T18337] do_syscall_64+0xc9/0x1c0 [ 380.826860][T18337] ? clear_bhb_loop+0x55/0xb0 [ 380.831539][T18337] ? clear_bhb_loop+0x55/0xb0 [ 380.836311][T18337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.842195][T18337] RIP: 0033:0x7fdd0045df39 [ 380.846619][T18337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.866455][T18337] RSP: 002b:00007fdcff0d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.874994][T18337] RAX: ffffffffffffffda RBX: 00007fdd00615f80 RCX: 00007fdd0045df39 [ 380.882953][T18337] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 380.890910][T18337] RBP: 00007fdd004d0216 R08: 0000000000000000 R09: 0000000000000000 [ 380.898873][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.906864][T18337] R13: 0000000000000000 R14: 00007fdd00615f80 R15: 00007ffc74d43c98 [ 380.914827][T18337] [ 380.918101][T18337] memory: usage 307200kB, limit 307200kB, failcnt 1831 [ 380.925120][T18337] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 380.933225][T18337] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 380.940714][T18337] Memory cgroup stats for /syz2: [ 380.941892][T18337] cache 12288 [ 380.950226][T18337] rss 0 [ 380.953186][T18337] shmem 0 [ 380.956131][T18337] mapped_file 12288 [ 380.959969][T18337] dirty 12288 [ 380.963222][T18337] writeback 0 [ 380.966520][T18337] workingset_refault_anon 382 [ 380.971167][T18337] workingset_refault_file 616 [ 380.975832][T18337] swap 192512 [ 380.979107][T18337] swapcached 8192 [ 380.982710][T18337] pgpgin 218010 [ 380.986149][T18337] pgpgout 218005 [ 380.989693][T18337] pgfault 347558 [ 380.993208][T18337] pgmajfault 153 [ 380.996818][T18337] inactive_anon 0 [ 381.000485][T18337] active_anon 8192 [ 381.004319][T18337] inactive_file 0 [ 381.007924][T18337] active_file 12288 [ 381.011703][T18337] unevictable 0 [ 381.015155][T18337] hierarchical_memory_limit 314572800 [ 381.020516][T18337] hierarchical_memsw_limit 9223372036854771712 [ 381.026657][T18337] total_cache 12288 [ 381.030443][T18337] total_rss 0 [ 381.033746][T18337] total_shmem 0 [ 381.037226][T18337] total_mapped_file 12288 [ 381.041550][T18337] total_dirty 12288 [ 381.045402][T18337] total_writeback 0 [ 381.049214][T18337] total_workingset_refault_anon 382 [ 381.054461][T18337] total_workingset_refault_file 616 [ 381.059674][T18337] total_swap 192512 [ 381.063452][T18337] total_swapcached 8192 [ 381.067596][T18337] total_pgpgin 218010 [ 381.071554][T18337] total_pgpgout 218005 [ 381.075908][T18337] total_pgfault 347558 [ 381.080035][T18337] total_pgmajfault 153 [ 381.084337][T18337] total_inactive_anon 0 [ 381.088546][T18337] total_active_anon 8192 [ 381.092894][T18337] total_inactive_file 0 [ 381.097035][T18337] total_active_file 12288 [ 381.101379][T18337] total_unevictable 0 [ 381.105339][T18337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5949,pid=18336,uid=0 [ 381.120065][T18337] Memory cgroup out of memory: Killed process 18336 (syz.2.5949) total-vm:86980kB, anon-rss:608kB, file-rss:16164kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 381.141535][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5960'. [ 381.152015][ T7145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.228678][ T7145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.265176][T18355] chnl_net:caif_netlink_parms(): no params data found [ 381.285520][T18371] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5961'. [ 381.298195][ T7145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.369451][ T7145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.412051][T18355] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.419135][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.438914][T18355] bridge_slave_0: entered allmulticast mode [ 381.446762][T18355] bridge_slave_0: entered promiscuous mode [ 381.463639][T18355] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.470858][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.480100][T18355] bridge_slave_1: entered allmulticast mode [ 381.486801][T18355] bridge_slave_1: entered promiscuous mode [ 381.496708][ T7145] bridge_slave_1: left allmulticast mode [ 381.502428][ T7145] bridge_slave_1: left promiscuous mode [ 381.508074][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.516705][ T7145] bridge_slave_0: left allmulticast mode [ 381.522387][ T7145] bridge_slave_0: left promiscuous mode [ 381.528329][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.646789][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.658236][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.668692][ T7145] bond0 (unregistering): Released all slaves [ 381.678021][T18382] netlink: 'syz.2.5964': attribute type 10 has an invalid length. [ 381.686061][T18382] veth0_macvtap: left promiscuous mode [ 381.693970][T18382] veth0_macvtap: entered promiscuous mode [ 381.701369][T18382] team0: Device macvtap0 failed to register rx_handler [ 381.708396][T18382] veth0_macvtap: left promiscuous mode [ 381.730116][T18355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.741067][ T7145] hsr_slave_0: left promiscuous mode [ 381.747032][ T7145] hsr_slave_1: left promiscuous mode [ 381.753022][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.760471][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.769067][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.776566][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.786713][ T7145] veth1_macvtap: left promiscuous mode [ 381.792231][ T7145] veth1_vlan: left promiscuous mode [ 381.797569][ T7145] veth0_vlan: left promiscuous mode [ 381.902896][ T7145] team0 (unregistering): Port device team_slave_1 removed [ 381.917730][ T7145] team0 (unregistering): Port device team_slave_0 removed [ 381.959672][T18355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.968921][T18384] IPv6: Can't replace route, no match found [ 381.993434][T18355] team0: Port device team_slave_0 added [ 382.000440][T18355] team0: Port device team_slave_1 added [ 382.018987][T18355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.025982][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.052026][T18355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.063053][T18388] blktrace: Concurrent blktraces are not allowed on sg0 [ 382.064336][T18355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.076964][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.102903][T18355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.130861][T18355] hsr_slave_0: entered promiscuous mode [ 382.137706][T18355] hsr_slave_1: entered promiscuous mode [ 382.149059][T18390] netlink: 'syz.0.5967': attribute type 10 has an invalid length. [ 382.157274][T18390] veth0_macvtap: entered promiscuous mode [ 382.163918][T18390] team0: Device macvtap0 failed to register rx_handler [ 382.171174][T18390] veth0_macvtap: left promiscuous mode [ 382.427240][T18355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.435927][T18355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.444441][T18355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.453017][T18355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.485858][T18355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.499243][T18355] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.509738][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.516813][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.529089][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.536168][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.609017][T18355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.688355][T18355] veth0_vlan: entered promiscuous mode [ 382.698325][T18355] veth1_vlan: entered promiscuous mode [ 382.712032][T18355] veth0_macvtap: entered promiscuous mode [ 382.719540][T18355] veth1_macvtap: entered promiscuous mode [ 382.728888][T18355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.739338][T18355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.749173][T18355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.759637][T18355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.769536][T18355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.780020][T18355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.791512][T18355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.802502][T18355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.812993][T18355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.822848][T18355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.833314][T18355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.843336][T18355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.853980][T18355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.866198][T18355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.874776][T18355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.883497][T18355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.892375][T18355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.901233][T18355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.917470][T18415] IPv6: Can't replace route, no match found [ 382.951851][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 382.951864][ T29] audit: type=1400 audit(1727396720.406:16531): avc: denied { mounton } for pid=18355 comm="syz-executor" path="/root/syzkaller.CjQMFx/syz-tmp" dev="sda1" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 383.001029][ T29] audit: type=1400 audit(1727396720.406:16532): avc: denied { mount } for pid=18355 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 383.023410][ T29] audit: type=1400 audit(1727396720.406:16533): avc: denied { mount } for pid=18355 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 383.045549][ T29] audit: type=1400 audit(1727396720.446:16534): avc: denied { mounton } for pid=18355 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 383.271717][ T29] audit: type=1400 audit(1727396720.726:16535): avc: denied { ioctl } for pid=18426 comm="syz.0.5974" path="socket:[79053]" dev="sockfs" ino=79053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 383.311583][ T29] audit: type=1400 audit(1727396720.766:16536): avc: denied { create } for pid=18426 comm="syz.0.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.342647][ T29] audit: type=1326 audit(1727396720.796:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18429 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba737adf39 code=0x7ffc0000 [ 383.368728][ T29] audit: type=1326 audit(1727396720.796:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18429 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba737adf39 code=0x7ffc0000 [ 383.403127][ T29] audit: type=1326 audit(1727396720.846:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18429 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba737adf39 code=0x7ffc0000 [ 383.426743][ T29] audit: type=1326 audit(1727396720.846:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18429 comm="syz.0.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba737adf39 code=0x7ffc0000 [ 383.597504][T18441] blktrace: Concurrent blktraces are not allowed on sg0 [ 383.733206][T18417] syz.2.5972 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 383.747358][T18417] CPU: 1 UID: 0 PID: 18417 Comm: syz.2.5972 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 383.757871][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.767907][T18417] Call Trace: [ 383.771211][T18417] [ 383.774129][T18417] dump_stack_lvl+0xf2/0x150 [ 383.778719][T18417] dump_stack+0x15/0x20 [ 383.782956][T18417] dump_header+0x83/0x2d0 [ 383.787271][T18417] oom_kill_process+0x341/0x4c0 [ 383.792237][T18417] out_of_memory+0x9af/0xbe0 [ 383.796821][T18417] ? css_next_descendant_pre+0x11c/0x140 [ 383.802491][T18417] mem_cgroup_out_of_memory+0x13e/0x190 [ 383.808058][T18417] try_charge_memcg+0x51b/0x810 [ 383.812948][T18417] obj_cgroup_charge_pages+0xbd/0x1a0 [ 383.818391][T18417] __memcg_kmem_charge_page+0x9d/0x170 [ 383.823907][T18417] __alloc_pages_noprof+0x1bc/0x360 [ 383.829100][T18417] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 383.834623][T18417] alloc_pages_noprof+0xe1/0x100 [ 383.839560][T18417] __vmalloc_node_range_noprof+0x72e/0xec0 [ 383.845361][T18417] __kvmalloc_node_noprof+0x121/0x170 [ 383.850767][T18417] ? ip_set_alloc+0x1f/0x30 [ 383.855285][T18417] ip_set_alloc+0x1f/0x30 [ 383.859686][T18417] hash_netiface_create+0x273/0x730 [ 383.864929][T18417] ? __nla_parse+0x40/0x60 [ 383.869334][T18417] ? __pfx_hash_netiface_create+0x10/0x10 [ 383.875120][T18417] ip_set_create+0x359/0x8a0 [ 383.879702][T18417] ? memchr+0x21/0x50 [ 383.883670][T18417] ? __nla_parse+0x40/0x60 [ 383.888099][T18417] nfnetlink_rcv_msg+0x4a9/0x570 [ 383.893093][T18417] netlink_rcv_skb+0x12c/0x230 [ 383.897879][T18417] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 383.903432][T18417] nfnetlink_rcv+0x16c/0x15c0 [ 383.908095][T18417] ? kmem_cache_free+0xdc/0x2d0 [ 383.912935][T18417] ? nlmon_xmit+0x51/0x60 [ 383.917253][T18417] ? __kfree_skb+0x102/0x150 [ 383.921912][T18417] ? consume_skb+0x49/0x160 [ 383.926413][T18417] ? nlmon_xmit+0x51/0x60 [ 383.930741][T18417] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 383.936056][T18417] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 383.941164][T18417] ? ref_tracker_free+0x3a5/0x410 [ 383.946248][T18417] ? __dev_queue_xmit+0x161/0x1fe0 [ 383.951494][T18417] ? __netlink_deliver_tap+0x495/0x4c0 [ 383.956954][T18417] netlink_unicast+0x599/0x670 [ 383.961769][T18417] netlink_sendmsg+0x5cc/0x6e0 [ 383.966620][T18417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.971902][T18417] __sock_sendmsg+0x140/0x180 [ 383.976589][T18417] ____sys_sendmsg+0x312/0x410 [ 383.981353][T18417] __sys_sendmsg+0x1d9/0x270 [ 383.985947][T18417] __x64_sys_sendmsg+0x46/0x50 [ 383.990708][T18417] x64_sys_call+0x2689/0x2d60 [ 383.995382][T18417] do_syscall_64+0xc9/0x1c0 [ 383.999887][T18417] ? clear_bhb_loop+0x55/0xb0 [ 384.004656][T18417] ? clear_bhb_loop+0x55/0xb0 [ 384.009327][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.015347][T18417] RIP: 0033:0x7fdd0045df39 [ 384.019752][T18417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.039392][T18417] RSP: 002b:00007fdcff0d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.047859][T18417] RAX: ffffffffffffffda RBX: 00007fdd00615f80 RCX: 00007fdd0045df39 [ 384.055995][T18417] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 384.064101][T18417] RBP: 00007fdd004d0216 R08: 0000000000000000 R09: 0000000000000000 [ 384.072063][T18417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.080066][T18417] R13: 0000000000000000 R14: 00007fdd00615f80 R15: 00007ffc74d43c98 [ 384.088031][T18417] [ 384.091153][T18417] memory: usage 307200kB, limit 307200kB, failcnt 2012 [ 384.098138][T18417] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 384.106357][T18417] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 384.113642][T18417] Memory cgroup stats for /syz2: [ 384.114833][T18417] cache 49152 [ 384.123028][T18417] rss 0 [ 384.125901][T18417] shmem 0 [ 384.128900][T18417] mapped_file 49152 [ 384.132835][T18417] dirty 49152 [ 384.136137][T18417] writeback 0 [ 384.139462][T18417] workingset_refault_anon 407 [ 384.144217][T18417] workingset_refault_file 648 [ 384.144225][T18417] swap 196608 [ 384.144231][T18417] swapcached 4096 [ 384.144237][T18417] pgpgin 218997 [ 384.144243][T18417] pgpgout 218984 [ 384.144250][T18417] pgfault 348942 [ 384.144286][T18417] pgmajfault 164 [ 384.144292][T18417] inactive_anon 4096 [ 384.144298][T18417] active_anon 0 [ 384.144304][T18417] inactive_file 49152 [ 384.144310][T18417] active_file 0 [ 384.144391][T18417] unevictable 0 [ 384.144397][T18417] hierarchical_memory_limit 314572800 [ 384.144405][T18417] hierarchical_memsw_limit 9223372036854771712 [ 384.144413][T18417] total_cache 49152 [ 384.144476][T18417] total_rss 0 [ 384.144483][T18417] total_shmem 0 [ 384.144489][T18417] total_mapped_file 49152 [ 384.144497][T18417] total_dirty 49152 [ 384.218426][T18417] total_writeback 0 [ 384.222324][T18417] total_workingset_refault_anon 407 [ 384.227549][T18417] total_workingset_refault_file 648 [ 384.232743][T18417] total_swap 196608 [ 384.236571][T18417] total_swapcached 4096 [ 384.240713][T18417] total_pgpgin 218997 [ 384.244710][T18417] total_pgpgout 218984 [ 384.248751][T18417] total_pgfault 348942 [ 384.252794][T18417] total_pgmajfault 164 [ 384.256852][T18417] total_inactive_anon 4096 [ 384.261274][T18417] total_active_anon 0 [ 384.265278][T18417] total_inactive_file 49152 [ 384.269905][T18417] total_active_file 0 [ 384.273883][T18417] total_unevictable 0 [ 384.277929][T18417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5972,pid=18416,uid=0 [ 384.292598][T18417] Memory cgroup out of memory: Killed process 18416 (syz.2.5972) total-vm:86980kB, anon-rss:604kB, file-rss:16032kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 384.489516][T18451] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 384.501125][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5982'. [ 384.510408][T18451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5982'. [ 384.535423][T18451] loop0: detected capacity change from 0 to 128 [ 384.605699][T17788] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 384.613556][T17788] FAT-fs (loop0): Filesystem has been set read-only [ 384.621775][T17788] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 384.629470][T17788] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 384.708646][T18470] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5987'. [ 384.787932][ T7144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.856923][ T7144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.917548][ T7144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.980141][ T7144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.078973][T18474] chnl_net:caif_netlink_parms(): no params data found [ 385.088015][ T7144] bridge_slave_1: left allmulticast mode [ 385.093733][ T7144] bridge_slave_1: left promiscuous mode [ 385.099548][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.107425][ T7144] bridge_slave_0: left allmulticast mode [ 385.113099][ T7144] bridge_slave_0: left promiscuous mode [ 385.118787][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.216870][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.227697][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.238610][ T7144] bond0 (unregistering): Released all slaves [ 385.274823][T18474] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.281895][T18474] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.304885][T18474] bridge_slave_0: entered allmulticast mode [ 385.327113][T18474] bridge_slave_0: entered promiscuous mode [ 385.336802][ T7144] hsr_slave_0: left promiscuous mode [ 385.342940][ T7144] hsr_slave_1: left promiscuous mode [ 385.349009][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.356538][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.372616][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.380075][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.389987][ T7144] veth1_macvtap: left promiscuous mode [ 385.395530][ T7144] veth1_vlan: left promiscuous mode [ 385.400752][ T7144] veth0_vlan: left promiscuous mode [ 385.493012][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 385.506279][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 385.557330][T18474] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.564622][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.572781][T18474] bridge_slave_1: entered allmulticast mode [ 385.581698][T18474] bridge_slave_1: entered promiscuous mode [ 385.603271][T18474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.609314][T18502] qrtr: Invalid version 0 [ 385.613838][T18474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.652873][T18474] team0: Port device team_slave_0 added [ 385.664985][T18474] team0: Port device team_slave_1 added [ 385.691375][T18474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.698412][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.710569][T18513] loop1: detected capacity change from 0 to 512 [ 385.724414][T18474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.737494][T18474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.748237][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.774286][T18474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.794658][T18513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.867945][T18513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.886772][T18474] hsr_slave_0: entered promiscuous mode [ 385.892964][T18474] hsr_slave_1: entered promiscuous mode [ 385.898765][T18513] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.908998][T18474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.916597][T18474] Cannot create hsr debugfs directory [ 386.034798][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'. [ 386.222578][T18491] chnl_net:caif_netlink_parms(): no params data found [ 386.263881][ T7144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.357079][ T7144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.375539][T18491] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.382613][T18491] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.391003][T18491] bridge_slave_0: entered allmulticast mode [ 386.397614][T18491] bridge_slave_0: entered promiscuous mode [ 386.407546][T18491] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.414659][T18491] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.422879][T18491] bridge_slave_1: entered allmulticast mode [ 386.429448][T18491] bridge_slave_1: entered promiscuous mode [ 386.447683][ T7144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.496991][T18491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.508977][ T7144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.523927][T18491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.550227][T18491] team0: Port device team_slave_0 added [ 386.558528][T18491] team0: Port device team_slave_1 added [ 386.577055][T18491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.584049][T18491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.610061][T18491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.622177][T18491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.629138][T18491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.655052][T18491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.681986][T18355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.778137][T18491] hsr_slave_0: entered promiscuous mode [ 386.784600][T18491] hsr_slave_1: entered promiscuous mode [ 386.790550][T18491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.798473][T18491] Cannot create hsr debugfs directory [ 386.807864][ T7144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.832493][T18522] chnl_net:caif_netlink_parms(): no params data found [ 386.848112][ T7144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.927942][ T7144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.953199][T18522] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.960371][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.967735][T18522] bridge_slave_0: entered allmulticast mode [ 386.974512][T18522] bridge_slave_0: entered promiscuous mode [ 386.987209][T18522] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.994609][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.001887][T18522] bridge_slave_1: entered allmulticast mode [ 387.008501][T18522] bridge_slave_1: entered promiscuous mode [ 387.035335][ T7144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.056207][T18574] loop1: detected capacity change from 0 to 128 [ 387.058430][T18474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.071287][T18474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.086754][T18522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.104713][T18474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.112817][T18574] syz.1.6016: attempt to access beyond end of device [ 387.112817][T18574] loop1: rw=2049, sector=177, nr_sectors = 864 limit=128 [ 387.130725][T18522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.140315][T18474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.164328][T18522] team0: Port device team_slave_0 added [ 387.171557][T18522] team0: Port device team_slave_1 added [ 387.196844][T18522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.203812][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.229760][T18522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.244936][ T7144] bridge_slave_1: left allmulticast mode [ 387.250640][ T7144] bridge_slave_1: left promiscuous mode [ 387.256270][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.264277][ T7144] bridge_slave_0: left allmulticast mode [ 387.269918][ T7144] bridge_slave_0: left promiscuous mode [ 387.275557][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.283591][ T7144] bridge_slave_1: left allmulticast mode [ 387.289328][ T7144] bridge_slave_1: left promiscuous mode [ 387.295117][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.302826][ T7144] bridge_slave_0: left allmulticast mode [ 387.308556][ T7144] bridge_slave_0: left promiscuous mode [ 387.314423][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.506337][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.516445][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.526547][ T7144] bond0 (unregistering): Released all slaves [ 387.535059][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.545300][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.555352][ T7144] bond0 (unregistering): Released all slaves [ 387.563309][T18522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.570326][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.596249][T18522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.609699][T18581] IPv6: Can't replace route, no match found [ 387.640458][T18522] hsr_slave_0: entered promiscuous mode [ 387.646487][T18522] hsr_slave_1: entered promiscuous mode [ 387.652644][T18522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.660274][T18522] Cannot create hsr debugfs directory [ 387.679840][ T7144] hsr_slave_0: left promiscuous mode [ 387.685798][ T7144] hsr_slave_1: left promiscuous mode [ 387.691670][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.699098][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.706661][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.714363][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.725423][ T7144] veth1_macvtap: left promiscuous mode [ 387.731007][ T7144] veth1_vlan: left promiscuous mode [ 387.736326][ T7144] veth0_vlan: left promiscuous mode [ 387.742082][ T7144] veth1_macvtap: left promiscuous mode [ 387.747634][ T7144] veth1_vlan: left promiscuous mode [ 387.752954][ T7144] veth0_vlan: left promiscuous mode [ 387.915045][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 387.925905][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 387.997382][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 388.007728][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 388.055914][T18590] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6022'. [ 388.065082][T18599] netlink: 'syz.2.6025': attribute type 10 has an invalid length. [ 388.072997][T18599] veth0_macvtap: entered promiscuous mode [ 388.080015][T18599] team0: Device macvtap0 failed to register rx_handler [ 388.088210][T18599] veth0_macvtap: left promiscuous mode [ 388.147732][T18474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.159889][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 388.159933][ T29] audit: type=1400 audit(1727396725.616:16785): avc: denied { create } for pid=18602 comm="syz.2.6027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.190790][T18603] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 388.211967][ T29] audit: type=1326 audit(1727396725.646:16786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.224976][T18474] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.235539][ T29] audit: type=1326 audit(1727396725.646:16787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.265715][ T29] audit: type=1326 audit(1727396725.646:16788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.271097][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.289245][ T29] audit: type=1326 audit(1727396725.646:16789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.296271][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.327143][ T29] audit: type=1326 audit(1727396725.646:16790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.329240][T18491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.350722][ T29] audit: type=1326 audit(1727396725.646:16791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.350745][ T29] audit: type=1326 audit(1727396725.646:16792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.350765][ T29] audit: type=1326 audit(1727396725.646:16793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.428030][ T29] audit: type=1326 audit(1727396725.646:16794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18602 comm="syz.2.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fdd0045df39 code=0x7ffc0000 [ 388.465403][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.472488][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.492502][T18474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.507026][T18605] IPv6: Can't replace route, no match found [ 388.512986][T18491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.537256][T18491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.555439][T18491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.609558][T18491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.621916][T18491] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.640065][T18491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.650517][T18491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.661505][T18616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.671707][T18618] smc: net device bond0 applied user defined pnetid SYZ0 [ 388.671728][T18616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.681022][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.693476][ T7146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.702768][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.710002][ T7146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.743270][T18474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.758252][T18522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.767292][T18522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.777813][T18522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.788690][T18522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.803460][T18491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.861198][T18522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.881772][T18474] veth0_vlan: entered promiscuous mode [ 388.892515][T18474] veth1_vlan: entered promiscuous mode [ 388.899972][T18522] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.908023][T18618] smc: net device bond0 erased user defined pnetid SYZ0 [ 388.921927][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.929009][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.942511][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.949672][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.965390][T18474] veth0_macvtap: entered promiscuous mode [ 388.988771][T18474] veth1_macvtap: entered promiscuous mode [ 388.999649][T18491] veth0_vlan: entered promiscuous mode [ 389.013624][T18491] veth1_vlan: entered promiscuous mode [ 389.021610][T18522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.036816][T18474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.047288][T18474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.057165][T18474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.067580][T18474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.078339][T18474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.095576][T18491] veth0_macvtap: entered promiscuous mode [ 389.103679][T18491] veth1_macvtap: entered promiscuous mode [ 389.119450][T18474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.129980][T18474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.139957][T18474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.150411][T18474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.161034][T18474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.170737][T18474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.179471][T18474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.188615][T18474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.197333][T18474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.211214][T18491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.221676][T18491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.231598][T18491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.242082][T18491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.251934][T18491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.262350][T18491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.275036][T18491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.288625][T18641] netlink: 'syz.2.6034': attribute type 3 has an invalid length. [ 389.303962][T18491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.314742][T18491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.324793][T18491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.335281][T18491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.345649][T18491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.356155][T18491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.367087][T18491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.371335][T18646] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.384457][T18491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.393302][T18491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.402235][T18491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.410926][T18491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.431355][T18522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.488729][T18652] netlink: 'syz.0.6001': attribute type 10 has an invalid length. [ 389.510479][T18652] veth0_macvtap: left promiscuous mode [ 389.518428][T18652] veth0_macvtap: entered promiscuous mode [ 389.525151][T18652] team0: Device macvtap0 failed to register rx_handler [ 389.532238][T18652] veth0_macvtap: left promiscuous mode [ 389.588047][T18666] loop0: detected capacity change from 0 to 512 [ 389.624548][T18666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 389.633766][T18522] veth0_vlan: entered promiscuous mode [ 389.651422][T18522] veth1_vlan: entered promiscuous mode [ 389.668007][T18522] veth0_macvtap: entered promiscuous mode [ 389.675764][T18522] veth1_macvtap: entered promiscuous mode [ 389.682926][T18659] loop1: detected capacity change from 0 to 2048 [ 389.691231][T18666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.691750][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.714354][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.715071][T18659] ext4: Unknown parameter 'dont_appraise' [ 389.724193][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.724207][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.724221][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.724233][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.724246][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.781070][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.791708][T18666] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.803511][T18522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.824772][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.835373][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.845245][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.856717][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.866547][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.876993][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.886911][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.897423][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.915653][T18522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.924689][T18522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.933383][T18522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.942170][T18522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.951007][T18522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.964694][T18685] netlink: 'syz.3.6043': attribute type 10 has an invalid length. [ 389.972844][T18685] veth0_macvtap: left promiscuous mode [ 389.980974][T18685] veth0_macvtap: entered promiscuous mode [ 389.988086][T18685] team0: Device macvtap0 failed to register rx_handler [ 389.995450][T18685] veth0_macvtap: left promiscuous mode [ 390.153266][T18695] loop1: detected capacity change from 0 to 2048 [ 390.303085][T18711] netlink: 'syz.4.6051': attribute type 10 has an invalid length. [ 390.328682][T18711] veth0_macvtap: left promiscuous mode [ 390.346226][T18711] veth0_macvtap: entered promiscuous mode [ 390.355444][T18711] team0: Device macvtap0 failed to register rx_handler [ 390.372975][T18711] veth0_macvtap: left promiscuous mode [ 390.502281][T18724] IPv6: Can't replace route, no match found [ 390.641291][T18474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.659097][T18733] xt_time: unknown flags 0xc [ 390.710191][T18740] netlink: 'syz.2.6066': attribute type 10 has an invalid length. [ 390.718993][T18740] veth0_macvtap: entered promiscuous mode [ 390.726091][T18740] team0: Device macvtap0 failed to register rx_handler [ 390.733156][T18740] veth0_macvtap: left promiscuous mode [ 390.775560][T18757] IPv6: Can't replace route, no match found [ 390.782547][T18753] netlink: 'syz.2.6070': attribute type 1 has an invalid length. [ 390.790353][T18753] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6070'. [ 390.846538][T18764] Cannot find set identified by id 0 to match [ 390.960484][T18775] ================================================================== [ 390.968576][T18775] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 390.975497][T18775] [ 390.977798][T18775] write to 0xffff888104645500 of 8 bytes by task 18774 on cpu 0: [ 390.985489][T18775] mas_wmb_replace+0x222/0x14d0 [ 390.990336][T18775] mas_wr_store_entry+0x163c/0x2d00 [ 390.995521][T18775] mas_store_prealloc+0x6bf/0x960 [ 391.000528][T18775] vma_complete+0x3a7/0x760 [ 391.005011][T18775] __split_vma+0x620/0x6a0 [ 391.009408][T18775] vma_modify+0x2cb/0xcd0 [ 391.013729][T18775] vma_modify_flags+0xf2/0x120 [ 391.018578][T18775] mprotect_fixup+0x31a/0x5e0 [ 391.023251][T18775] do_mprotect_pkey+0x655/0x970 [ 391.028084][T18775] __x64_sys_mprotect+0x48/0x60 [ 391.032917][T18775] x64_sys_call+0x26cf/0x2d60 [ 391.037580][T18775] do_syscall_64+0xc9/0x1c0 [ 391.042150][T18775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.048205][T18775] [ 391.050505][T18775] read to 0xffff888104645500 of 8 bytes by task 18775 on cpu 1: [ 391.058108][T18775] mas_walk+0x123/0x320 [ 391.062244][T18775] lock_vma_under_rcu+0x95/0x260 [ 391.067162][T18775] exc_page_fault+0x150/0x650 [ 391.071817][T18775] asm_exc_page_fault+0x26/0x30 [ 391.076646][T18775] [ 391.078942][T18775] value changed: 0xffff88810318ef81 -> 0xffff888104645500 [ 391.086021][T18775] [ 391.088321][T18775] Reported by Kernel Concurrency Sanitizer on: [ 391.094444][T18775] CPU: 1 UID: 0 PID: 18775 Comm: syz.4.6079 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 391.104831][T18775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 391.114861][T18775] ================================================================== [ 391.139485][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 391.151203][T18780] FAULT_INJECTION: forcing a failure. [ 391.151203][T18780] name failslab, interval 1, probability 0, space 0, times 0 [ 391.165354][T18780] CPU: 1 UID: 0 PID: 18780 Comm: syz.2.6078 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 391.176234][T18780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 391.186275][T18780] Call Trace: [ 391.189579][T18780] [ 391.192505][T18780] dump_stack_lvl+0xf2/0x150 [ 391.197104][T18780] dump_stack+0x15/0x20 [ 391.201247][T18780] should_fail_ex+0x223/0x230 [ 391.205967][T18780] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 391.211770][T18780] ? nfc_genl_rcv_nl_event+0x70/0x130 [ 391.217408][T18780] should_failslab+0x8f/0xb0 [ 391.221977][T18780] __kmalloc_cache_noprof+0x4b/0x2a0 [ 391.227246][T18780] nfc_genl_rcv_nl_event+0x70/0x130 [ 391.232454][T18780] blocking_notifier_call_chain+0x94/0x200 [ 391.238307][T18780] netlink_release+0xad5/0xf20 [ 391.243136][T18780] sock_close+0x68/0x150 [ 391.247362][T18780] ? __pfx_sock_close+0x10/0x10 [ 391.252242][T18780] __fput+0x17a/0x6d0 [ 391.256234][T18780] ____fput+0x1c/0x30 [ 391.260276][T18780] task_work_run+0x13a/0x1a0 [ 391.264867][T18780] syscall_exit_to_user_mode+0xbe/0x130 [ 391.270480][T18780] do_syscall_64+0xd6/0x1c0 [ 391.275015][T18780] ? clear_bhb_loop+0x55/0xb0 [ 391.279679][T18780] ? clear_bhb_loop+0x55/0xb0 [ 391.284390][T18780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.290324][T18780] RIP: 0033:0x7fdd0045df39 [ 391.294726][T18780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.314339][T18780] RSP: 002b:00007fdcff0b0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 391.322746][T18780] RAX: 0000000000000000 RBX: 00007fdd00616058 RCX: 00007fdd0045df39 [ 391.330770][T18780] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 391.338720][T18780] RBP: 00007fdcff0b0090 R08: 0000000000000000 R09: 0000000000000000 [ 391.346741][T18780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.354694][T18780] R13: 0000000000000000 R14: 00007fdd00616058 R15: 00007ffc74d43c98 [ 391.362670][T18780]