last executing test programs: 2.991214875s ago: executing program 2 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x1000, 0x1, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) pivot_root(0x0, &(0x7f00000004c0)='./file0\x00') 2.93127413s ago: executing program 2 (id=998): ioperm(0x0, 0x2, 0x2) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'dh\x00'}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0xa, 0x1, 0xe8e1}) socket(0x11, 0x800000003, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x9, 0x1, 0x7d, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0xd2, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x90) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xffffffffffffffc7, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x0, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x0, 0x61]}}, 0x0, 0x3c}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000a40)={0x0, &(0x7f0000000a00)}) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r5 = creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier}, {@nojournal_checksum}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") utime(&(0x7f0000000280)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r6 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1e, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x7, 0x3, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xc6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa}}, @call={0x85, 0x0, 0x0, 0xbb}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x44, &(0x7f00000007c0)=""/68, 0x40f00, 0x40, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x4, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0xb}], 0x10, 0x10000}, 0x90) 2.915422232s ago: executing program 2 (id=999): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) writev(r0, &(0x7f0000001e40)=[{&(0x7f0000000940)="cbd4eb56d13c7ab3517cc49e098a1a9deb6775689b900aed4178e457da46b0f31b149f22847944659f8503bc704c5c0f077fc3cb0e87408e6417ff33e7e4d97a7e95c3cf575a2e74ea0565caff985aed8e63c96e054d1406bc5f6a9f531da2cade58d5157aef94b4c4b8a40ab675da12c81e1ba11845b2f58931de05b2fd3135155b1466b4f0c87116d64254b209638bbfeedf470b3429c4b475a8ef242f9f5c18b0d050ae", 0xa5}, {&(0x7f0000001f00)}, {&(0x7f0000000c00)="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", 0x7ff}, {&(0x7f0000000a00)="471842984e614033cad8472eded1c62575741d69b11f76f35da9075e91403a6b553c9eb7abcf", 0x26}, {&(0x7f0000001c00)="a67cd0", 0x3}, {0x0}, {&(0x7f0000001c40)="ebc1d8a1a3c1da8de75075798e55d23c7c410477498926aab6e5299d4320e117c74ee514012f4e88810409030c452704b35265b976c2d4423a643544bcf1c6e486d03ba66f0d905e9cafb5c226c6dd8fc46f01f4c8851d7c505c2eb8d5a032f3d436858498fe2770e70140d8a3a8511930cf7a7b03d28a79e6aa2b1a6899d4b71f2718f06e3ac402c8ad9d2c45a946477d57071a4070460926aa4a8db75ba449ea354c470e109834ba52912297af92667606380762e766eb325e6fe286bf7698c370d7616520975a092aef38722b136aff12f0c5e717f985ec55f524b8e8889381764ed40000000000976558a0", 0xed}], 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000001ec0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0xa, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001d40)=[{0x0, 0x5, 0x8, 0xb}, {0x2, 0x1, 0x6, 0x9}], 0x10, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2000009}, 0x50) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000900)={{0x0, 0x2710}, {r2, r3/1000+60000}}, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000004180)='silent\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) 2.22660781s ago: executing program 1 (id=1000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0xc080) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x4c0002, 0x0) r2 = socket(0x40000000015, 0x6, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000cd000000cd000000040000000400000000010000000076000401100000000000000805000000080000000000000c020000000b0000000000000b02000000060000000600000f020000000500000006000000f5a8000001000000010000000800000001000000090000000000000003000000faffffff01000080030000000900000090000000030000000700000006000000b848050000000100000f0300000002a91b33b61ad2c50000000100000008000000f89323060000000000000201000000060000000000000e050000000000000000000000002e0053deb6ce85754e00"/250], &(0x7f0000000040), 0xec, 0x0, 0x80001, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0xc01}, 0x48) r5 = socket$inet6(0xa, 0x80001, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0xffd2, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="0c000d8088000100000000002380e3d6e578aed951dc675d3e9c042eb068"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4040}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000006b5fca0000000000", @ANYRES32, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='inet_sock_set_state\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x21, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x800, 0x2, @perf_config_ext, 0x109683, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x5, r10, 0x0) 2.053728265s ago: executing program 0 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 4) 2.033238187s ago: executing program 2 (id=1003): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) r0 = io_uring_setup(0x17f7, &(0x7f0000000100)={0x0, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x1d6, 0xbcff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="bb1cdca1950d1b232ce0244d93aa106f2a499c9b5405eeda6af2450ff2b0bcd97c89fd5bb5f76ac8a9c573237275a8c10c6cf731f00d3229a3", 0x39}, {&(0x7f0000000540)="99e7441dd5d7c19d29ea7abd7a3268189f03e5e8d291177ed03e3c86d27a944ebcffc5ddba0a01709a80ebd34d37a7074699a1c102839733d3f85e22bf81d23594ee4c1b584446d04987892cb071156f3d7e41cfc05f941f6877cd7c6dcfa5b7a863afe4e9e8f634f5c4ef25ece96b62b15005b6dde2667acbae270613b6559c1bb0e2d4017a3d1deafa7817b69aaa685a9876bea763946ece87e97007d1ef34cf52eefdaa05ee1de14a60897f8a3a2019ec", 0xb2}, {&(0x7f0000000600)="ec2c6c1da17b6fd606fcf427333ba17df57a32f11e8c0aca79b6e8c2f6669b3848875bec013c81bfca6764485047c453f5d2ab74e1096017c216a6387cf637e5cfa23b2a66df17d1694194d44327b78d713ac4fcaea04cc551731260469ecee67bcd3df3dbd25d0723e491e875383596643f31d2be0ad9b5839217089f1323e76e34bbb8efd4b9563ab3611a9df4c268025b0ff7273cc6c6b53e54eeffa0cfcded3e487d3707b90d13900f3d7846f87d29cdc9c97e735160c313fae2fb961f7417050f5515bce2214c507530155606994191c89423777f594dd820780ca434c514aaedd5", 0xe4}, {&(0x7f0000000b40)="ae43fca408b50cc7d9a1725c2ef2932090a25a7d70e0313df3d0e2e7820008e231e83c86465164e4abcf4e24c3fc2db9f6fb89efefed5c1b47d9ac01381c7bbb6ab8a6b6f36bc0b68742ae9e8229b5b72aa83e3b9deb8762f45dfbf9b109a0fa6206166305673d0c05cfd2fbd994d050b67e6d9fb9a9527770d71734eb29583e6e9b7518c95d805aeac31d634b0efffe3d2b7178", 0x94}, {&(0x7f0000000940)="627f33009436c19975ccfa9385c8c4798fade4caeab322b77e7ec95e25d7c25e002e60344b1c2a51dff99867d73c331c75a68f8a6733f8f581eb762b2f132260198995a89d08060545ccf412d0faa7d850297588a08f40e90919c954970fd2d7598a317464c1f34637002b836c0ec527fc790be4f4755f90bb05c3b33a224a84cd276dc1dad4fb6e01f0355903e11fc51b25ea05d7ab7125f4cb9c4aedd64b0741c712491ad3ea0241704c98a49fd1c15e9585f797fcb03432561420014e692967191bb17c256b99bd891adc0d8d8ce93167e37adc4411931f859c262f4f20eb21f8323bf0", 0xe5}, {&(0x7f0000000400)="a756b3", 0x3}, {&(0x7f0000000a40)="f54bcf6dea0a0953773322b72583370e30f8b9a2711f0965888fbec9a590bac982bd385851df74753f21b138e3a0cb01befb5e5f501ff451923a89e7bf5d3368fe7aec72692530fabc7717316caac71eda0103f074cd7e430555fca5d00714a54c58f77dc9c67b5c13e0bac95e0c1a6f0ecabfbf5e31408f64f93f44cc2b6e3403943f5be6406c8bfdb90dec3f7f716caf94f4eab754612c7d189dcf96d3f0b2694202f7f4378a59474ccec503303bfe773f39322bf95aed675347401b117b022c52a18358dade3e4a6a5b8e486c10b14406", 0xd2}, {&(0x7f0000000480)="73cdfa0744e27653b929b65b3103098b78df6eb98c295fe3974cedbec9dc024acafcdc4cf4c408c1226d81b40597f14657ffedc90ffaa3df", 0x38}, {&(0x7f00000007c0)="80fb5010a1331b3fba6607e02da650e5b295534b907e163a83b74e46a6333eca012e324bf98922e2f008555e17ddba76eac48a9d105952fae6b2a68474259e34ebc60ed8188c420493281748430e8aaed72a7d5dfc3cf588adb55ce4d4dfe89d78a48949e46347e37809a3f102319304c3a08f315d96dddcb3a55417bca588243b83741f875a21fe0414fac5e7131382cc989f9240915e8d19c3d7d42be3d7c769aebbcb899bd7716c1194b3214dd986ddd3f7bc9bd184816b8711b57bd5d84180925634e82c8ac34aa6298ddb733b285871ca664cdadcba7c5fb9e6796cb2daefc70822756d", 0xe6}, {&(0x7f0000000c40)="6052aef8b889f6cca93b612aeaef0b7f463c844234448da6ca1d912df865b6c8cb1818a1b1e9f359018ab2fb5f2bb976593aed85a4d587f8f2d327e1cc37009caccd350cccd8", 0x46}], 0xa}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.868493821s ago: executing program 4 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r0}, &(0x7f0000000580), &(0x7f0000001ec0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x2000000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x1, 0x9, 0x119, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x0, 0x0, 0x0) 1.835927663s ago: executing program 0 (id=1006): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x44c1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xe}, @ringbuf_query], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x88, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xe, 0x6, 0x1}, 0x10, 0x2bb2e, 0xffffffffffffffff, 0x3, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x2, 0x3, 0x2, 0x7}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x2, 0x5}], 0x10, 0x94b0}, 0x90) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) fcntl$setflags(r1, 0x2, 0x1) mbind(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2, &(0x7f00000002c0)=0x40, 0xd888, 0xa) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x13c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb3, 0x6, "c61f32a2ea0ed8eec7a88f8e8ec426d1304cba2145dae5eb6c9abc259f667af6847aeb39b86af3dfe42f071fa3fab4a94d3c1ba74bfd1fa9dafa674612dd1404ef8626670dbb0c190377db887fc9fb6b641db42100239c0562a39edf64861199626a62448db2827b17f3e54f8e52aefbbf4c6798bd41dba06344f511b5cf11d6ee1f14f6a27d19897d4b9b6b37ee37971c0292270bddab9c38ff7f1e7d6c14cb1685e42fa9b889d0421c794b04fddc"}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "46fbb1747015eb6f81b92212a682f798f43a057deb2a7748fca8c0a9ba2cf64973f73ec2c5153e8bd8f222418aa70cb494a2bf6b14d7b3d90106e6625816b2fa697df887331206694517a522a86096fba7e152268eb642c6991d"}, @NFTA_TABLE_FLAGS={0x8}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x50, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x41, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) readv(r4, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f0000000a40)=""/171, 0xab}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/151, 0x97}], 0x6) mmap$binder(&(0x7f0000ee1000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7) r5 = accept$inet(r0, &(0x7f0000001c40)={0x2, 0x0, @empty}, &(0x7f0000001c80)=0x10) fallocate(r5, 0x2a, 0x0, 0x0) pwrite64(r2, &(0x7f0000001cc0)="910d37e47ceadbf6f09cc4d71ab3204edc7ad091ca4720f1351c2717f79fb9655151535bea241587acc292a67ad006e8a1a3bacf142942664dbfdab3b7dac3043db9cfbdc04000d6c20f5637dd1aff22aefdcf2e017510f3adb1497889f860171f564590f120a304322f9238c1780b8e8c185743a1fa90", 0x77, 0xf) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000001d40)={0x9, 0x5, 0x3ff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000041) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000001ec0)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) sendmsg$nl_route(r0, &(0x7f0000002100)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f40)=@dellink={0x144, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x2000, 0x6}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x5}, @IFLA_VFINFO_LIST={0x44, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x33dcddc1, 0xdf7, 0x6d76f7bf, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xb7e, 0x6b40, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x52}}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'macvlan0\x00'}, {0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x55}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000002140)="7aebfea1638b5f2f9ebe17af02b368e6e8f5a17e3eaf059cb30deb42abc49debbe3d75a3b4382c3a622de63dd74f6b29883eec6ff82c931cc1c90e5781648f35f38da6871ef395c5931f431e926e870db4ccd49e04dc0df977fc0d1295d4413a88d2fdad3fe90517a64793d63ce1dec3efbc2521df324fa69e79bc1f6ee275adac2216183b7ba3f45abded9017c6fd16fb97be7bdfe96ba3b98767f7a0c08c8d124bf6f480ef956d80ceaf3b23ba1765be2e73ce0a29b6a02951518e98e991ebbc89843c5e6f52347d4b827c3ae380", 0xcf}, {&(0x7f0000002240)="d9710598bad24d4bc1", 0x9}, {&(0x7f0000002280)="712f327313f35ac46b5ec106adfbdc0e51c3879fe2b9fac30472b7f7f9c96d7e3eeb0b587c3da8bf9e341d0f6c2501059becf3fffef8028a7af8", 0x3a}, {&(0x7f00000022c0)="8327bf7348ea777a9405b07f9e73694befa040202cab6f5ee585fbd285314282165a92c4246d6adada2e8c05efc96678631033bc0bd8142ec9606b73d4d311f3e728efdeeba1fb2606b9c5992948f5d0b8fc6044a2345bf56b92595afde0bc07eba1ac03cb5f0b596790e66b6cf26355a6de9ded62b07a71f585bda876789e9ba33d61768d30cbdeda48d88aa5a274e55d1fdb26b08ef05bdd8487a22f4f0d9206228792b3349a7cb5", 0xa9}, {&(0x7f0000002380)="fd2eb788728b390727e97e815ee6c2a972f508254c7ed8cf3b41daa4fba4b07c469a3464161e9c683371aaf3b834fc5d985f775e8c1e54435783dde939c22bd4e5f4028503887333d1d0fc397b7ac23e4aabbc820783f44f838060b1859ede4955681a8cdf3d80479baa625c4d471e76c4a34e5ecb1a20f930e7352246b12577a36bfeb565f059682883c0ec493ba92e47c4d82852ca150337f6d7b69254c09b1292ebc1f59a90d5c6e0437965b6bf624c3734387b7d994b02dfa9ffa9a3be94bc2ac6f9", 0xc4}, {&(0x7f0000002480)}], 0x6) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000002540)="e81b823c96bbbd2d12c46e2b5a046ae2b655d101a1af867a326015ae828b9e9bc68a9e4877e2e3cee8004b817059bc5ce74bb46277ebd7f75401e6b44a0097bcd989b7042fe3983c137ceecbd2005683e5105435cd012c04d6aa2a7a7e679f74a8ca69de670eb3824736ba0185f7acf36378cbfe3746911dec195ff05b553898ebccf6bb952d39bdeb037ea38d5ad1", 0x8f) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002600)={{0x1, 0x1, 0x18, r4, {0x402}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f0000002640)={0x4, 0x0, 'client1\x00', 0x80000000, "02f636f5cfb81dcf", "3b6ee8b50ed9c03e5bd77e16355ed5b58223d8bb9dc6f7723d8f85a57544c6ff", 0x7fff, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0xfffffff9, 0x67, 0x3, 0x1804, r0, 0x3, '\x00', 0x0, r8, 0x0, 0x5, 0x3, 0x5}, 0x48) ioctl$KDSKBLED(r4, 0x4b65, 0x5) r9 = accept4$bt_l2cap(r8, &(0x7f0000002780), &(0x7f00000027c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000002800), &(0x7f0000002840)=0x4) 1.835656093s ago: executing program 4 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480), 0x200000, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40045402, &(0x7f0000000400)={{0x0, 0x2, 0x0, 0x1, 0x20000}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x40000000b, 0x0, 0xfffffffffffffffe, 0x7}) 1.768243289s ago: executing program 3 (id=1008): unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_uring_setup(0x6f17, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x298}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000140)='.\x00', 0x40000022) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r5, 0x0) 1.704191954s ago: executing program 3 (id=1009): socket(0x15, 0x2, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) listen(0xffffffffffffffff, 0x101) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f0000000200)={[{@commit={'commit', 0x3d, 0x74}}, {@jqfmt_vfsold}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 1.615932882s ago: executing program 3 (id=1010): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x2, {{0xa, 0x1, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0xf9, 0x2, 0x7, 0x20, 0x2, 0x1, 0x6, 0x0, 0x12, 0x8, 0x8, 0xff, 0x14, 0x5}, 0xe) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@local, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000016c0)=0xe8) sendto$inet6(r1, &(0x7f0000000240)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001c00)=""/4112, 0x1010}], 0x1) r2 = memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) syz_clone(0x1108100, &(0x7f0000000600)="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", 0x1000, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)="5844444e32b219bc684e5eabeff77accb8dd1e8252c79092d551c30b9fcc4561f47b2926dc6d7c3140f0f6") r3 = fcntl$dupfd(r2, 0x0, r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2040400) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5c}]}, 0x10) 1.589548014s ago: executing program 3 (id=1011): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pivot_root(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)='./file0/../file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe88000000000000000000000000000100000000000000000000000000000000000000000000000100000000001a1fb588000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097f1d99722"], 0xf0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x310, 0x358, 0x358, 0x310, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 1.327332696s ago: executing program 1 (id=1012): shutdown(0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300003b000000b704000000000000850000003300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="18000200c0ffffff00000000000000002c11000027cf5bae88be14f5dc07650eeb2cfc3cde062acd80d5d37eb42106607b39c8531b2a84c4ce21440091f27b6766e89d16ff84be956a392d7c3cca52b465af780111bdbc9ef659000037fad344bfb98e1eebb91eeac1771f1dc84a517cc3943777f3", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000013c0)='GPL\x00', 0x6, 0x28, &(0x7f0000001400)=""/40, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xb, 0xde5, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001480)=[{0x5, 0x1, 0xd, 0x3}], 0x10, 0x1}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000001580), 0x0, 0x40000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', &(0x7f0000000000)=@tcp6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7866}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0xe, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001680)=[r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x3, 0x4, 0x9, 0xc}, {0x3, 0x5, 0x9, 0x9}, {0x0, 0x1, 0xb}], 0x10, 0x5}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.29451903s ago: executing program 3 (id=1013): munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000980)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.194801248s ago: executing program 2 (id=1014): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0xbc4}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4, 0x0, 0xfffb, 0x300}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/80, 0x50}, {0x0}], 0x2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x708, &(0x7f00000005c0)="$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") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r8, 0x40000000525, 0x1) 1.155430622s ago: executing program 2 (id=1015): munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000980)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.019481473s ago: executing program 3 (id=1016): socket$inet(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) 979.192136ms ago: executing program 0 (id=1018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r0}, &(0x7f0000000580), &(0x7f0000001ec0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x2000000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x1, 0x9, 0x119, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x0, 0x0, 0x0) 966.492048ms ago: executing program 4 (id=1019): unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_uring_setup(0x6f17, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x298}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000140)='.\x00', 0x40000022) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r5, 0x0) 962.770067ms ago: executing program 1 (id=1020): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 914.887052ms ago: executing program 1 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x7, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000700000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) 914.443642ms ago: executing program 0 (id=1022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0xa, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000d00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40050) getsockopt$nfc_llcp(r4, 0x88, 0x0, 0x0, 0x205fffff) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200030d0000000000000000000000030005000000000002000000e0000001180000000000000002e4bb759d2ca24e18ffff0a0000000002000900000300000000000000000000030006000000000002000000ac1e00010000000000000000010014"], 0x68}}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) iopl(0x3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000300)={0x401, 0x7f, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES64=r11], 0x40}}, 0x0) r13 = dup3(r6, r7, 0x80000) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) syz_io_uring_submit(r5, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000900000000000000000006000a00000000000500070000000000ce00c7fdc1139967fb6628dd5a2fc88022d48c19aba5ee0a3c761d1502c61f4712ca08026829075bcafab12550a7cc6d76527f480a4645495d16a3cafeef31521db255aed4a2138844de8ccbe1a28275d13e6f4b3b453ab3c781b9f40316f9bbf7baedc42ae6d80114d877e4f173363a8874bd5bc382f76309c6ea9648dd8d6f8d96600cc68ac4a3d9f085e573f6bfdc3cc65a0ff7e28d7528be2cda4a35153c0920cf57cc4f09181c7dba6e2a33bf5f64179151f2b5c2709d532cb916fb8632dbc8961950e588e0239a"], 0x30}}, 0x810) r14 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x708, &(0x7f00000005c0)="$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") r15 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r15, 0x5457, &(0x7f0000000340)) r16 = fcntl$dupfd(r14, 0x406, r14) getsockopt$bt_BT_DEFER_SETUP(r16, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 889.447414ms ago: executing program 4 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x67ff000000000000, 0x4) 882.834035ms ago: executing program 1 (id=1024): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) r0 = io_uring_setup(0x17f7, &(0x7f0000000100)={0x0, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x1d6, 0xbcff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="bb1cdca1950d1b232ce0244d93aa106f2a499c9b5405eeda6af2450ff2b0bcd97c89fd5bb5f76ac8a9c573237275a8c10c6cf731f00d3229a3", 0x39}, {&(0x7f0000000540)="99e7441dd5d7c19d29ea7abd7a3268189f03e5e8d291177ed03e3c86d27a944ebcffc5ddba0a01709a80ebd34d37a7074699a1c102839733d3f85e22bf81d23594ee4c1b584446d04987892cb071156f3d7e41cfc05f941f6877cd7c6dcfa5b7a863afe4e9e8f634f5c4ef25ece96b62b15005b6dde2667acbae270613b6559c1bb0e2d4017a3d1deafa7817b69aaa685a9876bea763946ece87e97007d1ef34cf52eefdaa05ee1de14a60897f8a3a2019ec", 0xb2}, {&(0x7f0000000600)="ec2c6c1da17b6fd606fcf427333ba17df57a32f11e8c0aca79b6e8c2f6669b3848875bec013c81bfca6764485047c453f5d2ab74e1096017c216a6387cf637e5cfa23b2a66df17d1694194d44327b78d713ac4fcaea04cc551731260469ecee67bcd3df3dbd25d0723e491e875383596643f31d2be0ad9b5839217089f1323e76e34bbb8efd4b9563ab3611a9df4c268025b0ff7273cc6c6b53e54eeffa0cfcded3e487d3707b90d13900f3d7846f87d29cdc9c97e735160c313fae2fb961f7417050f5515bce2214c507530155606994191c89423777f594dd820780ca434c514aaedd5", 0xe4}, {&(0x7f0000000b40)="ae43fca408b50cc7d9a1725c2ef2932090a25a7d70e0313df3d0e2e7820008e231e83c86465164e4abcf4e24c3fc2db9f6fb89efefed5c1b47d9ac01381c7bbb6ab8a6b6f36bc0b68742ae9e8229b5b72aa83e3b9deb8762f45dfbf9b109a0fa6206166305673d0c05cfd2fbd994d050b67e6d9fb9a9527770d71734eb29583e6e9b7518c95d805aeac31d634b0efffe3d2b7178", 0x94}, {&(0x7f0000000940)="627f33009436c19975ccfa9385c8c4798fade4caeab322b77e7ec95e25d7c25e002e60344b1c2a51dff99867d73c331c75a68f8a6733f8f581eb762b2f132260198995a89d08060545ccf412d0faa7d850297588a08f40e90919c954970fd2d7598a317464c1f34637002b836c0ec527fc790be4f4755f90bb05c3b33a224a84cd276dc1dad4fb6e01f0355903e11fc51b25ea05d7ab7125f4cb9c4aedd64b0741c712491ad3ea0241704c98a49fd1c15e9585f797fcb03432561420014e692967191bb17c256b99bd891adc0d8d8ce93167e37adc4411931f859c262f4f20eb21f8323bf0", 0xe5}, {&(0x7f0000000400)="a756b3", 0x3}, {&(0x7f0000000a40)="f54bcf6dea0a0953773322b72583370e30f8b9a2711f0965888fbec9a590bac982bd385851df74753f21b138e3a0cb01befb5e5f501ff451923a89e7bf5d3368fe7aec72692530fabc7717316caac71eda0103f074cd7e430555fca5d00714a54c58f77dc9c67b5c13e0bac95e0c1a6f0ecabfbf5e31408f64f93f44cc2b6e3403943f5be6406c8bfdb90dec3f7f716caf94f4eab754612c7d189dcf96d3f0b2694202f7f4378a59474ccec503303bfe773f39322bf95aed675347401b117b022c52a18358dade3e4a6a5b8e486c10b14406", 0xd2}, {&(0x7f0000000480)="73cdfa0744e27653b929b65b3103098b78df6eb98c295fe3974cedbec9dc024acafcdc4cf4c408c1226d81b40597f14657ffedc90ffaa3df", 0x38}, {&(0x7f00000007c0)="80fb5010a1331b3fba6607e02da650e5b295534b907e163a83b74e46a6333eca012e324bf98922e2f008555e17ddba76eac48a9d105952fae6b2a68474259e34ebc60ed8188c420493281748430e8aaed72a7d5dfc3cf588adb55ce4d4dfe89d78a48949e46347e37809a3f102319304c3a08f315d96dddcb3a55417bca588243b83741f875a21fe0414fac5e7131382cc989f9240915e8d19c3d7d42be3d7c769aebbcb899bd7716c1194b3214dd986ddd3f7bc9bd184816b8711b57bd5d84180925634e82c8ac34aa6298ddb733b285871ca664cdadcba7c5fb9e6796cb2daefc70822756d", 0xe6}, {&(0x7f0000000c40)="6052aef8b889f6cca93b612aeaef0b7f463c844234448da6ca1d912df865b6c8cb1818a1b1e9f359018ab2fb5f2bb976593aed85a4d587f8f2d327e1cc37009caccd350cccd8", 0x46}], 0xa}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 823.4054ms ago: executing program 0 (id=1025): prlimit64(0x0, 0x6, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESOCT], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', '', [{0x20, '(*c:,-'}, {0x20, 'vfat\x00'}], 0xa, "d161050000000000000074bdca9720dfcc73de5b223a3c160f225bcf4c83ef6cefab8104649d48cdb9a6c7669fce915c"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_clone(0xc69a0580, 0x0, 0x0, 0x0, 0x0, 0x0) 780.065673ms ago: executing program 0 (id=1026): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fcdb0000050002000000000014000700fce858b37bd44ed8ec0000000000000006000a004e2200000500030033000000000000007caffde9d5f51f59695b8ac0baaca76729a5a64d0b2a3de02b19a989db0ff65525b09e04ec560c468b92ca79d168e8bf5732b561858946a34f53ee1812e3d5c780171fbfb170d27e29fa1e106d2f07c8a98688aa5f3826c4120da9e0988b115af323e5ad8cb5f1ae4fca65f768c9f5e6cef7d976a6ed9df852bb70443a8ed0361b2775a15d2168b4b44f2fa29b941fe628538be7ee81a74854e36e9e783b1713b6a2b57c679836ad3aec50f3d5831ec21b262c87"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3575], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000b40)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x802, 0x188) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x90, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) recvmsg$can_bcm(r5, &(0x7f00000004c0)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f00000003c0)=""/93, 0x5d}], 0x2, &(0x7f0000000440)=""/121, 0x79}, 0x20000003) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) r7 = fcntl$dupfd(r4, 0x0, r1) listen(r7, 0xa0f) perf_event_open(&(0x7f0000000000)={0x1, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10848a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0xc040}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)='0', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000002000000840041000000000000000000", @ANYRES32=r0, @ANYBLOB='0'], 0x50}, 0x0) 666.733303ms ago: executing program 4 (id=1027): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100800001) 611.250748ms ago: executing program 4 (id=1028): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480), 0x200000, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40045402, &(0x7f0000000400)={{0x0, 0x2, 0x0, 0x1, 0x20000}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x40000000b, 0x0, 0xfffffffffffffffe, 0x7}) 0s ago: executing program 1 (id=1029): shutdown(0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300003b000000b704000000000000850000003300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="18000200c0ffffff00000000000000002c11000027cf5bae88be14f5dc07650eeb2cfc3cde062acd80d5d37eb42106607b39c8531b2a84c4ce21440091f27b6766e89d16ff84be956a392d7c3cca52b465af780111bdbc9ef659000037fad344bfb98e1eebb91eeac1771f1dc84a517cc3943777f3", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000013c0)='GPL\x00', 0x6, 0x28, &(0x7f0000001400)=""/40, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xb, 0xde5, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001480)=[{0x5, 0x1, 0xd, 0x3}], 0x10, 0x1}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000001580), 0x0, 0x40000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', &(0x7f0000000000)=@tcp6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7866}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0xe, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001680)=[r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x3, 0x4, 0x9, 0xc}, {0x3, 0x5, 0x9, 0x9}, {0x0, 0x1, 0xb}], 0x10, 0x5}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): pat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 57.899043][ T29] audit: type=1326 audit(1724964439.954:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 57.922539][ T29] audit: type=1326 audit(1724964439.954:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4523 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 57.946072][ T29] audit: type=1326 audit(1724964440.054:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4528 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 57.969456][ T29] audit: type=1326 audit(1724964440.054:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4528 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 58.035572][ T4514] netlink: 'syz.1.392': attribute type 5 has an invalid length. [ 58.132071][ T4566] selinux_netlink_send: 65 callbacks suppressed [ 58.132089][ T4566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65532 sclass=netlink_audit_socket pid=4566 comm=syz.1.412 [ 58.238298][ T4577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=4577 comm=syz.1.419 [ 58.250917][ T4577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=4577 comm=syz.1.419 [ 58.263499][ T4577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4577 comm=syz.1.419 [ 58.276406][ T4577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=4577 comm=syz.1.419 [ 58.290083][ T4577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4577 comm=syz.1.419 [ 58.310908][ T4577] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 58.320078][ T4577] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 58.527058][ T4583] netlink: 'syz.1.422': attribute type 5 has an invalid length. [ 58.889444][ T4600] FAULT_INJECTION: forcing a failure. [ 58.889444][ T4600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.896710][ T4598] loop1: detected capacity change from 128 to 127 [ 58.902646][ T4600] CPU: 1 UID: 0 PID: 4600 Comm: syz.2.429 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 58.919651][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.929722][ T4600] Call Trace: [ 58.933015][ T4600] [ 58.935961][ T4600] dump_stack_lvl+0xf2/0x150 [ 58.940587][ T4600] dump_stack+0x15/0x20 [ 58.944782][ T4600] should_fail_ex+0x229/0x230 [ 58.949542][ T4600] should_fail+0xb/0x10 [ 58.953778][ T4600] should_fail_usercopy+0x1a/0x20 [ 58.958911][ T4600] _copy_from_user+0x1e/0xd0 [ 58.963623][ T4600] do_handle_open+0x387/0x570 [ 58.968404][ T4600] __x64_sys_open_by_handle_at+0x46/0x50 [ 58.970226][ T4572] syz.3.415 (4572) used greatest stack depth: 10056 bytes left [ 58.974085][ T4600] x64_sys_call+0x2909/0x2d60 [ 58.986333][ T4600] do_syscall_64+0xc9/0x1c0 [ 58.990857][ T4600] ? clear_bhb_loop+0x55/0xb0 [ 58.995565][ T4600] ? clear_bhb_loop+0x55/0xb0 [ 59.000328][ T4600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.006283][ T4600] RIP: 0033:0x7fe044109ef9 [ 59.010708][ T4600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.030346][ T4600] RSP: 002b:00007fe042d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 59.038792][ T4600] RAX: ffffffffffffffda RBX: 00007fe0442a5f80 RCX: 00007fe044109ef9 [ 59.046766][ T4600] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 59.054743][ T4600] RBP: 00007fe042d87090 R08: 0000000000000000 R09: 0000000000000000 [ 59.062748][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.070856][ T4600] R13: 0000000000000000 R14: 00007fe0442a5f80 R15: 00007ffd0e169d98 [ 59.078907][ T4600] [ 59.144004][ T4611] syzkaller0: entered promiscuous mode [ 59.149617][ T4611] syzkaller0: entered allmulticast mode [ 59.159073][ T4611] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 59.360084][ T4641] netlink: 'syz.0.446': attribute type 12 has an invalid length. [ 59.596110][ T4661] FAULT_INJECTION: forcing a failure. [ 59.596110][ T4661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.609327][ T4661] CPU: 1 UID: 0 PID: 4661 Comm: syz.1.452 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 59.620072][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.630180][ T4661] Call Trace: [ 59.633494][ T4661] [ 59.636480][ T4661] dump_stack_lvl+0xf2/0x150 [ 59.641245][ T4661] dump_stack+0x15/0x20 [ 59.645490][ T4661] should_fail_ex+0x229/0x230 [ 59.650183][ T4661] should_fail+0xb/0x10 [ 59.654357][ T4661] should_fail_usercopy+0x1a/0x20 [ 59.659466][ T4661] strncpy_from_user+0x25/0x270 [ 59.664449][ T4661] ? path_lookupat+0x209/0x2b0 [ 59.669224][ T4661] strncpy_from_user_nofault+0x66/0xe0 [ 59.674780][ T4661] bpf_probe_read_compat_str+0xb3/0x130 [ 59.680406][ T4661] bpf_prog_e42f6260c1b72fb3+0x3d/0x3f [ 59.685879][ T4661] bpf_trace_run3+0x10c/0x1d0 [ 59.690578][ T4661] ? user_path_at+0xf5/0x110 [ 59.695212][ T4661] ? user_path_at+0xf5/0x110 [ 59.699871][ T4661] kmem_cache_free+0x1fe/0x280 [ 59.704653][ T4661] user_path_at+0xf5/0x110 [ 59.709151][ T4661] __se_sys_mount+0x248/0x2d0 [ 59.713910][ T4661] ? fput+0x13b/0x180 [ 59.717901][ T4661] __x64_sys_mount+0x67/0x80 [ 59.722567][ T4661] x64_sys_call+0x203e/0x2d60 [ 59.727374][ T4661] do_syscall_64+0xc9/0x1c0 [ 59.731976][ T4661] ? clear_bhb_loop+0x55/0xb0 [ 59.736664][ T4661] ? clear_bhb_loop+0x55/0xb0 [ 59.741417][ T4661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.747405][ T4661] RIP: 0033:0x7fb507229ef9 [ 59.751822][ T4661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.771468][ T4661] RSP: 002b:00007fb505e86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.780047][ T4661] RAX: ffffffffffffffda RBX: 00007fb5073c6058 RCX: 00007fb507229ef9 [ 59.788025][ T4661] RDX: 0000000020000280 RSI: 0000000020000240 RDI: 0000000000000000 [ 59.796009][ T4661] RBP: 00007fb505e86090 R08: 0000000000000000 R09: 0000000000000000 [ 59.804005][ T4661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.811979][ T4661] R13: 0000000000000000 R14: 00007fb5073c6058 R15: 00007ffefa663288 [ 59.819975][ T4661] [ 60.031239][ T4687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.038497][ T4687] IPv6: NLM_F_CREATE should be set when creating new route [ 60.056022][ T4633] Process accounting resumed [ 60.329988][ T4709] FAULT_INJECTION: forcing a failure. [ 60.329988][ T4709] name failslab, interval 1, probability 0, space 0, times 0 [ 60.345956][ T4709] CPU: 1 UID: 0 PID: 4709 Comm: syz.1.473 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 60.356588][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.366828][ T4709] Call Trace: [ 60.370119][ T4709] [ 60.373103][ T4709] dump_stack_lvl+0xf2/0x150 [ 60.377709][ T4709] dump_stack+0x15/0x20 [ 60.381941][ T4709] should_fail_ex+0x229/0x230 [ 60.386631][ T4709] ? security_file_alloc+0x32/0xe0 [ 60.391856][ T4709] should_failslab+0x8f/0xb0 [ 60.396511][ T4709] kmem_cache_alloc_noprof+0x4c/0x290 [ 60.401906][ T4709] security_file_alloc+0x32/0xe0 [ 60.407082][ T4709] alloc_empty_file+0x121/0x310 [ 60.411991][ T4709] path_openat+0x6a/0x1f10 [ 60.416460][ T4709] ? audit_log_end+0x1d0/0x1e0 [ 60.421245][ T4709] ? __traceiter_kmem_cache_free+0x33/0x50 [ 60.427114][ T4709] ? kmem_cache_free+0xd8/0x280 [ 60.431985][ T4709] ? audit_log_end+0x1d0/0x1e0 [ 60.436861][ T4709] do_filp_open+0xf7/0x200 [ 60.441428][ T4709] do_sys_openat2+0xab/0x120 [ 60.446113][ T4709] __x64_sys_openat+0xf3/0x120 [ 60.450929][ T4709] x64_sys_call+0x1025/0x2d60 [ 60.455656][ T4709] do_syscall_64+0xc9/0x1c0 [ 60.460364][ T4709] ? clear_bhb_loop+0x55/0xb0 [ 60.465143][ T4709] ? clear_bhb_loop+0x55/0xb0 [ 60.469869][ T4709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.475873][ T4709] RIP: 0033:0x7fb507229ef9 [ 60.480305][ T4709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.500039][ T4709] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.508464][ T4709] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 60.516442][ T4709] RDX: 0000000000001a01 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 60.524418][ T4709] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.532476][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.540563][ T4709] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 60.548624][ T4709] [ 60.908169][ T4723] syz_tun: entered promiscuous mode [ 60.913908][ T4723] macvtap1: entered promiscuous mode [ 60.919336][ T4723] macvtap1: entered allmulticast mode [ 60.924903][ T4723] syz_tun: entered allmulticast mode [ 60.933475][ T4723] syz_tun: left allmulticast mode [ 60.938710][ T4723] syz_tun: left promiscuous mode [ 61.179397][ T4752] __nla_validate_parse: 7 callbacks suppressed [ 61.179418][ T4752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.491'. [ 61.270545][ T4757] syzkaller0: entered promiscuous mode [ 61.285462][ T4757] syzkaller0 (unregistering): left promiscuous mode [ 61.296010][ T4759] FAULT_INJECTION: forcing a failure. [ 61.296010][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 61.308903][ T4759] CPU: 1 UID: 0 PID: 4759 Comm: syz.2.494 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 61.319659][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.329752][ T4759] Call Trace: [ 61.333090][ T4759] [ 61.336057][ T4759] dump_stack_lvl+0xf2/0x150 [ 61.340682][ T4759] dump_stack+0x15/0x20 [ 61.344904][ T4759] should_fail_ex+0x229/0x230 [ 61.349599][ T4759] ? vmemdup_user+0x42/0x1b0 [ 61.354233][ T4759] should_failslab+0x8f/0xb0 [ 61.358952][ T4759] __kmalloc_node_noprof+0xa8/0x380 [ 61.364259][ T4759] vmemdup_user+0x42/0x1b0 [ 61.368712][ T4759] path_setxattr+0x134/0x360 [ 61.373325][ T4759] ? get_pid_task+0x8e/0xc0 [ 61.377863][ T4759] __x64_sys_setxattr+0x6d/0x80 [ 61.382745][ T4759] x64_sys_call+0x2927/0x2d60 [ 61.387455][ T4759] do_syscall_64+0xc9/0x1c0 [ 61.391966][ T4759] ? clear_bhb_loop+0x55/0xb0 [ 61.396647][ T4759] ? clear_bhb_loop+0x55/0xb0 [ 61.401342][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.407327][ T4759] RIP: 0033:0x7fe044109ef9 [ 61.411765][ T4759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.428154][ T4761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=4761 comm=syz.3.495 [ 61.431384][ T4759] RSP: 002b:00007fe042d87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 61.431412][ T4759] RAX: ffffffffffffffda RBX: 00007fe0442a5f80 RCX: 00007fe044109ef9 [ 61.443938][ T4761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=4761 comm=syz.3.495 [ 61.452408][ T4759] RDX: 0000000020001400 RSI: 00000000200001c0 RDI: 00000000200003c0 [ 61.452429][ T4759] RBP: 00007fe042d87090 R08: 0000000000000000 R09: 0000000000000000 [ 61.452443][ T4759] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 61.452458][ T4759] R13: 0000000000000000 R14: 00007fe0442a5f80 R15: 00007ffd0e169d98 [ 61.452483][ T4759] [ 61.508596][ T4761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4761 comm=syz.3.495 [ 61.521184][ T4761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=4761 comm=syz.3.495 [ 61.542431][ T4741] syz_tun: entered promiscuous mode [ 61.548078][ T4741] macvtap1: entered promiscuous mode [ 61.553483][ T4741] macvtap1: entered allmulticast mode [ 61.558961][ T4741] syz_tun: entered allmulticast mode [ 61.567328][ T4741] syz_tun: left allmulticast mode [ 61.572588][ T4741] syz_tun: left promiscuous mode [ 61.609319][ T4766] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 61.618505][ T4766] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 61.639971][ T4761] netlink: 666 bytes leftover after parsing attributes in process `syz.3.495'. [ 61.654108][ T4779] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.768181][ T3339] IPVS: starting estimator thread 0... [ 61.856932][ T4798] IPVS: using max 2256 ests per chain, 112800 per kthread [ 61.867358][ T4779] vhci_hcd: default hub control req: 1801 v0000 i0000 l0 [ 62.090026][ T4810] syz_tun: entered promiscuous mode [ 62.097977][ T4810] macvtap1: entered promiscuous mode [ 62.103425][ T4810] macvtap1: entered allmulticast mode [ 62.108889][ T4810] syz_tun: entered allmulticast mode [ 62.118587][ T4810] syz_tun: left allmulticast mode [ 62.123790][ T4810] syz_tun: left promiscuous mode [ 62.380013][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114f69a00: rx timeout, send abort [ 62.409850][ T4846] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 62.702769][ T4869] FAULT_INJECTION: forcing a failure. [ 62.702769][ T4869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.715883][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115622c00: rx timeout, send abort [ 62.724252][ T4869] CPU: 0 UID: 0 PID: 4869 Comm: syz.3.537 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 62.734913][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.744986][ T4869] Call Trace: [ 62.748273][ T4869] [ 62.751214][ T4869] dump_stack_lvl+0xf2/0x150 [ 62.755855][ T4869] dump_stack+0x15/0x20 [ 62.760273][ T4869] should_fail_ex+0x229/0x230 [ 62.765091][ T4869] should_fail+0xb/0x10 [ 62.768552][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 62.768568][ T29] audit: type=1326 audit(1724964445.004:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.0.538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8300499ef9 code=0x0 [ 62.769263][ T4869] should_fail_usercopy+0x1a/0x20 [ 62.803265][ T4869] _copy_from_iter+0xd3/0xb00 [ 62.807975][ T4869] ? kmalloc_reserve+0x16e/0x190 [ 62.812942][ T4869] ? __build_skb_around+0x196/0x1f0 [ 62.818219][ T4869] ? __alloc_skb+0x21f/0x310 [ 62.822849][ T4869] ? __virt_addr_valid+0x1ed/0x250 [ 62.827991][ T4869] ? __check_object_size+0x35b/0x510 [ 62.833343][ T4869] netlink_sendmsg+0x460/0x6e0 [ 62.838146][ T4869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.843535][ T4869] __sock_sendmsg+0x140/0x180 [ 62.848272][ T4869] ____sys_sendmsg+0x312/0x410 [ 62.853074][ T4869] __sys_sendmsg+0x1e9/0x280 [ 62.857843][ T4869] __x64_sys_sendmsg+0x46/0x50 [ 62.862768][ T4869] x64_sys_call+0x2689/0x2d60 [ 62.867586][ T4869] do_syscall_64+0xc9/0x1c0 [ 62.872157][ T4869] ? clear_bhb_loop+0x55/0xb0 [ 62.876911][ T4869] ? clear_bhb_loop+0x55/0xb0 [ 62.881686][ T4869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.887614][ T4869] RIP: 0033:0x7efce7939ef9 [ 62.888302][ C1] vcan0: j1939_tp_rxtimer: 0xffff888114f69a00: abort rx timeout. Force session deactivation [ 62.892033][ T4869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.892056][ T4869] RSP: 002b:00007efce65b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.930379][ T4869] RAX: ffffffffffffffda RBX: 00007efce7ad5f80 RCX: 00007efce7939ef9 [ 62.938363][ T4869] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000007 [ 62.946451][ T4869] RBP: 00007efce65b7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.954504][ T4869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.962483][ T4869] R13: 0000000000000000 R14: 00007efce7ad5f80 R15: 00007fff71da0698 [ 62.970561][ T4869] [ 62.973967][ T29] audit: type=1326 audit(1724964445.204:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efce793893c code=0x7ffc0000 [ 62.998999][ T29] audit: type=1326 audit(1724964445.234:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efce79389df code=0x7ffc0000 [ 63.022847][ T29] audit: type=1326 audit(1724964445.234:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efce7938b8a code=0x7ffc0000 [ 63.046302][ T29] audit: type=1326 audit(1724964445.234:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7939ef9 code=0x7ffc0000 [ 63.069941][ T29] audit: type=1326 audit(1724964445.234:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.3.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7939ef9 code=0x7ffc0000 [ 63.121488][ T29] audit: type=1326 audit(1724964445.354:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300499ef9 code=0x7ffc0000 [ 63.145184][ T29] audit: type=1326 audit(1724964445.354:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300499ef9 code=0x7ffc0000 [ 63.215926][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115622c00: abort rx timeout. Force session deactivation [ 63.242090][ T4896] FAULT_INJECTION: forcing a failure. [ 63.242090][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 63.254839][ T4896] CPU: 0 UID: 0 PID: 4896 Comm: syz.3.547 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 63.265598][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.275677][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811558e800: rx timeout, send abort [ 63.275696][ T4896] Call Trace: [ 63.287173][ T4896] [ 63.290120][ T4896] dump_stack_lvl+0xf2/0x150 [ 63.294842][ T4896] dump_stack+0x15/0x20 [ 63.299064][ T4896] should_fail_ex+0x229/0x230 [ 63.303823][ T4896] ? security_file_alloc+0x32/0xe0 [ 63.309041][ T4896] should_failslab+0x8f/0xb0 [ 63.313670][ T4896] kmem_cache_alloc_noprof+0x4c/0x290 [ 63.319165][ T4896] security_file_alloc+0x32/0xe0 [ 63.324142][ T4896] alloc_empty_file+0x121/0x310 [ 63.329027][ T4896] path_openat+0x6a/0x1f10 [ 63.333530][ T4896] ? prepare_signal+0x597/0x670 [ 63.338333][ T4897] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 63.338397][ T4896] ? __send_signal_locked+0x6eb/0x700 [ 63.353257][ T4896] ? send_signal_locked+0x28f/0x3a0 [ 63.358639][ T4896] do_filp_open+0xf7/0x200 [ 63.363095][ T4896] do_sys_openat2+0xab/0x120 [ 63.367855][ T4896] __x64_sys_open+0xe6/0x110 [ 63.372496][ T4896] x64_sys_call+0x1321/0x2d60 [ 63.377204][ T4896] do_syscall_64+0xc9/0x1c0 [ 63.381839][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 63.386534][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 63.391376][ T4896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.397397][ T4896] RIP: 0033:0x7efce7939ef9 [ 63.401834][ T4896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.421562][ T4896] RSP: 002b:00007efce65b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 63.430004][ T4896] RAX: ffffffffffffffda RBX: 00007efce7ad5f80 RCX: 00007efce7939ef9 [ 63.438076][ T4896] RDX: 00000000000002c1 RSI: 0000000000046342 RDI: 0000000020000040 [ 63.446113][ T4896] RBP: 00007efce65b7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.454162][ T4896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.462136][ T4896] R13: 0000000000000000 R14: 00007efce7ad5f80 R15: 00007fff71da0698 [ 63.470182][ T4896] [ 63.499133][ T4902] netlink: 56 bytes leftover after parsing attributes in process `syz.1.549'. [ 63.614839][ T4905] H: renamed from vlan0 (while UP) [ 63.626482][ T29] audit: type=1326 audit(1724964445.854:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8300499ef9 code=0x0 [ 63.666053][ T4903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.550'. [ 63.675405][ T4903] netlink: 'syz.3.550': attribute type 5 has an invalid length. [ 63.753217][ T29] audit: type=1400 audit(1724964445.984:1994): avc: denied { create } for pid=4911 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.775735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811558e800: abort rx timeout. Force session deactivation [ 64.244022][ T4928] syz_tun: entered promiscuous mode [ 64.249568][ T4928] macvtap1: entered promiscuous mode [ 64.255068][ T4928] macvtap1: entered allmulticast mode [ 64.260522][ T4928] syz_tun: entered allmulticast mode [ 64.268909][ T4928] syz_tun: left allmulticast mode [ 64.274041][ T4928] syz_tun: left promiscuous mode [ 64.447278][ T4941] FAULT_INJECTION: forcing a failure. [ 64.447278][ T4941] name failslab, interval 1, probability 0, space 0, times 0 [ 64.460039][ T4941] CPU: 0 UID: 0 PID: 4941 Comm: syz.0.563 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 64.470882][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.481003][ T4941] Call Trace: [ 64.484353][ T4941] [ 64.487340][ T4941] dump_stack_lvl+0xf2/0x150 [ 64.492100][ T4941] dump_stack+0x15/0x20 [ 64.496285][ T4941] should_fail_ex+0x229/0x230 [ 64.501084][ T4941] ? copy_sighand+0x52/0x1b0 [ 64.505742][ T4941] should_failslab+0x8f/0xb0 [ 64.510456][ T4941] kmem_cache_alloc_noprof+0x4c/0x290 [ 64.515867][ T4941] ? _raw_spin_unlock+0x26/0x50 [ 64.520753][ T4941] copy_sighand+0x52/0x1b0 [ 64.525251][ T4941] copy_process+0xe93/0x1f90 [ 64.529898][ T4941] kernel_clone+0x167/0x5e0 [ 64.534508][ T4941] ? vfs_write+0x5a5/0x900 [ 64.539052][ T4941] __x64_sys_clone+0xe8/0x120 [ 64.543777][ T4941] x64_sys_call+0x2d23/0x2d60 [ 64.548494][ T4941] do_syscall_64+0xc9/0x1c0 [ 64.553019][ T4941] ? clear_bhb_loop+0x55/0xb0 [ 64.557761][ T4941] ? clear_bhb_loop+0x55/0xb0 [ 64.562518][ T4941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.568522][ T4941] RIP: 0033:0x7f8300499ef9 [ 64.572954][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.592582][ T4941] RSP: 002b:00007f82ff116fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 64.601229][ T4941] RAX: ffffffffffffffda RBX: 00007f8300635f80 RCX: 00007f8300499ef9 [ 64.609400][ T4941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040b04000 [ 64.617425][ T4941] RBP: 00007f82ff117090 R08: 0000000000000000 R09: 0000000000000000 [ 64.625423][ T4941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 64.633591][ T4941] R13: 0000000000000000 R14: 00007f8300635f80 R15: 00007ffd73bb1178 [ 64.641702][ T4941] [ 65.577589][ T4968] syzkaller0: entered promiscuous mode [ 65.583103][ T4968] syzkaller0: entered allmulticast mode [ 65.630930][ T4977] syz.1.577[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.631050][ T4977] syz.1.577[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.642923][ T4975] FAULT_INJECTION: forcing a failure. [ 65.642923][ T4975] name failslab, interval 1, probability 0, space 0, times 0 [ 65.667146][ T4975] CPU: 0 UID: 0 PID: 4975 Comm: syz.0.576 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 65.677777][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.687909][ T4975] Call Trace: [ 65.691373][ T4975] [ 65.694382][ T4975] dump_stack_lvl+0xf2/0x150 [ 65.699075][ T4975] dump_stack+0x15/0x20 [ 65.703316][ T4975] should_fail_ex+0x229/0x230 [ 65.708004][ T4975] ? sctp_add_bind_addr+0x6f/0x1e0 [ 65.713150][ T4975] should_failslab+0x8f/0xb0 [ 65.717827][ T4975] __kmalloc_cache_noprof+0x4b/0x2a0 [ 65.723181][ T4975] sctp_add_bind_addr+0x6f/0x1e0 [ 65.728153][ T4975] sctp_copy_local_addr_list+0x19b/0x220 [ 65.733900][ T4975] sctp_copy_one_addr+0x83/0x410 [ 65.738873][ T4975] sctp_bind_addr_copy+0x81/0x2b0 [ 65.743920][ T4975] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 65.750058][ T4975] sctp_connect_new_asoc+0x1d0/0x3b0 [ 65.755357][ T4975] __sctp_connect+0x41d/0x7a0 [ 65.760081][ T4975] sctp_getsockopt_connectx3+0x26e/0x350 [ 65.765875][ T4975] sctp_getsockopt+0x805/0xab0 [ 65.770906][ T4975] sock_common_getsockopt+0x5b/0x70 [ 65.776143][ T4975] do_sock_getsockopt+0x121/0x1a0 [ 65.781255][ T4975] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 65.787180][ T4975] __sys_getsockopt+0x19a/0x210 [ 65.792133][ T4975] __x64_sys_getsockopt+0x66/0x80 [ 65.797173][ T4975] x64_sys_call+0x11cd/0x2d60 [ 65.801907][ T4975] do_syscall_64+0xc9/0x1c0 [ 65.806417][ T4975] ? clear_bhb_loop+0x55/0xb0 [ 65.811102][ T4975] ? clear_bhb_loop+0x55/0xb0 [ 65.815887][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.821826][ T4975] RIP: 0033:0x7f8300499ef9 [ 65.826423][ T4975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.846169][ T4975] RSP: 002b:00007f82ff117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 65.854645][ T4975] RAX: ffffffffffffffda RBX: 00007f8300635f80 RCX: 00007f8300499ef9 [ 65.862793][ T4975] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 65.870853][ T4975] RBP: 00007f82ff117090 R08: 0000000020000240 R09: 0000000000000000 [ 65.878944][ T4975] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.886916][ T4975] R13: 0000000000000000 R14: 00007f8300635f80 R15: 00007ffd73bb1178 [ 65.894901][ T4975] [ 65.913364][ T4977] FAULT_INJECTION: forcing a failure. [ 65.913364][ T4977] name failslab, interval 1, probability 0, space 0, times 0 [ 65.926203][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: syz.1.577 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 65.936851][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.947041][ T4977] Call Trace: [ 65.950345][ T4977] [ 65.953283][ T4977] dump_stack_lvl+0xf2/0x150 [ 65.957914][ T4977] dump_stack+0x15/0x20 [ 65.962092][ T4977] should_fail_ex+0x229/0x230 [ 65.966780][ T4977] ? kstrdup_const+0x3e/0x50 [ 65.971392][ T4977] should_failslab+0x8f/0xb0 [ 65.976052][ T4977] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 65.982394][ T4977] kstrdup+0x3a/0x80 [ 65.986295][ T4977] kstrdup_const+0x3e/0x50 [ 65.990717][ T4977] kvasprintf_const+0xe5/0x100 [ 65.995593][ T4977] kobject_set_name_vargs+0x44/0xe0 [ 66.000854][ T4977] dev_set_name+0x84/0xb0 [ 66.005226][ T4977] ? hrtimer_init+0x104/0x1f0 [ 66.009920][ T4977] ? netdev_register_kobject+0x63/0x230 [ 66.015479][ T4977] ? swiotlb_dev_init+0x19/0x30 [ 66.020404][ T4977] ? device_initialize+0x1fe/0x210 [ 66.025684][ T4977] netdev_register_kobject+0x80/0x230 [ 66.031160][ T4977] register_netdevice+0x910/0xe30 [ 66.036280][ T4977] vti6_tnl_create2+0x87/0x1e0 [ 66.041193][ T4977] vti6_locate+0x359/0x3c0 [ 66.045721][ T4977] vti6_siocdevprivate+0x57b/0x910 [ 66.050863][ T4977] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 66.056603][ T4977] dev_ifsioc+0x84e/0xa10 [ 66.060962][ T4977] dev_ioctl+0x8e9/0xab0 [ 66.065225][ T4977] sock_ioctl+0x5c0/0x640 [ 66.069633][ T4977] ? __pfx_sock_ioctl+0x10/0x10 [ 66.074503][ T4977] __se_sys_ioctl+0xd3/0x150 [ 66.079155][ T4977] __x64_sys_ioctl+0x43/0x50 [ 66.083755][ T4977] x64_sys_call+0x15cc/0x2d60 [ 66.088524][ T4977] do_syscall_64+0xc9/0x1c0 [ 66.093036][ T4977] ? clear_bhb_loop+0x55/0xb0 [ 66.097744][ T4977] ? clear_bhb_loop+0x55/0xb0 [ 66.102425][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.108406][ T4977] RIP: 0033:0x7fb507229ef9 [ 66.112823][ T4977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.132440][ T4977] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.140860][ T4977] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 66.148837][ T4977] RDX: 0000000020000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 66.156870][ T4977] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.164932][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.172924][ T4977] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 66.180912][ T4977] [ 66.416597][ T4992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 66.521149][ T5007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.528508][ T5007] IPv6: NLM_F_CREATE should be set when creating new route [ 66.546291][ T5012] netlink: 'syz.4.582': attribute type 4 has an invalid length. [ 66.595276][ T5019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 66.646804][ T5021] loop4: detected capacity change from 128 to 127 [ 66.663188][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 66.726045][ T5036] FAULT_INJECTION: forcing a failure. [ 66.726045][ T5036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.739250][ T5036] CPU: 0 UID: 0 PID: 5036 Comm: syz.3.600 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 66.740141][ T5038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 66.749848][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.756895][ T5038] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.766922][ T5036] Call Trace: [ 66.766933][ T5036] [ 66.774742][ T5038] vhci_hcd vhci_hcd.0: Device attached [ 66.777811][ T5036] dump_stack_lvl+0xf2/0x150 [ 66.777874][ T5036] dump_stack+0x15/0x20 [ 66.777899][ T5036] should_fail_ex+0x229/0x230 [ 66.799770][ T5036] should_fail+0xb/0x10 [ 66.803962][ T5036] should_fail_usercopy+0x1a/0x20 [ 66.808999][ T5036] _copy_from_user+0x1e/0xd0 [ 66.813598][ T5036] __se_sys_memfd_create+0x26b/0x600 [ 66.818909][ T5036] __x64_sys_memfd_create+0x31/0x40 [ 66.824119][ T5036] x64_sys_call+0x2891/0x2d60 [ 66.828821][ T5036] do_syscall_64+0xc9/0x1c0 [ 66.833332][ T5036] ? clear_bhb_loop+0x55/0xb0 [ 66.838018][ T5036] ? clear_bhb_loop+0x55/0xb0 [ 66.842725][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.848692][ T5036] RIP: 0033:0x7efce7939ef9 [ 66.853125][ T5036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.872838][ T5036] RSP: 002b:00007efce65b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 66.881265][ T5036] RAX: ffffffffffffffda RBX: 000000000000061b RCX: 00007efce7939ef9 [ 66.889275][ T5036] RDX: 00007efce65b6ef0 RSI: 0000000000000000 RDI: 00007efce79a8131 [ 66.897280][ T5036] RBP: 0000000020000800 R08: 00007efce65b6bb7 R09: 00007efce65b6e40 [ 66.905256][ T5036] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000040 [ 66.913286][ T5036] R13: 00007efce65b6ef0 R14: 00007efce65b6eb0 R15: 0000000020000240 [ 66.921395][ T5036] [ 66.956872][ T5040] vhci_hcd: connection closed [ 66.958166][ T11] vhci_hcd: stop threads [ 66.967304][ T11] vhci_hcd: release socket [ 66.971796][ T11] vhci_hcd: disconnect device [ 66.975301][ T5049] netlink: 2860 bytes leftover after parsing attributes in process `syz.1.603'. [ 66.991049][ T5049] syzkaller0: entered promiscuous mode [ 66.998480][ T5048] syzkaller0: left promiscuous mode [ 67.176466][ T5051] syz_tun: entered promiscuous mode [ 67.182049][ T5051] macvtap1: entered promiscuous mode [ 67.187481][ T5051] macvtap1: entered allmulticast mode [ 67.192983][ T5051] syz_tun: entered allmulticast mode [ 67.200126][ T5051] syz_tun: left allmulticast mode [ 67.205215][ T5051] syz_tun: left promiscuous mode [ 67.223169][ T5057] syz_tun: entered promiscuous mode [ 67.228879][ T5057] macvtap1: entered promiscuous mode [ 67.234282][ T5057] macvtap1: entered allmulticast mode [ 67.239689][ T5057] syz_tun: entered allmulticast mode [ 67.246372][ T5057] syz_tun: left allmulticast mode [ 67.251744][ T5057] syz_tun: left promiscuous mode [ 67.401066][ T5070] netlink: 'syz.1.612': attribute type 12 has an invalid length. [ 67.525589][ T5084] FAULT_INJECTION: forcing a failure. [ 67.525589][ T5084] name failslab, interval 1, probability 0, space 0, times 0 [ 67.529644][ T5082] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 67.538508][ T5084] CPU: 0 UID: 0 PID: 5084 Comm: syz.1.619 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 67.544928][ T5082] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 67.555530][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 67.563345][ T5082] vhci_hcd vhci_hcd.0: Device attached [ 67.573304][ T5084] Call Trace: [ 67.573318][ T5084] [ 67.573332][ T5084] dump_stack_lvl+0xf2/0x150 [ 67.573363][ T5084] dump_stack+0x15/0x20 [ 67.594371][ T5084] should_fail_ex+0x229/0x230 [ 67.599094][ T5084] ? sidtab_sid2str_get+0xb8/0x140 [ 67.604285][ T5084] should_failslab+0x8f/0xb0 [ 67.608974][ T5084] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 67.615138][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 67.615357][ T5084] kmemdup_noprof+0x2a/0x60 [ 67.628749][ T5084] sidtab_sid2str_get+0xb8/0x140 [ 67.633773][ T5084] security_sid_to_context_core+0x1eb/0x2f0 [ 67.639721][ T5084] security_sid_to_context+0x27/0x30 [ 67.645025][ T5084] selinux_secid_to_secctx+0x22/0x30 [ 67.650375][ T5084] security_secid_to_secctx+0x4a/0x80 [ 67.655810][ T5084] audit_log_task_context+0x8c/0x1b0 [ 67.661164][ T5084] audit_log_task+0xfb/0x180 [ 67.665856][ T5084] audit_seccomp+0x68/0x130 [ 67.670368][ T5084] __seccomp_filter+0x6fa/0x1180 [ 67.675322][ T5084] ? proc_fail_nth_write+0x130/0x160 [ 67.680672][ T5084] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.686352][ T5084] ? vfs_write+0x5a5/0x900 [ 67.690838][ T5084] ? __fget_files+0x1da/0x210 [ 67.695610][ T5084] __secure_computing+0x9f/0x1c0 [ 67.700624][ T5084] syscall_trace_enter+0xd1/0x1f0 [ 67.705697][ T5084] ? fpregs_assert_state_consistent+0x83/0xa0 [ 67.711986][ T5084] do_syscall_64+0xaa/0x1c0 [ 67.716535][ T5084] ? clear_bhb_loop+0x55/0xb0 [ 67.721291][ T5084] ? clear_bhb_loop+0x55/0xb0 [ 67.726030][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.731939][ T5084] RIP: 0033:0x7fb507229ef9 [ 67.736350][ T5084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.755975][ T5084] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 67.764496][ T5084] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 67.772485][ T5084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 67.780475][ T5084] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.788566][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.796584][ T5084] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 67.804571][ T5084] [ 67.807992][ T5084] audit_panic: 261 callbacks suppressed [ 67.808036][ T5084] audit: error in audit_log_task_context [ 67.813737][ T29] audit: type=1400 audit(1724964449.984:2257): avc: denied { create } for pid=5091 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.839829][ T29] audit: type=1400 audit(1724964449.994:2258): avc: denied { write } for pid=5091 comm="syz.4.620" path="socket:[9516]" dev="sockfs" ino=9516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.863381][ T29] audit: type=1326 audit(1724964449.754:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5083 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 67.884448][ T29] audit: type=1326 audit(1724964450.054:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb50722893c code=0x7ffc0000 [ 67.907677][ T29] audit: type=1326 audit(1724964450.054:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb5072289df code=0x7ffc0000 [ 67.931089][ T29] audit: type=1326 audit(1724964450.054:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb507228b8a code=0x7ffc0000 [ 67.954407][ T29] audit: type=1326 audit(1724964450.054:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 67.977864][ T29] audit: type=1326 audit(1724964450.054:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 68.002116][ T35] usb 8-1: SetAddress Request (2) to port 0 [ 68.008267][ T35] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.108005][ T5099] syz_tun: entered promiscuous mode [ 68.113613][ T5099] macvtap1: entered promiscuous mode [ 68.119125][ T5099] macvtap1: entered allmulticast mode [ 68.124554][ T5099] syz_tun: entered allmulticast mode [ 68.131551][ T5099] syz_tun: left allmulticast mode [ 68.136842][ T5099] syz_tun: left promiscuous mode [ 68.153337][ T5104] netlink: 'syz.0.624': attribute type 12 has an invalid length. [ 68.184553][ T5088] vhci_hcd: connection reset by peer [ 68.190498][ T3356] vhci_hcd: stop threads [ 68.194768][ T3356] vhci_hcd: release socket [ 68.199294][ T3356] vhci_hcd: disconnect device [ 68.261115][ T29] audit: type=1326 audit(1724964450.494:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5105 comm="syz.2.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 68.373469][ T5116] syzkaller0: entered promiscuous mode [ 68.379175][ T5116] syzkaller0: entered allmulticast mode [ 68.410185][ T5112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.627'. [ 68.419564][ T5112] netlink: 'syz.3.627': attribute type 5 has an invalid length. [ 68.447943][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 68.526542][ T5130] netlink: 'syz.1.636': attribute type 12 has an invalid length. [ 68.706218][ T5139] syz_tun: entered promiscuous mode [ 68.711788][ T5139] macvtap1: entered promiscuous mode [ 68.717250][ T5139] macvtap1: entered allmulticast mode [ 68.722672][ T5139] syz_tun: entered allmulticast mode [ 68.730132][ T5139] syz_tun: left allmulticast mode [ 68.735262][ T5139] syz_tun: left promiscuous mode [ 68.787075][ T5143] syz_tun: entered promiscuous mode [ 68.792633][ T5143] macvtap1: entered promiscuous mode [ 68.798146][ T5143] macvtap1: entered allmulticast mode [ 68.803521][ T5143] syz_tun: entered allmulticast mode [ 68.810850][ T5143] syz_tun: left allmulticast mode [ 68.816026][ T5143] syz_tun: left promiscuous mode [ 69.040550][ T5151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.644'. [ 69.065918][ T5151] netlink: 'syz.3.644': attribute type 5 has an invalid length. [ 69.109632][ T5160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.648'. [ 69.213687][ T5162] netlink: 'syz.2.649': attribute type 12 has an invalid length. [ 69.440369][ T5185] FAULT_INJECTION: forcing a failure. [ 69.440369][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.453572][ T5185] CPU: 0 UID: 0 PID: 5185 Comm: syz.4.657 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 69.464183][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.474314][ T5185] Call Trace: [ 69.477703][ T5185] [ 69.480649][ T5185] dump_stack_lvl+0xf2/0x150 [ 69.485281][ T5185] dump_stack+0x15/0x20 [ 69.489539][ T5185] should_fail_ex+0x229/0x230 [ 69.489785][ T5175] syz_tun: entered promiscuous mode [ 69.494342][ T5185] should_fail+0xb/0x10 [ 69.500494][ T5175] macvtap1: entered promiscuous mode [ 69.503746][ T5185] should_fail_usercopy+0x1a/0x20 [ 69.509234][ T5175] macvtap1: entered allmulticast mode [ 69.514082][ T5185] _copy_from_user+0x1e/0xd0 [ 69.519507][ T5175] syz_tun: entered allmulticast mode [ 69.524043][ T5185] sctp_getsockopt_maxseg+0x128/0x4b0 [ 69.534809][ T5185] sctp_getsockopt+0xa38/0xab0 [ 69.539644][ T5185] sock_common_getsockopt+0x5b/0x70 [ 69.544911][ T5185] do_sock_getsockopt+0x121/0x1a0 [ 69.549959][ T5185] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 69.555903][ T5185] __sys_getsockopt+0x19a/0x210 [ 69.560901][ T5185] __x64_sys_getsockopt+0x66/0x80 [ 69.565947][ T5185] x64_sys_call+0x11cd/0x2d60 [ 69.570820][ T5185] do_syscall_64+0xc9/0x1c0 [ 69.575350][ T5185] ? clear_bhb_loop+0x55/0xb0 [ 69.580141][ T5185] ? clear_bhb_loop+0x55/0xb0 [ 69.584887][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.590831][ T5185] RIP: 0033:0x7fcba8ae9ef9 [ 69.595247][ T5185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.614893][ T5185] RSP: 002b:00007fcba7767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 69.623520][ T5185] RAX: ffffffffffffffda RBX: 00007fcba8c85f80 RCX: 00007fcba8ae9ef9 [ 69.631502][ T5185] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000004 [ 69.639592][ T5185] RBP: 00007fcba7767090 R08: 0000000020000040 R09: 0000000000000000 [ 69.647574][ T5185] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.655565][ T5185] R13: 0000000000000000 R14: 00007fcba8c85f80 R15: 00007ffd4b0c7ce8 [ 69.663602][ T5185] [ 69.668674][ T5175] syz_tun: left allmulticast mode [ 69.673994][ T5175] syz_tun: left promiscuous mode [ 69.701411][ T5192] batman_adv: batadv0: Adding interface: ipvlan2 [ 69.707889][ T5192] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.733303][ T5192] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 69.837895][ T5203] netlink: 'syz.3.664': attribute type 12 has an invalid length. [ 69.992824][ T5224] FAULT_INJECTION: forcing a failure. [ 69.992824][ T5224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.005987][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: syz.3.670 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 70.016633][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.026708][ T5224] Call Trace: [ 70.030002][ T5224] [ 70.032952][ T5224] dump_stack_lvl+0xf2/0x150 [ 70.037562][ T5224] dump_stack+0x15/0x20 [ 70.041798][ T5224] should_fail_ex+0x229/0x230 [ 70.046509][ T5224] should_fail+0xb/0x10 [ 70.050745][ T5224] should_fail_usercopy+0x1a/0x20 [ 70.055814][ T5224] _copy_from_iter+0xd3/0xb00 [ 70.060527][ T5224] ? rep_movs_alternative+0x4a/0x70 [ 70.065846][ T5224] ? _copy_from_iter+0x161/0xb00 [ 70.070810][ T5224] copy_page_from_iter+0x14f/0x280 [ 70.075577][ T5199] netlink: 'syz.1.662': attribute type 5 has an invalid length. [ 70.075937][ T5224] skb_copy_datagram_from_iter+0x203/0x440 [ 70.089441][ T5224] packet_sendmsg+0x266b/0x34b0 [ 70.094429][ T5224] ? __rcu_read_unlock+0x4e/0x70 [ 70.099621][ T5224] ? avc_has_perm+0xd4/0x160 [ 70.104333][ T5224] ? selinux_socket_sendmsg+0x182/0x1b0 [ 70.109919][ T5224] ? __pfx_packet_sendmsg+0x10/0x10 [ 70.115146][ T5224] __sock_sendmsg+0x140/0x180 [ 70.119868][ T5224] __sys_sendto+0x1e5/0x260 [ 70.124403][ T5224] __x64_sys_sendto+0x78/0x90 [ 70.129164][ T5224] x64_sys_call+0x2959/0x2d60 [ 70.133945][ T5224] do_syscall_64+0xc9/0x1c0 [ 70.138460][ T5224] ? clear_bhb_loop+0x55/0xb0 [ 70.143145][ T5224] ? clear_bhb_loop+0x55/0xb0 [ 70.147997][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.153911][ T5224] RIP: 0033:0x7efce7939ef9 [ 70.158331][ T5224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.177947][ T5224] RSP: 002b:00007efce65b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 70.186365][ T5224] RAX: ffffffffffffffda RBX: 00007efce7ad5f80 RCX: 00007efce7939ef9 [ 70.194374][ T5224] RDX: 000000000001fffc RSI: 0000000020000180 RDI: 0000000000000003 [ 70.202486][ T5224] RBP: 00007efce65b7090 R08: 0000000020000140 R09: 0000000000000014 [ 70.210466][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.218615][ T5224] R13: 0000000000000000 R14: 00007efce7ad5f80 R15: 00007fff71da0698 [ 70.226602][ T5224] [ 70.257122][ T5225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.662'. [ 70.362238][ T5236] FAULT_INJECTION: forcing a failure. [ 70.362238][ T5236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.375557][ T5236] CPU: 0 UID: 0 PID: 5236 Comm: syz.2.677 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 70.386348][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.396416][ T5236] Call Trace: [ 70.399734][ T5236] [ 70.402671][ T5236] dump_stack_lvl+0xf2/0x150 [ 70.407299][ T5236] dump_stack+0x15/0x20 [ 70.411468][ T5236] should_fail_ex+0x229/0x230 [ 70.416171][ T5236] should_fail+0xb/0x10 [ 70.420384][ T5236] should_fail_usercopy+0x1a/0x20 [ 70.425571][ T5236] _copy_to_user+0x1e/0xa0 [ 70.430059][ T5236] do_pipe2+0x8c/0x130 [ 70.434161][ T5236] __x64_sys_pipe+0x21/0x30 [ 70.438693][ T5236] x64_sys_call+0xd0/0x2d60 [ 70.443209][ T5236] do_syscall_64+0xc9/0x1c0 [ 70.447722][ T5236] ? clear_bhb_loop+0x55/0xb0 [ 70.452409][ T5236] ? clear_bhb_loop+0x55/0xb0 [ 70.457136][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.463050][ T5236] RIP: 0033:0x7fe044109ef9 [ 70.467480][ T5236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.487124][ T5236] RSP: 002b:00007fe042d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 70.495542][ T5236] RAX: ffffffffffffffda RBX: 00007fe0442a5f80 RCX: 00007fe044109ef9 [ 70.503561][ T5236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.511538][ T5236] RBP: 00007fe042d87090 R08: 0000000000000000 R09: 0000000000000000 [ 70.519650][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.527631][ T5236] R13: 0000000000000001 R14: 00007fe0442a5f80 R15: 00007ffd0e169d98 [ 70.535618][ T5236] [ 70.571318][ T5233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.669291][ T5233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.777219][ T5233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.888420][ T5233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.999066][ T5244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.051561][ T5233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.062852][ T5233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.077670][ T5233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.093677][ T5233] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.641771][ T5284] __nla_validate_parse: 1 callbacks suppressed [ 71.641791][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 71.693637][ T5289] FAULT_INJECTION: forcing a failure. [ 71.693637][ T5289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.706806][ T5289] CPU: 1 UID: 0 PID: 5289 Comm: syz.3.697 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 71.717470][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.727548][ T5289] Call Trace: [ 71.730841][ T5289] [ 71.733783][ T5289] dump_stack_lvl+0xf2/0x150 [ 71.738518][ T5289] dump_stack+0x15/0x20 [ 71.742690][ T5289] should_fail_ex+0x229/0x230 [ 71.747480][ T5289] should_fail+0xb/0x10 [ 71.751741][ T5289] should_fail_usercopy+0x1a/0x20 [ 71.756784][ T5289] strncpy_from_user+0x25/0x270 [ 71.761705][ T5289] strncpy_from_user_nofault+0x66/0xe0 [ 71.767206][ T5289] bpf_probe_read_compat_str+0xb3/0x130 [ 71.772790][ T5289] bpf_prog_e42f6260c1b72fb3+0x3d/0x3f [ 71.778280][ T5289] bpf_trace_run3+0x10c/0x1d0 [ 71.782992][ T5289] ? user_path_at+0xf5/0x110 [ 71.787614][ T5289] ? user_path_at+0xf5/0x110 [ 71.792228][ T5289] ? user_path_at+0xf5/0x110 [ 71.796845][ T5289] __traceiter_kmem_cache_free+0x33/0x50 [ 71.802569][ T5289] ? user_path_at+0xf5/0x110 [ 71.807201][ T5289] kmem_cache_free+0x1fe/0x280 [ 71.811992][ T5289] user_path_at+0xf5/0x110 [ 71.816442][ T5289] __se_sys_move_mount+0xfd/0x730 [ 71.821498][ T5289] ? fput+0x13b/0x180 [ 71.825556][ T5289] __x64_sys_move_mount+0x67/0x80 [ 71.830619][ T5289] x64_sys_call+0x1b80/0x2d60 [ 71.835332][ T5289] do_syscall_64+0xc9/0x1c0 [ 71.839874][ T5289] ? clear_bhb_loop+0x55/0xb0 [ 71.844592][ T5289] ? clear_bhb_loop+0x55/0xb0 [ 71.849321][ T5289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.855292][ T5289] RIP: 0033:0x7efce7939ef9 [ 71.859727][ T5289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.879370][ T5289] RSP: 002b:00007efce65b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 71.887810][ T5289] RAX: ffffffffffffffda RBX: 00007efce7ad5f80 RCX: 00007efce7939ef9 [ 71.895847][ T5289] RDX: ffffffffffffffff RSI: 0000000020000340 RDI: ffffffffffffffff [ 71.903874][ T5289] RBP: 00007efce65b7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.911866][ T5289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.919869][ T5289] R13: 0000000000000000 R14: 00007efce7ad5f80 R15: 00007fff71da0698 [ 71.927895][ T5289] [ 71.948751][ T5296] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 71.979519][ T5298] netlink: 'syz.3.701': attribute type 4 has an invalid length. [ 72.058512][ T5313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 72.175107][ T5322] netlink: 'syz.4.712': attribute type 4 has an invalid length. [ 72.188908][ T5324] netlink: 'syz.0.713': attribute type 8 has an invalid length. [ 72.289799][ T5326] syz_tun: entered promiscuous mode [ 72.300225][ T5326] macvtap1: entered promiscuous mode [ 72.305619][ T5326] macvtap1: entered allmulticast mode [ 72.311073][ T5326] syz_tun: entered allmulticast mode [ 72.332112][ T5326] syz_tun: left allmulticast mode [ 72.337328][ T5326] syz_tun: left promiscuous mode [ 72.376834][ T5320] syz_tun: entered promiscuous mode [ 72.382481][ T5320] macvtap1: entered promiscuous mode [ 72.387963][ T5320] macvtap1: entered allmulticast mode [ 72.393366][ T5320] syz_tun: entered allmulticast mode [ 72.402519][ T5320] syz_tun: left allmulticast mode [ 72.407785][ T5320] syz_tun: left promiscuous mode [ 72.482598][ T5344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.720'. [ 73.096803][ T35] usb 8-1: device descriptor read/8, error -110 [ 73.164347][ T5369] syz_tun: entered promiscuous mode [ 73.170111][ T5369] macvtap1: entered promiscuous mode [ 73.175565][ T5369] macvtap1: entered allmulticast mode [ 73.181014][ T5369] syz_tun: entered allmulticast mode [ 73.188176][ T5369] syz_tun: left allmulticast mode [ 73.193403][ T5369] syz_tun: left promiscuous mode [ 73.216950][ T35] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 73.254828][ T35] usb 8-1: enqueue for inactive port 0 [ 73.260789][ T35] usb 8-1: enqueue for inactive port 0 [ 73.266369][ T35] usb 8-1: enqueue for inactive port 0 [ 73.285254][ T5372] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 73.295536][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 73.295549][ T29] audit: type=1400 audit(1724964455.524:2619): avc: denied { relabelto } for pid=5371 comm="syz.2.730" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 73.305985][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 73.328514][ T29] audit: type=1400 audit(1724964455.524:2620): avc: denied { associate } for pid=5371 comm="syz.2.730" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_unit_file_t:s0" [ 73.365260][ T29] audit: type=1400 audit(1724964455.574:2621): avc: denied { read } for pid=5373 comm="syz.4.731" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.365295][ T29] audit: type=1400 audit(1724964455.574:2622): avc: denied { open } for pid=5373 comm="syz.4.731" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.440670][ T29] audit: type=1326 audit(1724964455.674:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 73.469031][ T29] audit: type=1326 audit(1724964455.674:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 73.492501][ T29] audit: type=1326 audit(1724964455.674:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 73.515854][ T29] audit: type=1326 audit(1724964455.674:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 73.539257][ T29] audit: type=1326 audit(1724964455.674:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 73.562860][ T29] audit: type=1326 audit(1724964455.674:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe044109ef9 code=0x7ffc0000 [ 73.587670][ T5382] FAULT_INJECTION: forcing a failure. [ 73.587670][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 73.600534][ T5382] CPU: 1 UID: 0 PID: 5382 Comm: syz.4.735 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 73.611153][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 73.621226][ T5382] Call Trace: [ 73.624536][ T5382] [ 73.627541][ T5382] dump_stack_lvl+0xf2/0x150 [ 73.632256][ T5382] dump_stack+0x15/0x20 [ 73.636422][ T5382] should_fail_ex+0x229/0x230 [ 73.641110][ T5382] ? alloc_empty_file+0xd0/0x310 [ 73.646137][ T5382] should_failslab+0x8f/0xb0 [ 73.650822][ T5382] kmem_cache_alloc_noprof+0x4c/0x290 [ 73.656285][ T5382] ? __rcu_read_unlock+0x4e/0x70 [ 73.661282][ T5382] alloc_empty_file+0xd0/0x310 [ 73.666111][ T5382] dentry_open+0x2d/0x90 [ 73.670376][ T5382] __se_sys_open_tree+0x57d/0x660 [ 73.675436][ T5382] __x64_sys_open_tree+0x43/0x50 [ 73.680517][ T5382] x64_sys_call+0x2af3/0x2d60 [ 73.685208][ T5382] do_syscall_64+0xc9/0x1c0 [ 73.689804][ T5382] ? clear_bhb_loop+0x55/0xb0 [ 73.694487][ T5382] ? clear_bhb_loop+0x55/0xb0 [ 73.699232][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.705148][ T5382] RIP: 0033:0x7fcba8ae9ef9 [ 73.709565][ T5382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.729180][ T5382] RSP: 002b:00007fcba7767038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 73.737595][ T5382] RAX: ffffffffffffffda RBX: 00007fcba8c85f80 RCX: 00007fcba8ae9ef9 [ 73.745624][ T5382] RDX: 0000000000089901 RSI: 0000000020000640 RDI: ffffffffffffff9c [ 73.753648][ T5382] RBP: 00007fcba7767090 R08: 0000000000000000 R09: 0000000000000000 [ 73.761656][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.769636][ T5382] R13: 0000000000000000 R14: 00007fcba8c85f80 R15: 00007ffd4b0c7ce8 [ 73.777648][ T5382] [ 74.005910][ T5406] FAULT_INJECTION: forcing a failure. [ 74.005910][ T5406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.019493][ T5406] CPU: 0 UID: 0 PID: 5406 Comm: syz.1.743 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 74.030152][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.040230][ T5406] Call Trace: [ 74.043528][ T5406] [ 74.046480][ T5406] dump_stack_lvl+0xf2/0x150 [ 74.051141][ T5406] dump_stack+0x15/0x20 [ 74.055322][ T5406] should_fail_ex+0x229/0x230 [ 74.060113][ T5406] should_fail+0xb/0x10 [ 74.064378][ T5406] should_fail_usercopy+0x1a/0x20 [ 74.069560][ T5406] _copy_from_iter+0xd3/0xb00 [ 74.074261][ T5406] ? __schedule+0x5fa/0x950 [ 74.078955][ T5406] ? __virt_addr_valid+0x1ed/0x250 [ 74.084185][ T5406] ? __check_object_size+0x35b/0x510 [ 74.089577][ T5406] file_tty_write+0x335/0x690 [ 74.094411][ T5406] tty_write+0x28/0x30 [ 74.098735][ T5406] vfs_write+0x78f/0x900 [ 74.103004][ T5406] ? __pfx_tty_write+0x10/0x10 [ 74.107815][ T5406] ksys_write+0xeb/0x1b0 [ 74.112096][ T5406] __x64_sys_write+0x42/0x50 [ 74.117091][ T5406] x64_sys_call+0x27dd/0x2d60 [ 74.121870][ T5406] do_syscall_64+0xc9/0x1c0 [ 74.126419][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 74.131117][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 74.136255][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.142252][ T5406] RIP: 0033:0x7fb507229ef9 [ 74.146747][ T5406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.166379][ T5406] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.174871][ T5406] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 74.182890][ T5406] RDX: 0000000000001006 RSI: 00000000200012c0 RDI: 0000000000000004 [ 74.190885][ T5406] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.198877][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.206870][ T5406] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 74.214868][ T5406] [ 74.251415][ T5398] syz_tun: entered promiscuous mode [ 74.259322][ T5410] selinux_netlink_send: 1 callbacks suppressed [ 74.259348][ T5410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5410 comm=syz.1.745 [ 74.278270][ T5410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5410 comm=syz.1.745 [ 74.290903][ T5410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5410 comm=syz.1.745 [ 74.303491][ T5410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5410 comm=syz.1.745 [ 74.316045][ T5410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5410 comm=syz.1.745 [ 74.330065][ T5398] macvtap1: entered promiscuous mode [ 74.335537][ T5398] macvtap1: entered allmulticast mode [ 74.341017][ T5398] syz_tun: entered allmulticast mode [ 74.350330][ T5398] syz_tun: left allmulticast mode [ 74.355471][ T5398] syz_tun: left promiscuous mode [ 74.380837][ T5411] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 74.389851][ T5411] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 74.420470][ T5410] netlink: 666 bytes leftover after parsing attributes in process `syz.1.745'. [ 74.508222][ T5422] syzkaller0: entered promiscuous mode [ 74.513835][ T5422] syzkaller0: entered allmulticast mode [ 74.656908][ T35] usb usb8-port1: attempt power cycle [ 74.826946][ T5441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5441 comm=syz.0.757 [ 74.839593][ T5441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5441 comm=syz.0.757 [ 74.849130][ T5437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.755'. [ 74.852130][ T5441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5441 comm=syz.0.757 [ 74.863466][ T5437] netlink: 'syz.2.755': attribute type 5 has an invalid length. [ 74.873620][ T5441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5441 comm=syz.0.757 [ 74.893820][ T5441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5441 comm=syz.0.757 [ 74.895579][ T5443] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 74.915359][ T5443] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 74.932681][ T5441] netlink: 666 bytes leftover after parsing attributes in process `syz.0.757'. [ 74.984491][ T5449] netlink: 596 bytes leftover after parsing attributes in process `syz.0.760'. [ 74.984502][ T5447] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 75.320851][ T5431] Process accounting resumed [ 75.468589][ T5473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.769'. [ 75.477839][ T5473] netlink: 'syz.1.769': attribute type 5 has an invalid length. [ 75.559298][ T5480] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 75.568719][ T5479] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 75.921404][ T5488] syzkaller0: entered promiscuous mode [ 75.926983][ T5488] syzkaller0: entered allmulticast mode [ 75.941764][ T5490] FAULT_INJECTION: forcing a failure. [ 75.941764][ T5490] name failslab, interval 1, probability 0, space 0, times 0 [ 75.954498][ T5490] CPU: 0 UID: 0 PID: 5490 Comm: syz.0.777 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 75.965115][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.975168][ T5490] Call Trace: [ 75.978453][ T5490] [ 75.981409][ T5490] dump_stack_lvl+0xf2/0x150 [ 75.986045][ T5490] dump_stack+0x15/0x20 [ 75.990211][ T5490] should_fail_ex+0x229/0x230 [ 75.994936][ T5490] ? alloc_netdev_mqs+0x7a5/0x8d0 [ 75.999982][ T5490] should_failslab+0x8f/0xb0 [ 76.004607][ T5490] __kmalloc_cache_noprof+0x4b/0x2a0 [ 76.009922][ T5490] alloc_netdev_mqs+0x7a5/0x8d0 [ 76.014821][ T5490] ppp_ioctl+0x46e/0x11b0 [ 76.019203][ T5490] ? __pfx_ppp_ioctl+0x10/0x10 [ 76.024018][ T5490] __se_sys_ioctl+0xd3/0x150 [ 76.028739][ T5490] __x64_sys_ioctl+0x43/0x50 [ 76.033356][ T5490] x64_sys_call+0x15cc/0x2d60 [ 76.038048][ T5490] do_syscall_64+0xc9/0x1c0 [ 76.042649][ T5490] ? clear_bhb_loop+0x55/0xb0 [ 76.047380][ T5490] ? clear_bhb_loop+0x55/0xb0 [ 76.052073][ T5490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.058036][ T5490] RIP: 0033:0x7f8300499ef9 [ 76.062459][ T5490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.082146][ T5490] RSP: 002b:00007f82ff117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.090663][ T5490] RAX: ffffffffffffffda RBX: 00007f8300635f80 RCX: 00007f8300499ef9 [ 76.098653][ T5490] RDX: 0000000020000140 RSI: 00000000c004743e RDI: 0000000000000005 [ 76.106640][ T5490] RBP: 00007f82ff117090 R08: 0000000000000000 R09: 0000000000000000 [ 76.114696][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.122673][ T5490] R13: 0000000000000000 R14: 00007f8300635f80 R15: 00007ffd73bb1178 [ 76.130672][ T5490] [ 76.162989][ T5497] syzkaller0: entered promiscuous mode [ 76.168579][ T5497] syzkaller0: entered allmulticast mode [ 76.291364][ T5500] FAULT_INJECTION: forcing a failure. [ 76.291364][ T5500] name failslab, interval 1, probability 0, space 0, times 0 [ 76.304205][ T5500] CPU: 1 UID: 0 PID: 5500 Comm: syz.0.780 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 76.314870][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.324947][ T5500] Call Trace: [ 76.328222][ T5500] [ 76.331194][ T5500] dump_stack_lvl+0xf2/0x150 [ 76.335845][ T5500] dump_stack+0x15/0x20 [ 76.340051][ T5500] should_fail_ex+0x229/0x230 [ 76.344737][ T5500] ? __d_alloc+0x8f/0x340 [ 76.349068][ T5500] should_failslab+0x8f/0xb0 [ 76.353756][ T5500] __kmalloc_noprof+0xa5/0x370 [ 76.358548][ T5500] __d_alloc+0x8f/0x340 [ 76.362705][ T5500] ? __rcu_read_unlock+0x34/0x70 [ 76.367699][ T5500] d_alloc_parallel+0x54/0xc80 [ 76.372466][ T5500] ? selinux_inode_permission+0x337/0x400 [ 76.378287][ T5500] ? lockref_get_not_dead+0x118/0x1b0 [ 76.383679][ T5500] ? down_read+0x171/0x4b0 [ 76.388142][ T5500] __lookup_slow+0x8d/0x250 [ 76.392648][ T5500] lookup_slow+0x3c/0x60 [ 76.396937][ T5500] walk_component+0x1f5/0x230 [ 76.401673][ T5500] ? path_lookupat+0xfd/0x2b0 [ 76.406367][ T5500] path_lookupat+0x10a/0x2b0 [ 76.410965][ T5500] filename_lookup+0x127/0x300 [ 76.415825][ T5500] user_path_at+0x3c/0x110 [ 76.420274][ T5500] __se_sys_mount+0x248/0x2d0 [ 76.425084][ T5500] ? fput+0x13b/0x180 [ 76.429065][ T5500] __x64_sys_mount+0x67/0x80 [ 76.433698][ T5500] x64_sys_call+0x203e/0x2d60 [ 76.438410][ T5500] do_syscall_64+0xc9/0x1c0 [ 76.443000][ T5500] ? clear_bhb_loop+0x55/0xb0 [ 76.447699][ T5500] ? clear_bhb_loop+0x55/0xb0 [ 76.452380][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.458347][ T5500] RIP: 0033:0x7f8300499ef9 [ 76.462808][ T5500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.482456][ T5500] RSP: 002b:00007f82ff0f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.490876][ T5500] RAX: ffffffffffffffda RBX: 00007f8300636058 RCX: 00007f8300499ef9 [ 76.498843][ T5500] RDX: 0000000020000080 RSI: 00000000200004c0 RDI: 00000000200003c0 [ 76.506841][ T5500] RBP: 00007f82ff0f6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.514850][ T5500] R10: 07ed1dae3b42b1a2 R11: 0000000000000246 R12: 0000000000000001 [ 76.522818][ T5500] R13: 0000000000000000 R14: 00007f8300636058 R15: 00007ffd73bb1178 [ 76.530800][ T5500] [ 76.747275][ T35] usb usb8-port1: unable to enumerate USB device [ 76.813657][ T5491] Process accounting resumed [ 76.918547][ T5502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.781'. [ 76.927936][ T5502] netlink: 'syz.2.781': attribute type 5 has an invalid length. [ 77.125338][ T5526] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 77.134475][ T5526] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 77.147435][ T5526] netlink: 666 bytes leftover after parsing attributes in process `syz.0.791'. [ 77.464007][ T5540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.797'. [ 77.473406][ T5540] netlink: 'syz.4.797': attribute type 5 has an invalid length. [ 77.582248][ T5544] netlink: 'syz.4.798': attribute type 4 has an invalid length. [ 78.706843][ T5573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 78.716151][ T5573] netlink: 'syz.1.808': attribute type 5 has an invalid length. [ 78.801452][ T5582] FAULT_INJECTION: forcing a failure. [ 78.801452][ T5582] name failslab, interval 1, probability 0, space 0, times 0 [ 78.814219][ T5582] CPU: 0 UID: 0 PID: 5582 Comm: syz.1.812 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 78.824901][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.834974][ T5582] Call Trace: [ 78.838264][ T5582] [ 78.841200][ T5582] dump_stack_lvl+0xf2/0x150 [ 78.845893][ T5582] dump_stack+0x15/0x20 [ 78.850189][ T5582] should_fail_ex+0x229/0x230 [ 78.854930][ T5582] ? __alloc_skb+0x10b/0x310 [ 78.859598][ T5582] should_failslab+0x8f/0xb0 [ 78.864223][ T5582] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 78.870060][ T5582] __alloc_skb+0x10b/0x310 [ 78.874503][ T5582] netlink_alloc_large_skb+0xad/0xe0 [ 78.879921][ T5582] netlink_sendmsg+0x3b4/0x6e0 [ 78.884712][ T5582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.890062][ T5582] __sock_sendmsg+0x140/0x180 [ 78.894839][ T5582] ____sys_sendmsg+0x312/0x410 [ 78.894949][ T5582] __sys_sendmsg+0x1e9/0x280 [ 78.895004][ T5582] __x64_sys_sendmsg+0x46/0x50 [ 78.895038][ T5582] x64_sys_call+0x2689/0x2d60 [ 78.895115][ T5582] do_syscall_64+0xc9/0x1c0 [ 78.895141][ T5582] ? clear_bhb_loop+0x55/0xb0 [ 78.895165][ T5582] ? clear_bhb_loop+0x55/0xb0 [ 78.895189][ T5582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.895276][ T5582] RIP: 0033:0x7fb507229ef9 [ 78.895294][ T5582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.895318][ T5582] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.895338][ T5582] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 78.895352][ T5582] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 78.895419][ T5582] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.895432][ T5582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.895444][ T5582] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 78.895464][ T5582] [ 78.936702][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 78.936719][ T29] audit: type=1400 audit(1724964461.164:2862): avc: denied { remount } for pid=5584 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.007296][ T29] audit: type=1400 audit(1724964461.234:2863): avc: denied { write } for pid=5587 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.050838][ T5591] FAULT_INJECTION: forcing a failure. [ 79.050838][ T5591] name failslab, interval 1, probability 0, space 0, times 0 [ 79.050910][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz.4.816 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 79.050939][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 79.050955][ T5591] Call Trace: [ 79.050963][ T5591] [ 79.050972][ T5591] dump_stack_lvl+0xf2/0x150 [ 79.051002][ T5591] dump_stack+0x15/0x20 [ 79.051022][ T5591] should_fail_ex+0x229/0x230 [ 79.051073][ T5591] ? getname_flags+0x81/0x3b0 [ 79.051113][ T5591] should_failslab+0x8f/0xb0 [ 79.051155][ T5591] kmem_cache_alloc_noprof+0x4c/0x290 [ 79.051190][ T5591] getname_flags+0x81/0x3b0 [ 79.051267][ T5591] user_path_at+0x26/0x110 [ 79.051353][ T5591] path_setxattr+0x179/0x360 [ 79.051389][ T5591] ? get_pid_task+0x8e/0xc0 [ 79.051464][ T5591] __x64_sys_lsetxattr+0x6a/0x80 [ 79.051495][ T5591] x64_sys_call+0x2931/0x2d60 [ 79.051599][ T5591] do_syscall_64+0xc9/0x1c0 [ 79.051627][ T5591] ? clear_bhb_loop+0x55/0xb0 [ 79.051651][ T5591] ? clear_bhb_loop+0x55/0xb0 [ 79.051671][ T5591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.051772][ T5591] RIP: 0033:0x7fcba8ae9ef9 [ 79.051790][ T5591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.051812][ T5591] RSP: 002b:00007fcba7767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 79.051832][ T5591] RAX: ffffffffffffffda RBX: 00007fcba8c85f80 RCX: 00007fcba8ae9ef9 [ 79.051917][ T5591] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 79.051933][ T5591] RBP: 00007fcba7767090 R08: 0000000000000000 R09: 0000000000000000 [ 79.051949][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.051964][ T5591] R13: 0000000000000000 R14: 00007fcba8c85f80 R15: 00007ffd4b0c7ce8 [ 79.051987][ T5591] [ 79.163709][ T5593] syzkaller0: entered promiscuous mode [ 79.318965][ T5593] syzkaller0: entered allmulticast mode [ 79.347753][ T5598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.819'. [ 79.371224][ T29] audit: type=1400 audit(1724964461.604:2864): avc: denied { unmount } for pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.420390][ T5599] netlink: 52 bytes leftover after parsing attributes in process `syz.1.819'. [ 79.460147][ T5604] FAULT_INJECTION: forcing a failure. [ 79.460147][ T5604] name failslab, interval 1, probability 0, space 0, times 0 [ 79.472982][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz.1.822 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 79.483855][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 79.493927][ T5604] Call Trace: [ 79.497221][ T5604] [ 79.500156][ T5604] dump_stack_lvl+0xf2/0x150 [ 79.504855][ T5604] dump_stack+0x15/0x20 [ 79.509018][ T5604] should_fail_ex+0x229/0x230 [ 79.513734][ T5604] ? security_file_alloc+0x32/0xe0 [ 79.518853][ T5604] should_failslab+0x8f/0xb0 [ 79.523462][ T5604] kmem_cache_alloc_noprof+0x4c/0x290 [ 79.528880][ T5604] security_file_alloc+0x32/0xe0 [ 79.533840][ T5604] alloc_empty_file+0x121/0x310 [ 79.538809][ T5604] path_openat+0x6a/0x1f10 [ 79.543242][ T5604] ? _parse_integer_limit+0x167/0x180 [ 79.548687][ T5604] ? _parse_integer+0x27/0x30 [ 79.553385][ T5604] ? kstrtoull+0x110/0x140 [ 79.557890][ T5604] ? kstrtouint+0x77/0xc0 [ 79.562240][ T5604] do_filp_open+0xf7/0x200 [ 79.566700][ T5604] do_sys_openat2+0xab/0x120 [ 79.571300][ T5604] __x64_sys_openat+0xf3/0x120 [ 79.576138][ T5604] x64_sys_call+0x1025/0x2d60 [ 79.580979][ T5604] do_syscall_64+0xc9/0x1c0 [ 79.585596][ T5604] ? clear_bhb_loop+0x55/0xb0 [ 79.590307][ T5604] ? clear_bhb_loop+0x55/0xb0 [ 79.594993][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.601001][ T5604] RIP: 0033:0x7fb507229ef9 [ 79.605471][ T5604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.625099][ T5604] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.633760][ T5604] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 79.641737][ T5604] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 79.649718][ T5604] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.657761][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.665743][ T5604] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 79.673811][ T5604] [ 79.677404][ T29] audit: type=1326 audit(1724964461.694:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.701215][ T29] audit: type=1326 audit(1724964461.694:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.725047][ T29] audit: type=1326 audit(1724964461.694:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.748454][ T29] audit: type=1326 audit(1724964461.694:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.771874][ T29] audit: type=1326 audit(1724964461.694:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.795296][ T29] audit: type=1326 audit(1724964461.694:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.818734][ T29] audit: type=1326 audit(1724964461.694:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba8ae9ef9 code=0x7ffc0000 [ 79.872714][ T5606] syzkaller0: entered promiscuous mode [ 79.878244][ T5606] syzkaller0: entered allmulticast mode [ 79.939739][ T3356] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.999929][ T3356] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.061157][ T3356] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.151832][ T3356] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.182850][ T5611] chnl_net:caif_netlink_parms(): no params data found [ 80.239845][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.247240][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.256390][ T5611] bridge_slave_0: entered allmulticast mode [ 80.264074][ T5611] bridge_slave_0: entered promiscuous mode [ 80.280586][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.287826][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.304894][ T5611] bridge_slave_1: entered allmulticast mode [ 80.314130][ T5611] bridge_slave_1: entered promiscuous mode [ 80.342404][ T3356] bridge_slave_1: left allmulticast mode [ 80.348124][ T3356] bridge_slave_1: left promiscuous mode [ 80.353869][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.361925][ T3356] bridge_slave_0: left allmulticast mode [ 80.367854][ T3356] bridge_slave_0: left promiscuous mode [ 80.374076][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.493004][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.503789][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.514190][ T3356] bond0 (unregistering): Released all slaves [ 80.523045][ T3356] bond1 (unregistering): Released all slaves [ 80.540279][ T5421] Process accounting resumed [ 80.555885][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.574842][ T5660] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 80.601698][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.637534][ T3356] IPVS: stopping master sync thread 3685 ... [ 80.658848][ T3356] hsr_slave_0: left promiscuous mode [ 80.683427][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.690941][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.706279][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.713782][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.724887][ T3356] veth1_macvtap: left promiscuous mode [ 80.730550][ T3356] veth0_macvtap: left promiscuous mode [ 80.736221][ T3356] veth1_vlan: left promiscuous mode [ 80.741641][ T3356] veth0_vlan: left promiscuous mode [ 80.844160][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 80.855054][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 80.897790][ T5611] team0: Port device team_slave_0 added [ 80.904602][ T5611] team0: Port device team_slave_1 added [ 80.919265][ T5686] netlink: 'syz.3.844': attribute type 4 has an invalid length. [ 80.960349][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.967386][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.993336][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.014874][ T5607] Process accounting resumed [ 81.036933][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.043944][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.070182][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.120713][ T5611] hsr_slave_0: entered promiscuous mode [ 81.127618][ T5611] hsr_slave_1: entered promiscuous mode [ 81.133647][ T5611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.141349][ T5611] Cannot create hsr debugfs directory [ 81.226098][ T5717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.852'. [ 81.236088][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 81.256473][ T5719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.281798][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 81.375798][ T5719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.415694][ T3356] IPVS: stop unused estimator thread 0... [ 81.446134][ T5719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.517385][ T5719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.625221][ T5750] netlink: 'syz.3.855': attribute type 4 has an invalid length. [ 81.655065][ T5719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.668252][ T5719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.682671][ T5719] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.704748][ T5719] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.761365][ T5763] syzkaller0: entered promiscuous mode [ 81.767025][ T5763] syzkaller0: entered allmulticast mode [ 81.829622][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.840212][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.850623][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.871049][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.944388][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.961344][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.978651][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.985878][ T1584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.004570][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.011736][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.040798][ T5611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.051250][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.085480][ T5804] FAULT_INJECTION: forcing a failure. [ 82.085480][ T5804] name failslab, interval 1, probability 0, space 0, times 0 [ 82.098225][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz.3.863 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 82.108875][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.118963][ T5804] Call Trace: [ 82.122272][ T5804] [ 82.125214][ T5804] dump_stack_lvl+0xf2/0x150 [ 82.129877][ T5804] dump_stack+0x15/0x20 [ 82.134102][ T5804] should_fail_ex+0x229/0x230 [ 82.138815][ T5804] ? getname_flags+0x81/0x3b0 [ 82.143583][ T5804] should_failslab+0x8f/0xb0 [ 82.148328][ T5804] kmem_cache_alloc_noprof+0x4c/0x290 [ 82.153790][ T5804] getname_flags+0x81/0x3b0 [ 82.158366][ T5804] user_path_at+0x26/0x110 [ 82.162877][ T5804] do_sys_truncate+0x5b/0x130 [ 82.167603][ T5804] __x64_sys_truncate+0x31/0x40 [ 82.172482][ T5804] x64_sys_call+0x262f/0x2d60 [ 82.177194][ T5804] do_syscall_64+0xc9/0x1c0 [ 82.181717][ T5804] ? clear_bhb_loop+0x55/0xb0 [ 82.186420][ T5804] ? clear_bhb_loop+0x55/0xb0 [ 82.191116][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.197158][ T5804] RIP: 0033:0x7efce7939ef9 [ 82.201596][ T5804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.221236][ T5804] RSP: 002b:00007efce6596038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 82.229727][ T5804] RAX: ffffffffffffffda RBX: 00007efce7ad6058 RCX: 00007efce7939ef9 [ 82.237724][ T5804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 82.245789][ T5804] RBP: 00007efce6596090 R08: 0000000000000000 R09: 0000000000000000 [ 82.253924][ T5804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.261921][ T5804] R13: 0000000000000000 R14: 00007efce7ad6058 R15: 00007fff71da0698 [ 82.269920][ T5804] [ 82.334552][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.491799][ T5611] veth0_vlan: entered promiscuous mode [ 82.507533][ T5611] veth1_vlan: entered promiscuous mode [ 82.542540][ T5611] veth0_macvtap: entered promiscuous mode [ 82.560189][ T5611] veth1_macvtap: entered promiscuous mode [ 82.580781][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.591434][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.601325][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.612075][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.622125][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.632721][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.644651][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.656035][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.666556][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.676481][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.687118][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.696990][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.707583][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.717446][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.727906][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.738910][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.752812][ T5611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.761686][ T5611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.770572][ T5611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779484][ T5611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838581][ T5871] FAULT_INJECTION: forcing a failure. [ 82.838581][ T5871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.851792][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.2.834 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 82.862411][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.872478][ T5871] Call Trace: [ 82.875763][ T5871] [ 82.878742][ T5871] dump_stack_lvl+0xf2/0x150 [ 82.883496][ T5871] dump_stack+0x15/0x20 [ 82.887669][ T5871] should_fail_ex+0x229/0x230 [ 82.892415][ T5871] should_fail+0xb/0x10 [ 82.896582][ T5871] should_fail_usercopy+0x1a/0x20 [ 82.901621][ T5871] _copy_from_user+0x1e/0xd0 [ 82.906224][ T5871] sctp_setsockopt+0xbe/0xea0 [ 82.910920][ T5871] sock_common_setsockopt+0x64/0x80 [ 82.916232][ T5871] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.922148][ T5871] __sys_setsockopt+0x1d8/0x250 [ 82.927095][ T5871] __x64_sys_setsockopt+0x66/0x80 [ 82.932232][ T5871] x64_sys_call+0x278d/0x2d60 [ 82.936923][ T5871] do_syscall_64+0xc9/0x1c0 [ 82.941452][ T5871] ? clear_bhb_loop+0x55/0xb0 [ 82.946132][ T5871] ? clear_bhb_loop+0x55/0xb0 [ 82.950825][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.956762][ T5871] RIP: 0033:0x7fe0a5c69ef9 [ 82.961211][ T5871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.980828][ T5871] RSP: 002b:00007fe0a48e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.989317][ T5871] RAX: ffffffffffffffda RBX: 00007fe0a5e05f80 RCX: 00007fe0a5c69ef9 [ 82.997323][ T5871] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000004 [ 83.005362][ T5871] RBP: 00007fe0a48e7090 R08: 0000000000000014 R09: 0000000000000000 [ 83.013367][ T5871] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 83.021342][ T5871] R13: 0000000000000000 R14: 00007fe0a5e05f80 R15: 00007ffc349cead8 [ 83.029349][ T5871] [ 83.059742][ T5878] FAULT_INJECTION: forcing a failure. [ 83.059742][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.072925][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.2.867 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 83.083933][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.094010][ T5878] Call Trace: [ 83.097312][ T5878] [ 83.100246][ T5878] dump_stack_lvl+0xf2/0x150 [ 83.104852][ T5878] dump_stack+0x15/0x20 [ 83.109031][ T5878] should_fail_ex+0x229/0x230 [ 83.113761][ T5878] should_fail+0xb/0x10 [ 83.117925][ T5878] should_fail_usercopy+0x1a/0x20 [ 83.123149][ T5878] strncpy_from_user+0x25/0x270 [ 83.128079][ T5878] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 83.133726][ T5878] getname_flags+0xb0/0x3b0 [ 83.138402][ T5878] __x64_sys_rename+0x40/0x70 [ 83.143113][ T5878] x64_sys_call+0x1a84/0x2d60 [ 83.147933][ T5878] do_syscall_64+0xc9/0x1c0 [ 83.152449][ T5878] ? clear_bhb_loop+0x55/0xb0 [ 83.157134][ T5878] ? clear_bhb_loop+0x55/0xb0 [ 83.161871][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.167804][ T5878] RIP: 0033:0x7fe0a5c69ef9 [ 83.172223][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.191928][ T5878] RSP: 002b:00007fe0a48e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 83.200351][ T5878] RAX: ffffffffffffffda RBX: 00007fe0a5e05f80 RCX: 00007fe0a5c69ef9 [ 83.208424][ T5878] RDX: 0000000000000000 RSI: 0000000020000800 RDI: 00000000200001c0 [ 83.216458][ T5878] RBP: 00007fe0a48e7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.224435][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.232529][ T5878] R13: 0000000000000000 R14: 00007fe0a5e05f80 R15: 00007ffc349cead8 [ 83.240641][ T5878] [ 83.292850][ T5883] loop2: detected capacity change from 0 to 1024 [ 83.308385][ T5883] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 83.735818][ T5898] loop2: detected capacity change from 0 to 764 [ 83.754938][ T5901] netlink: 'syz.1.870': attribute type 4 has an invalid length. [ 83.835497][ T5907] loop2: detected capacity change from 0 to 2048 [ 83.853786][ T5907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.936109][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.964863][ T5918] loop2: detected capacity change from 0 to 128 [ 84.165505][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 84.165532][ T29] audit: type=1326 audit(1724964466.394:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.196023][ T29] audit: type=1326 audit(1724964466.394:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.219524][ T29] audit: type=1326 audit(1724964466.394:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.242898][ T29] audit: type=1326 audit(1724964466.394:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.266362][ T29] audit: type=1326 audit(1724964466.394:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.289681][ T29] audit: type=1326 audit(1724964466.394:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.313135][ T29] audit: type=1326 audit(1724964466.394:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.336467][ T29] audit: type=1326 audit(1724964466.394:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.359921][ T29] audit: type=1326 audit(1724964466.394:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a5c69ef9 code=0x7ffc0000 [ 84.383363][ T29] audit: type=1326 audit(1724964466.394:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0a5c68890 code=0x7ffc0000 [ 84.574791][ T5951] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 84.581333][ T5951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.588908][ T5951] vhci_hcd vhci_hcd.0: Device attached [ 84.600260][ T5952] vhci_hcd: connection closed [ 84.600660][ T50] vhci_hcd: stop threads [ 84.609860][ T50] vhci_hcd: release socket [ 84.614382][ T50] vhci_hcd: disconnect device [ 84.809687][ T5962] syzkaller0: entered promiscuous mode [ 84.815230][ T5962] syzkaller0: entered allmulticast mode [ 84.822010][ T5964] veth0_vlan: entered allmulticast mode [ 84.871444][ T5964] veth0_vlan: left promiscuous mode [ 84.903951][ T5964] veth0_vlan: entered promiscuous mode [ 84.992899][ T5974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.899'. [ 85.007486][ T3339] IPVS: starting estimator thread 0... [ 85.096848][ T5977] IPVS: using max 2352 ests per chain, 117600 per kthread [ 85.143818][ T5985] FAULT_INJECTION: forcing a failure. [ 85.143818][ T5985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.156961][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: syz.4.903 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 85.167595][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.177721][ T5985] Call Trace: [ 85.181014][ T5985] [ 85.184002][ T5985] dump_stack_lvl+0xf2/0x150 [ 85.188623][ T5985] dump_stack+0x15/0x20 [ 85.192916][ T5985] should_fail_ex+0x229/0x230 [ 85.197673][ T5985] should_fail+0xb/0x10 [ 85.201850][ T5985] should_fail_usercopy+0x1a/0x20 [ 85.206891][ T5985] strncpy_from_user+0x25/0x270 [ 85.211824][ T5985] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 85.217474][ T5985] getname_flags+0xb0/0x3b0 [ 85.222072][ T5985] getname+0x17/0x20 [ 85.225986][ T5985] do_mq_open+0xd4/0x4b0 [ 85.230318][ T5985] __x64_sys_mq_open+0xcc/0x100 [ 85.235208][ T5985] x64_sys_call+0x29d1/0x2d60 [ 85.239899][ T5985] do_syscall_64+0xc9/0x1c0 [ 85.244546][ T5985] ? clear_bhb_loop+0x55/0xb0 [ 85.249252][ T5985] ? clear_bhb_loop+0x55/0xb0 [ 85.254008][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.259920][ T5985] RIP: 0033:0x7fcba8ae9ef9 [ 85.264416][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.284115][ T5985] RSP: 002b:00007fcba7767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 85.292535][ T5985] RAX: ffffffffffffffda RBX: 00007fcba8c85f80 RCX: 00007fcba8ae9ef9 [ 85.300539][ T5985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.308526][ T5985] RBP: 00007fcba7767090 R08: 0000000000000000 R09: 0000000000000000 [ 85.316540][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.324586][ T5985] R13: 0000000000000000 R14: 00007fcba8c85f80 R15: 00007ffd4b0c7ce8 [ 85.332603][ T5985] [ 85.370210][ T5984] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 85.443577][ T6002] syzkaller0: entered promiscuous mode [ 85.449271][ T6002] syzkaller0: entered allmulticast mode [ 85.474775][ T6008] FAULT_INJECTION: forcing a failure. [ 85.474775][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.479274][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.913'. [ 85.488188][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.2.911 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 85.507707][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.517845][ T6008] Call Trace: [ 85.521145][ T6008] [ 85.524105][ T6008] dump_stack_lvl+0xf2/0x150 [ 85.528805][ T6008] dump_stack+0x15/0x20 [ 85.533012][ T6008] should_fail_ex+0x229/0x230 [ 85.537708][ T6008] should_fail+0xb/0x10 [ 85.541899][ T6008] should_fail_usercopy+0x1a/0x20 [ 85.546977][ T6008] _copy_from_user+0x1e/0xd0 [ 85.551636][ T6008] move_addr_to_kernel+0x82/0x120 [ 85.556758][ T6008] copy_msghdr_from_user+0x271/0x2a0 [ 85.562233][ T6008] __sys_sendmsg+0x17d/0x280 [ 85.566913][ T6008] __x64_sys_sendmsg+0x46/0x50 [ 85.571800][ T6008] x64_sys_call+0x2689/0x2d60 [ 85.576596][ T6008] do_syscall_64+0xc9/0x1c0 [ 85.581174][ T6008] ? clear_bhb_loop+0x55/0xb0 [ 85.585857][ T6008] ? clear_bhb_loop+0x55/0xb0 [ 85.590549][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.596544][ T6008] RIP: 0033:0x7fe0a5c69ef9 [ 85.600983][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.620669][ T6008] RSP: 002b:00007fe0a48e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.629174][ T6008] RAX: ffffffffffffffda RBX: 00007fe0a5e05f80 RCX: 00007fe0a5c69ef9 [ 85.637229][ T6008] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 85.645202][ T6008] RBP: 00007fe0a48e7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.653271][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.661344][ T6008] R13: 0000000000000000 R14: 00007fe0a5e05f80 R15: 00007ffc349cead8 [ 85.669437][ T6008] [ 85.978379][ T6039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.924'. [ 86.020489][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 86.029428][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.926'. [ 86.062973][ T6042] netlink: 'syz.2.921': attribute type 5 has an invalid length. [ 86.105000][ T6047] FAULT_INJECTION: forcing a failure. [ 86.105000][ T6047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.118174][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.4.927 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 86.128790][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.138872][ T6047] Call Trace: [ 86.142187][ T6047] [ 86.145168][ T6047] dump_stack_lvl+0xf2/0x150 [ 86.149764][ T6047] dump_stack+0x15/0x20 [ 86.153919][ T6047] should_fail_ex+0x229/0x230 [ 86.158602][ T6047] should_fail+0xb/0x10 [ 86.162860][ T6047] should_fail_usercopy+0x1a/0x20 [ 86.167897][ T6047] strncpy_from_user+0x25/0x270 [ 86.172765][ T6047] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 86.178432][ T6047] getname_flags+0xb0/0x3b0 [ 86.183013][ T6047] getname+0x17/0x20 [ 86.186932][ T6047] do_mq_open+0xd4/0x4b0 [ 86.191205][ T6047] __x64_sys_mq_open+0xcc/0x100 [ 86.196157][ T6047] x64_sys_call+0x29d1/0x2d60 [ 86.200842][ T6047] do_syscall_64+0xc9/0x1c0 [ 86.205350][ T6047] ? clear_bhb_loop+0x55/0xb0 [ 86.210189][ T6047] ? clear_bhb_loop+0x55/0xb0 [ 86.214870][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.220918][ T6047] RIP: 0033:0x7fcba8ae9ef9 [ 86.225493][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.245218][ T6047] RSP: 002b:00007fcba7767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 86.253642][ T6047] RAX: ffffffffffffffda RBX: 00007fcba8c85f80 RCX: 00007fcba8ae9ef9 [ 86.261717][ T6047] RDX: 0000000000000019 RSI: 0000000000000841 RDI: 0000000020001400 [ 86.269792][ T6047] RBP: 00007fcba7767090 R08: 0000000000000000 R09: 0000000000000000 [ 86.277794][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.285768][ T6047] R13: 0000000000000000 R14: 00007fcba8c85f80 R15: 00007ffd4b0c7ce8 [ 86.293759][ T6047] [ 86.463210][ T6063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.470533][ T6063] IPv6: NLM_F_CREATE should be set when creating new route [ 86.659700][ T6094] FAULT_INJECTION: forcing a failure. [ 86.659700][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.672953][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.0.946 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 86.683561][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.693692][ T6094] Call Trace: [ 86.696978][ T6094] [ 86.699916][ T6094] dump_stack_lvl+0xf2/0x150 [ 86.704534][ T6094] dump_stack+0x15/0x20 [ 86.708769][ T6094] should_fail_ex+0x229/0x230 [ 86.713517][ T6094] should_fail+0xb/0x10 [ 86.717915][ T6094] should_fail_usercopy+0x1a/0x20 [ 86.723022][ T6094] strncpy_from_user+0x25/0x270 [ 86.727905][ T6094] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 86.733574][ T6094] getname_flags+0xb0/0x3b0 [ 86.738130][ T6094] __x64_sys_mknod+0x40/0x60 [ 86.742740][ T6094] x64_sys_call+0x2657/0x2d60 [ 86.747575][ T6094] do_syscall_64+0xc9/0x1c0 [ 86.752180][ T6094] ? clear_bhb_loop+0x55/0xb0 [ 86.756989][ T6094] ? clear_bhb_loop+0x55/0xb0 [ 86.761678][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.767591][ T6094] RIP: 0033:0x7f8300499ef9 [ 86.772033][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.791692][ T6094] RSP: 002b:00007f82ff117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 86.800116][ T6094] RAX: ffffffffffffffda RBX: 00007f8300635f80 RCX: 00007f8300499ef9 [ 86.808185][ T6094] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000000020000000 [ 86.816272][ T6094] RBP: 00007f82ff117090 R08: 0000000000000000 R09: 0000000000000000 [ 86.824259][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.832393][ T6094] R13: 0000000000000000 R14: 00007f8300635f80 R15: 00007ffd73bb1178 [ 86.840375][ T6094] [ 86.843762][ T6092] netlink: 'syz.2.941': attribute type 5 has an invalid length. [ 86.861849][ T6096] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 86.926496][ T6099] netlink: 76 bytes leftover after parsing attributes in process `syz.0.947'. [ 87.083930][ T6104] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 87.348586][ T6106] FAULT_INJECTION: forcing a failure. [ 87.348586][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 87.361265][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.3.951 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 87.371876][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.381963][ T6106] Call Trace: [ 87.385244][ T6106] [ 87.388259][ T6106] dump_stack_lvl+0xf2/0x150 [ 87.392864][ T6106] dump_stack+0x15/0x20 [ 87.397026][ T6106] should_fail_ex+0x229/0x230 [ 87.401741][ T6106] ? __alloc_skb+0x10b/0x310 [ 87.406406][ T6106] should_failslab+0x8f/0xb0 [ 87.411171][ T6106] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 87.417151][ T6106] __alloc_skb+0x10b/0x310 [ 87.421600][ T6106] audit_log_start+0x368/0x6b0 [ 87.426383][ T6106] audit_seccomp+0x4b/0x130 [ 87.430898][ T6106] __seccomp_filter+0x6fa/0x1180 [ 87.435921][ T6106] ? proc_fail_nth_write+0x130/0x160 [ 87.441212][ T6106] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.446912][ T6106] ? vfs_write+0x5a5/0x900 [ 87.451390][ T6106] ? __fget_files+0x1da/0x210 [ 87.456144][ T6106] __secure_computing+0x9f/0x1c0 [ 87.461159][ T6106] syscall_trace_enter+0xd1/0x1f0 [ 87.466236][ T6106] ? fpregs_assert_state_consistent+0x83/0xa0 [ 87.472333][ T6106] do_syscall_64+0xaa/0x1c0 [ 87.477030][ T6106] ? clear_bhb_loop+0x55/0xb0 [ 87.481762][ T6106] ? clear_bhb_loop+0x55/0xb0 [ 87.486533][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.492459][ T6106] RIP: 0033:0x7efce7939ef9 [ 87.496964][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.516659][ T6106] RSP: 002b:00007efce65b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.525113][ T6106] RAX: ffffffffffffffda RBX: 00007efce7ad5f80 RCX: 00007efce7939ef9 [ 87.533182][ T6106] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 0000000000000000 [ 87.541247][ T6106] RBP: 00007efce65b7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.549229][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.557205][ T6106] R13: 0000000000000000 R14: 00007efce7ad5f80 R15: 00007fff71da0698 [ 87.565194][ T6106] [ 87.622340][ T6113] FAULT_INJECTION: forcing a failure. [ 87.622340][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.635536][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.4.954 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 87.646152][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.646241][ T6113] Call Trace: [ 87.646249][ T6113] [ 87.646258][ T6113] dump_stack_lvl+0xf2/0x150 [ 87.646298][ T6113] dump_stack+0x15/0x20 [ 87.646338][ T6113] should_fail_ex+0x229/0x230 [ 87.646371][ T6113] should_fail+0xb/0x10 [ 87.646399][ T6113] should_fail_usercopy+0x1a/0x20 [ 87.646434][ T6113] strncpy_from_user+0x25/0x270 [ 87.646512][ T6113] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 87.646545][ T6113] getname_flags+0xb0/0x3b0 [ 87.646580][ T6113] getname+0x17/0x20 [ 87.646673][ T6113] do_sys_openat2+0x67/0x120 [ 87.646696][ T6113] __x64_sys_openat+0xf3/0x120 [ 87.646722][ T6113] x64_sys_call+0x1025/0x2d60 [ 87.646887][ T6113] do_syscall_64+0xc9/0x1c0 [ 87.646913][ T6113] ? clear_bhb_loop+0x55/0xb0 [ 87.646937][ T6113] ? clear_bhb_loop+0x55/0xb0 [ 87.646959][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.647060][ T6113] RIP: 0033:0x7fcba8ae8890 [ 87.647079][ T6113] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 87.647103][ T6113] RSP: 002b:00007fcba7766f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 87.647192][ T6113] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcba8ae8890 [ 87.647208][ T6113] RDX: 0000000000000000 RSI: 00007fcba8b57a56 RDI: 00000000ffffff9c [ 87.647223][ T6113] RBP: 00007fcba8b57a56 R08: 0000000000000000 R09: 0000000000000000 [ 87.647235][ T6113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 87.647250][ T6113] R13: 0000000000000000 R14: 00007fcba8c85f80 R15: 00007ffd4b0c7ce8 [ 87.647299][ T6113] [ 87.733631][ T6099] syz.0.947 (6099) used greatest stack depth: 9584 bytes left [ 88.023632][ T6125] syz_tun: entered promiscuous mode [ 88.029586][ T6125] macvtap1: entered promiscuous mode [ 88.035084][ T6125] macvtap1: entered allmulticast mode [ 88.040523][ T6125] syz_tun: entered allmulticast mode [ 88.064169][ T6125] syz_tun: left allmulticast mode [ 88.069416][ T6125] syz_tun: left promiscuous mode [ 88.412728][ T6160] netlink: 'syz.0.967': attribute type 4 has an invalid length. [ 88.553815][ T6162] syzkaller0: entered promiscuous mode [ 88.559370][ T6162] syzkaller0: entered allmulticast mode [ 89.193616][ T6194] syzkaller0: entered promiscuous mode [ 89.199310][ T6194] syzkaller0: entered allmulticast mode [ 89.251636][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.979'. [ 89.262116][ T6186] netlink: 'syz.1.979': attribute type 5 has an invalid length. [ 89.328240][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 89.328263][ T29] audit: type=1326 audit(1724964471.564:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300499ef9 code=0x7ffc0000 [ 89.392140][ T29] audit: type=1326 audit(1724964471.564:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.415688][ T29] audit: type=1326 audit(1724964471.564:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.439176][ T29] audit: type=1326 audit(1724964471.564:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.462597][ T29] audit: type=1326 audit(1724964471.564:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.485973][ T29] audit: type=1326 audit(1724964471.564:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.509424][ T29] audit: type=1326 audit(1724964471.564:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.532733][ T29] audit: type=1326 audit(1724964471.564:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.556125][ T29] audit: type=1326 audit(1724964471.564:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 89.579609][ T29] audit: type=1326 audit(1724964471.564:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb507229ef9 code=0x7ffc0000 [ 90.518012][ T6228] FAULT_INJECTION: forcing a failure. [ 90.518012][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 90.531119][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.1.993 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 90.541831][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 90.551895][ T6228] Call Trace: [ 90.555198][ T6228] [ 90.558137][ T6228] dump_stack_lvl+0xf2/0x150 [ 90.562736][ T6228] dump_stack+0x15/0x20 [ 90.566915][ T6228] should_fail_ex+0x229/0x230 [ 90.571666][ T6228] ? __alloc_skb+0x10b/0x310 [ 90.576422][ T6228] should_failslab+0x8f/0xb0 [ 90.581157][ T6228] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 90.587067][ T6228] __alloc_skb+0x10b/0x310 [ 90.591513][ T6228] audit_log_start+0x368/0x6b0 [ 90.596296][ T6228] audit_seccomp+0x4b/0x130 [ 90.600897][ T6228] __seccomp_filter+0x6fa/0x1180 [ 90.605913][ T6228] ? proc_fail_nth_write+0x130/0x160 [ 90.611373][ T6228] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 90.617233][ T6228] ? vfs_write+0x5a5/0x900 [ 90.621660][ T6228] ? __fget_files+0x1da/0x210 [ 90.626374][ T6228] __secure_computing+0x9f/0x1c0 [ 90.631384][ T6228] syscall_trace_enter+0xd1/0x1f0 [ 90.636608][ T6228] ? fpregs_assert_state_consistent+0x83/0xa0 [ 90.642785][ T6228] do_syscall_64+0xaa/0x1c0 [ 90.647365][ T6228] ? clear_bhb_loop+0x55/0xb0 [ 90.647392][ T6228] ? clear_bhb_loop+0x55/0xb0 [ 90.647411][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.647481][ T6228] RIP: 0033:0x7fb507229ef9 [ 90.647497][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.647534][ T6228] RSP: 002b:00007fb505ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 90.647557][ T6228] RAX: ffffffffffffffda RBX: 00007fb5073c5f80 RCX: 00007fb507229ef9 [ 90.647573][ T6228] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 90.647588][ T6228] RBP: 00007fb505ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.647603][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.647619][ T6228] R13: 0000000000000000 R14: 00007fb5073c5f80 R15: 00007ffefa663288 [ 90.647643][ T6228] [ 91.448018][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811563f400: rx timeout, send abort [ 91.626280][ T6249] FAULT_INJECTION: forcing a failure. [ 91.626280][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 91.639177][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.0.1001 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 91.650045][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.660135][ T6249] Call Trace: [ 91.663441][ T6249] [ 91.666388][ T6249] dump_stack_lvl+0xf2/0x150 [ 91.671100][ T6249] dump_stack+0x15/0x20 [ 91.675289][ T6249] should_fail_ex+0x229/0x230 [ 91.680077][ T6249] ? __kvmalloc_node_noprof+0x72/0x170 [ 91.685570][ T6249] should_failslab+0x8f/0xb0 [ 91.690379][ T6249] __kmalloc_node_noprof+0xa8/0x380 [ 91.695625][ T6249] __kvmalloc_node_noprof+0x72/0x170 [ 91.701048][ T6249] bpf_test_run_xdp_live+0xe3/0x1000 [ 91.706385][ T6249] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.712529][ T6249] ? 0xffffffffa0003b40 [ 91.716774][ T6249] ? synchronize_rcu+0x46/0x320 [ 91.721675][ T6249] ? 0xffffffffa0003b40 [ 91.725857][ T6249] ? bpf_dispatcher_change_prog+0x73c/0x830 [ 91.731793][ T6249] ? 0xffffffffa0003b40 [ 91.735980][ T6249] ? 0xffffffffa0001fd8 [ 91.740172][ T6249] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.746123][ T6249] bpf_prog_test_run_xdp+0x51d/0x890 [ 91.751454][ T6249] ? __fget_files+0x1da/0x210 [ 91.756159][ T6249] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.762050][ T6249] bpf_prog_test_run+0x26d/0x3e0 [ 91.767072][ T6249] __sys_bpf+0x400/0x7a0 [ 91.771373][ T6249] __x64_sys_bpf+0x43/0x50 [ 91.775881][ T6249] x64_sys_call+0x2625/0x2d60 [ 91.780568][ T6249] do_syscall_64+0xc9/0x1c0 [ 91.785085][ T6249] ? clear_bhb_loop+0x55/0xb0 [ 91.789791][ T6249] ? clear_bhb_loop+0x55/0xb0 [ 91.794566][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.800472][ T6249] RIP: 0033:0x7f8300499ef9 [ 91.804913][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.824781][ T6249] RSP: 002b:00007f82ff117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.833205][ T6249] RAX: ffffffffffffffda RBX: 00007f8300635f80 RCX: 00007f8300499ef9 [ 91.841184][ T6249] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 91.849230][ T6249] RBP: 00007f82ff117090 R08: 0000000000000000 R09: 0000000000000000 [ 91.857196][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.865167][ T6249] R13: 0000000000000000 R14: 00007f8300635f80 R15: 00007ffd73bb1178 [ 91.873202][ T6249] [ 91.917595][ T6262] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 91.925478][ T6262] netlink: 'syz.3.1005': attribute type 2 has an invalid length. [ 91.956274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811563f400: abort rx timeout. Force session deactivation [ 92.550658][ T6286] netlink: 'syz.1.1012': attribute type 4 has an invalid length. [ 92.693897][ T11] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.746027][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881040cd800: rx timeout, send abort [ 92.756116][ T11] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.808772][ T11] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.889785][ T11] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.006753][ T6292] chnl_net:caif_netlink_parms(): no params data found [ 93.020478][ T11] bridge_slave_1: left allmulticast mode [ 93.026196][ T11] bridge_slave_1: left promiscuous mode [ 93.031906][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.042469][ T6326] rdma_op ffff888116765d80 conn xmit_rdma 0000000000000000 [ 93.051009][ T11] bridge_slave_0: left allmulticast mode [ 93.056771][ T11] bridge_slave_0: left promiscuous mode [ 93.062581][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.249447][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.254299][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881040cd800: abort rx timeout. Force session deactivation [ 93.270665][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.284996][ T11] bond0 (unregistering): Released all slaves [ 93.330584][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.337770][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.346618][ T6292] bridge_slave_0: entered allmulticast mode [ 93.353212][ T6292] bridge_slave_0: entered promiscuous mode [ 93.362088][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.369243][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.378336][ T6292] bridge_slave_1: entered allmulticast mode [ 93.378675][ T11] IPVS: stopping master sync thread 3527 ... [ 93.384996][ T6292] bridge_slave_1: entered promiscuous mode [ 93.400664][ T11] hsr_slave_0: left promiscuous mode [ 93.406325][ T11] hsr_slave_1: left promiscuous mode [ 93.412111][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.419586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.427640][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.435236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.444957][ T11] veth1_macvtap: left promiscuous mode [ 93.450535][ T11] veth0_macvtap: left promiscuous mode [ 93.456081][ T11] veth1_vlan: left promiscuous mode [ 93.461530][ T11] veth0_vlan: left promiscuous mode [ 93.550669][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881144d7800: rx timeout, send abort [ 93.562868][ T11] team0 (unregistering): Port device team_slave_1 removed [ 93.576778][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.633058][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.645664][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.670861][ T6292] team0: Port device team_slave_0 added [ 93.678086][ T6292] team0: Port device team_slave_1 added [ 93.695281][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.702420][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.728646][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.750145][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.757368][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.783424][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.809895][ T6292] hsr_slave_0: entered promiscuous mode [ 93.816356][ T6292] hsr_slave_1: entered promiscuous mode [ 93.822368][ T6292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.830035][ T6292] Cannot create hsr debugfs directory [ 93.883193][ T2962] ================================================================== [ 93.891295][ T2962] BUG: KCSAN: data-race in set_nlink / set_nlink [ 93.897649][ T2962] [ 93.899971][ T2962] write to 0xffff888106a72eb8 of 4 bytes by task 5516 on cpu 0: [ 93.907618][ T2962] set_nlink+0x98/0xb0 [ 93.911702][ T2962] kernfs_iop_permission+0x1d5/0x220 [ 93.916994][ T2962] inode_permission+0x18c/0x300 [ 93.922310][ T2962] link_path_walk+0x14b/0x820 [ 93.926996][ T2962] path_openat+0x1aa/0x1f10 [ 93.931495][ T2962] do_filp_open+0xf7/0x200 [ 93.935914][ T2962] do_sys_openat2+0xab/0x120 [ 93.940544][ T2962] __x64_sys_openat+0xf3/0x120 [ 93.945310][ T2962] x64_sys_call+0x1025/0x2d60 [ 93.949993][ T2962] do_syscall_64+0xc9/0x1c0 [ 93.954605][ T2962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.960521][ T2962] [ 93.962838][ T2962] read to 0xffff888106a72eb8 of 4 bytes by task 2962 on cpu 1: [ 93.970397][ T2962] set_nlink+0x2b/0xb0 [ 93.974472][ T2962] kernfs_iop_permission+0x1d5/0x220 [ 93.979769][ T2962] inode_permission+0x18c/0x300 [ 93.984637][ T2962] link_path_walk+0x14b/0x820 [ 93.989332][ T2962] path_openat+0x1aa/0x1f10 [ 93.994024][ T2962] do_filp_open+0xf7/0x200 [ 93.998439][ T2962] do_sys_openat2+0xab/0x120 [ 94.003049][ T2962] __x64_sys_openat+0xf3/0x120 [ 94.007821][ T2962] x64_sys_call+0x1025/0x2d60 [ 94.012508][ T2962] do_syscall_64+0xc9/0x1c0 [ 94.017022][ T2962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.022925][ T2962] [ 94.025240][ T2962] value changed: 0x00000004 -> 0x00000003 [ 94.030967][ T2962] [ 94.033286][ T2962] Reported by Kernel Concurrency Sanitizer on: [ 94.039450][ T2962] CPU: 1 UID: 0 PID: 2962 Comm: udevd Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 94.049684][ T2962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 94.059744][ T2962] ================================================================== [ 94.068062][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881144d7800: abort rx timeout. Force session deactivation [ 94.087628][ T6344] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 94.113386][ T11] IPVS: stop unused estimator thread 0... [ 94.337562][ T6292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.346405][ T6292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.356136][ T6292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.365323][ T6292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.415745][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.447732][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.460651][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.467883][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.481264][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.488465][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.578932][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.668221][ T6292] veth0_vlan: entered promiscuous mode [ 94.678784][ T6292] veth1_vlan: entered promiscuous mode [ 94.699417][ T6292] veth0_macvtap: entered promiscuous mode [ 94.708200][ T6292] veth1_macvtap: entered promiscuous mode [ 94.720093][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.730676][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.740609][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.751172][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.761031][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.771660][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.782903][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.794145][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.804811][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.814740][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.825283][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.835147][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.845639][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.855547][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.865985][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.876810][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.887754][ T6292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.896490][ T6292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.905375][ T6292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.914163][ T6292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0