last executing test programs: 1.254619354s ago: executing program 2 (id=196): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 1.214898444s ago: executing program 2 (id=197): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x1, 0x5}, {0xffffffffffffffff, 0x5, 0x5}, 0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2e0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/239, 0xef}, 0x2}], 0xa, 0x10162, 0x0) 1.130920945s ago: executing program 2 (id=200): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 1.027415025s ago: executing program 2 (id=201): unshare(0x22020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0) 664.494917ms ago: executing program 0 (id=213): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r1, 0x14) 580.962097ms ago: executing program 0 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) 552.152007ms ago: executing program 3 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fd"], 0x48) 508.957598ms ago: executing program 3 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 485.525768ms ago: executing program 1 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xae5a}, [@generic={0xe, 0x4, 0x3, 0x3, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x2c, 0x14, &(0x7f0000000600)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 467.150817ms ago: executing program 1 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x2, 0x9, 0x65, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 457.846078ms ago: executing program 0 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 389.371648ms ago: executing program 0 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x12) 352.932198ms ago: executing program 4 (id=228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a801800058014000580080002000000000008"], 0x3c}}, 0x0) 342.952738ms ago: executing program 1 (id=229): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}}, 0x0) 313.602598ms ago: executing program 0 (id=230): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a310000000009000100"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 259.308959ms ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xdbe7}, {0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 249.634909ms ago: executing program 0 (id=232): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 211.655649ms ago: executing program 4 (id=233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000045b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000240)='locks_get_lock_context\x00', r1}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r3, 0x5) close_range(r2, 0xffffffffffffffff, 0x0) 200.779009ms ago: executing program 3 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 166.717919ms ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 166.338279ms ago: executing program 4 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x80, 0x1a, 0x87e, 0xffff, 0x0, 0x4, 0x0}) 142.124209ms ago: executing program 1 (id=237): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x1000000, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f00000008c0)="832a", 0x2) 95.564219ms ago: executing program 2 (id=238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 93.831819ms ago: executing program 3 (id=239): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 83.9373ms ago: executing program 4 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 75.53639ms ago: executing program 1 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 44.91131ms ago: executing program 1 (id=242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xf, r0, 0x0}]) 40.88778ms ago: executing program 3 (id=243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0x2}}) 39.17231ms ago: executing program 4 (id=244): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 3 (id=245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d94c, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 21.767447][ T29] audit: type=1400 audit(1731849402.667:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 27.579855][ T29] audit: type=1400 audit(1731849408.477:82): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.581127][ T3303] cgroup: Unknown subsys name 'net' [ 27.602676][ T29] audit: type=1400 audit(1731849408.477:83): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.630187][ T29] audit: type=1400 audit(1731849408.507:84): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.757699][ T3303] cgroup: Unknown subsys name 'cpuset' [ 27.763962][ T3303] cgroup: Unknown subsys name 'rlimit' [ 27.852643][ T29] audit: type=1400 audit(1731849408.747:85): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.876437][ T29] audit: type=1400 audit(1731849408.747:86): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.896968][ T29] audit: type=1400 audit(1731849408.747:87): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.906365][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.917357][ T29] audit: type=1400 audit(1731849408.747:88): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.946793][ T29] audit: type=1400 audit(1731849408.767:89): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.971696][ T29] audit: type=1400 audit(1731849408.767:90): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.995820][ T29] audit: type=1400 audit(1731849408.827:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.032534][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.685726][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.776934][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784035][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.791306][ T3315] bridge_slave_0: entered allmulticast mode [ 29.798085][ T3315] bridge_slave_0: entered promiscuous mode [ 29.807465][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.829164][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.836318][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.843929][ T3315] bridge_slave_1: entered allmulticast mode [ 29.850886][ T3315] bridge_slave_1: entered promiscuous mode [ 29.871559][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.886203][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.900446][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.938002][ T3315] team0: Port device team_slave_0 added [ 29.952133][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.959426][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.966763][ T3318] bridge_slave_0: entered allmulticast mode [ 29.973357][ T3318] bridge_slave_0: entered promiscuous mode [ 29.989676][ T3315] team0: Port device team_slave_1 added [ 29.998310][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.005699][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.013036][ T3318] bridge_slave_1: entered allmulticast mode [ 30.019516][ T3318] bridge_slave_1: entered promiscuous mode [ 30.071125][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.081466][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.088566][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.115197][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.126773][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.133765][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.160151][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.179152][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 30.189234][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.209921][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.231676][ T3318] team0: Port device team_slave_0 added [ 30.244508][ T3315] hsr_slave_0: entered promiscuous mode [ 30.250905][ T3315] hsr_slave_1: entered promiscuous mode [ 30.271570][ T3318] team0: Port device team_slave_1 added [ 30.289590][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.296776][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.303985][ T3313] bridge_slave_0: entered allmulticast mode [ 30.310503][ T3313] bridge_slave_0: entered promiscuous mode [ 30.325213][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.332334][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.358416][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.374565][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.381685][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.389093][ T3313] bridge_slave_1: entered allmulticast mode [ 30.395810][ T3313] bridge_slave_1: entered promiscuous mode [ 30.404427][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.411788][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.438258][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.481047][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.507881][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.517443][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.525111][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.532593][ T3323] bridge_slave_0: entered allmulticast mode [ 30.538963][ T3323] bridge_slave_0: entered promiscuous mode [ 30.545494][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.552577][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.559736][ T3323] bridge_slave_1: entered allmulticast mode [ 30.566194][ T3323] bridge_slave_1: entered promiscuous mode [ 30.579385][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.586452][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.593722][ T3322] bridge_slave_0: entered allmulticast mode [ 30.600672][ T3322] bridge_slave_0: entered promiscuous mode [ 30.607420][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.615361][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.622670][ T3322] bridge_slave_1: entered allmulticast mode [ 30.629235][ T3322] bridge_slave_1: entered promiscuous mode [ 30.672474][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.683685][ T3318] hsr_slave_0: entered promiscuous mode [ 30.690069][ T3318] hsr_slave_1: entered promiscuous mode [ 30.696084][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.703910][ T3318] Cannot create hsr debugfs directory [ 30.715094][ T3313] team0: Port device team_slave_0 added [ 30.721729][ T3313] team0: Port device team_slave_1 added [ 30.735251][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.756524][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.788717][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.804812][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.811836][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.838315][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.849478][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.856583][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.882528][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.894003][ T3323] team0: Port device team_slave_0 added [ 30.912627][ T3322] team0: Port device team_slave_0 added [ 30.921309][ T3322] team0: Port device team_slave_1 added [ 30.927692][ T3323] team0: Port device team_slave_1 added [ 30.947577][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.954556][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.980514][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.992041][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.999074][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.025102][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.068478][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.075474][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.102321][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.113874][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.121229][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.147772][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.171941][ T3313] hsr_slave_0: entered promiscuous mode [ 31.178279][ T3313] hsr_slave_1: entered promiscuous mode [ 31.184393][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.192030][ T3313] Cannot create hsr debugfs directory [ 31.203952][ T3323] hsr_slave_0: entered promiscuous mode [ 31.210005][ T3323] hsr_slave_1: entered promiscuous mode [ 31.215958][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.223551][ T3323] Cannot create hsr debugfs directory [ 31.265985][ T3322] hsr_slave_0: entered promiscuous mode [ 31.272696][ T3322] hsr_slave_1: entered promiscuous mode [ 31.278685][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.286274][ T3322] Cannot create hsr debugfs directory [ 31.297071][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.322193][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.340484][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.368255][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.413575][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.436244][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.449301][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.458095][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.502373][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.512757][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.522489][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.533412][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.573984][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.583289][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.609968][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.622057][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.638740][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.656352][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.672442][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.685004][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.693058][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.702532][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.733477][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.745634][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.770767][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.777907][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.786756][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.793859][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.806767][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.814750][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.821998][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.831474][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.838647][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.873571][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.902686][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.909910][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.932566][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.939754][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.958563][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.992759][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.011282][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.018898][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.034586][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.049773][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.080121][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.087233][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.115175][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.131991][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.139096][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.148786][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.155870][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.194882][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.206102][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.228566][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.242995][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.284467][ T3315] veth0_vlan: entered promiscuous mode [ 32.308208][ T3315] veth1_vlan: entered promiscuous mode [ 32.355211][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.374234][ T3315] veth0_macvtap: entered promiscuous mode [ 32.382983][ T3315] veth1_macvtap: entered promiscuous mode [ 32.395622][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.417930][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.432388][ T3318] veth0_vlan: entered promiscuous mode [ 32.440832][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.455316][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.464439][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473382][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482285][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.494759][ T3318] veth1_vlan: entered promiscuous mode [ 32.542035][ T3318] veth0_macvtap: entered promiscuous mode [ 32.553382][ T3318] veth1_macvtap: entered promiscuous mode [ 32.570036][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.582527][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.595762][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.617777][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.641450][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 32.641470][ T29] audit: type=1400 audit(1731849413.527:118): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.671715][ T3323] veth0_vlan: entered promiscuous mode [ 32.671861][ T29] audit: type=1400 audit(1731849413.527:119): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.689006][ T3323] veth1_vlan: entered promiscuous mode [ 32.701305][ T29] audit: type=1400 audit(1731849413.527:120): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.714812][ T3323] veth0_macvtap: entered promiscuous mode [ 32.739693][ T3313] veth0_vlan: entered promiscuous mode [ 32.746160][ T3323] veth1_macvtap: entered promiscuous mode [ 32.752815][ T3323] percpu: allocation failed, size=8 align=8 atomic=1, atomic alloc failed, no space left [ 32.772182][ T29] audit: type=1400 audit(1731849413.637:121): avc: denied { create } for pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.776107][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.793210][ T29] audit: type=1400 audit(1731849413.647:122): avc: denied { map_create } for pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.803747][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.822593][ T29] audit: type=1400 audit(1731849413.647:123): avc: denied { bpf } for pid=3453 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.832388][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.852597][ T29] audit: type=1400 audit(1731849413.647:124): avc: denied { map_read map_write } for pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.863019][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.882495][ T29] audit: type=1400 audit(1731849413.647:125): avc: denied { prog_load } for pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.896991][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.911172][ T29] audit: type=1400 audit(1731849413.647:126): avc: denied { perfmon } for pid=3453 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.923432][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.939202][ T29] audit: type=1400 audit(1731849413.647:127): avc: denied { prog_run } for pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.949688][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.979414][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.993147][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.003759][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.013890][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.025101][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.037907][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.047580][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056390][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.065210][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.074175][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.087406][ T3313] veth1_vlan: entered promiscuous mode [ 33.096982][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.106009][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.114852][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.123681][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152277][ T3322] veth0_vlan: entered promiscuous mode [ 33.175198][ T3322] veth1_vlan: entered promiscuous mode [ 33.195809][ T3313] veth0_macvtap: entered promiscuous mode [ 33.217685][ T3313] veth1_macvtap: entered promiscuous mode [ 33.259322][ T3322] veth0_macvtap: entered promiscuous mode [ 33.280731][ T3322] veth1_macvtap: entered promiscuous mode [ 33.301184][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.311766][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.321889][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.332409][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.342404][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.352980][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.363986][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.372439][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.382963][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.392801][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.403367][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.413499][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.424771][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.436379][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.457645][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.466462][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.475319][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.484426][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.497137][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.508076][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.518091][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.528637][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.539552][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.550695][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.560985][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.571530][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.583080][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.599282][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.609793][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.620318][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.630810][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.642251][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.652872][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.663332][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.674039][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.685449][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.700768][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.709655][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.718642][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.727809][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.797472][ T3484] loop2: detected capacity change from 0 to 256 [ 33.829369][ T3484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.045041][ T3505] loop1: detected capacity change from 0 to 256 [ 34.059302][ T3507] batadv0: entered promiscuous mode [ 34.072396][ T3507] batadv_slave_0: entered promiscuous mode [ 34.078482][ T3507] batadv_slave_0: left promiscuous mode [ 34.105404][ T3507] batadv0: left promiscuous mode [ 34.770262][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.778992][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.870090][ T3505] syz.1.24 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 34.884557][ T3505] CPU: 1 UID: 0 PID: 3505 Comm: syz.1.24 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 34.895113][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 34.905193][ T3505] Call Trace: [ 34.910204][ T3505] [ 34.913778][ T3505] dump_stack_lvl+0xf2/0x150 [ 34.919716][ T3505] dump_stack+0x15/0x20 [ 34.924067][ T3505] dump_header+0x83/0x2d0 [ 34.929355][ T3505] oom_kill_process+0x341/0x4c0 [ 34.935857][ T3505] out_of_memory+0x9af/0xbe0 [ 34.941032][ T3505] ? css_next_descendant_pre+0x11c/0x140 [ 34.946736][ T3505] mem_cgroup_out_of_memory+0x13e/0x190 [ 34.952317][ T3505] try_charge_memcg+0x51b/0x810 [ 34.957440][ T3505] obj_cgroup_charge_pages+0xbd/0x1a0 [ 34.962903][ T3505] __memcg_kmem_charge_page+0x9d/0x170 [ 34.968558][ T3505] __alloc_pages_noprof+0x1bc/0x340 [ 34.973772][ T3505] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 34.979407][ T3505] alloc_pages_noprof+0xe1/0x100 [ 34.984436][ T3505] __vmalloc_node_range_noprof+0x72e/0xec0 [ 34.990413][ T3505] __kvmalloc_node_noprof+0x121/0x170 [ 34.995891][ T3505] ? ip_set_alloc+0x1f/0x30 [ 35.000583][ T3505] ip_set_alloc+0x1f/0x30 [ 35.004939][ T3505] hash_netiface_create+0x273/0x730 [ 35.010182][ T3505] ? __nla_parse+0x40/0x60 [ 35.014997][ T3505] ? __pfx_hash_netiface_create+0x10/0x10 [ 35.022164][ T3505] ip_set_create+0x359/0x8a0 [ 35.026818][ T3505] ? strnstr+0xf1/0x100 [ 35.031114][ T3505] ? __nla_parse+0x40/0x60 [ 35.035535][ T3505] nfnetlink_rcv_msg+0x4a9/0x570 [ 35.042121][ T3505] netlink_rcv_skb+0x12c/0x230 [ 35.046969][ T3505] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 35.052529][ T3505] nfnetlink_rcv+0x16c/0x15c0 [ 35.057338][ T3505] ? kmem_cache_free+0xdc/0x2d0 [ 35.062298][ T3505] ? nlmon_xmit+0x51/0x60 [ 35.067906][ T3505] ? __kfree_skb+0x102/0x150 [ 35.072616][ T3505] ? consume_skb+0x49/0x160 [ 35.077190][ T3505] ? nlmon_xmit+0x51/0x60 [ 35.082206][ T3505] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 35.087607][ T3505] ? __dev_queue_xmit+0xb4c/0x2040 [ 35.092897][ T3505] ? ref_tracker_free+0x3a5/0x410 [ 35.097986][ T3505] ? __dev_queue_xmit+0x161/0x2040 [ 35.103197][ T3505] ? ref_tracker_alloc+0x1f5/0x2f0 [ 35.108333][ T3505] ? __netlink_deliver_tap+0x495/0x4c0 [ 35.113999][ T3505] netlink_unicast+0x599/0x670 [ 35.118816][ T3505] netlink_sendmsg+0x5cc/0x6e0 [ 35.123588][ T3505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.129476][ T3505] __sock_sendmsg+0x140/0x180 [ 35.134243][ T3505] ____sys_sendmsg+0x312/0x410 [ 35.139118][ T3505] __sys_sendmsg+0x1d9/0x270 [ 35.143777][ T3505] __x64_sys_sendmsg+0x46/0x50 [ 35.148814][ T3505] x64_sys_call+0x2689/0x2d60 [ 35.153668][ T3505] do_syscall_64+0xc9/0x1c0 [ 35.158199][ T3505] ? clear_bhb_loop+0x55/0xb0 [ 35.163171][ T3505] ? clear_bhb_loop+0x55/0xb0 [ 35.167982][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.174092][ T3505] RIP: 0033:0x7fa4ef18e719 [ 35.178658][ T3505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.198460][ T3505] RSP: 002b:00007fa4ede07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.206912][ T3505] RAX: ffffffffffffffda RBX: 00007fa4ef345f80 RCX: 00007fa4ef18e719 [ 35.215213][ T3505] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 35.223192][ T3505] RBP: 00007fa4ef20175e R08: 0000000000000000 R09: 0000000000000000 [ 35.231329][ T3505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.239387][ T3505] R13: 0000000000000000 R14: 00007fa4ef345f80 R15: 00007ffdccd45f38 [ 35.247566][ T3505] [ 35.250761][ T3505] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 35.257926][ T3505] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0 [ 35.265862][ T3505] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 35.273587][ T3505] Memory cgroup stats for /syz1: [ 35.275735][ T3505] cache 61440 [ 35.284647][ T3505] rss 0 [ 35.287481][ T3505] shmem 0 [ 35.290433][ T3505] mapped_file 53248 [ 35.294451][ T3505] dirty 57344 [ 35.297769][ T3505] writeback 0 [ 35.301082][ T3505] workingset_refault_anon 16 [ 35.306371][ T3505] workingset_refault_file 0 [ 35.311125][ T3505] swap 311296 [ 35.314530][ T3505] swapcached 8192 [ 35.318419][ T3505] pgpgin 275 [ 35.322103][ T3505] pgpgout 258 [ 35.325582][ T3505] pgfault 472 [ 35.326907][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 35.328992][ T3505] pgmajfault 10 [ 35.336370][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.340020][ T3505] inactive_anon 8192 [ 35.347414][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.347446][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.347514][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.351380][ T3505] active_anon 0 [ 35.351391][ T3505] inactive_file 57344 [ 35.358773][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.358799][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.366238][ T3505] active_file 4096 [ 35.366249][ T3505] unevictable 0 [ 35.373909][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.373938][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.373965][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.377553][ T3505] hierarchical_memory_limit 314572800 [ 35.381487][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.388977][ T3505] hierarchical_memsw_limit 9223372036854771712 [ 35.396259][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.400097][ T3505] total_cache 61440 [ 35.403682][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.411169][ T3505] total_rss 0 [ 35.411181][ T3505] total_shmem 0 [ 35.418551][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.418583][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.419271][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.425976][ T3505] total_mapped_file 53248 [ 35.431468][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.438920][ T3505] total_dirty 57344 [ 35.445142][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.452595][ T3505] total_writeback 0 [ 35.456397][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.464382][ T3505] total_workingset_refault_anon 16 [ 35.464393][ T3505] total_workingset_refault_file 0 [ 35.464403][ T3505] total_swap 311296 [ 35.464411][ T3505] total_swapcached 8192 [ 35.464420][ T3505] total_pgpgin 275 [ 35.467719][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.471173][ T3505] total_pgpgout 258 [ 35.471187][ T3505] total_pgfault 472 [ 35.478684][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.478709][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.486268][ T3505] total_pgmajfault 10 [ 35.493663][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.493691][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.498054][ T3505] total_inactive_anon 8192 [ 35.498066][ T3505] total_active_anon 0 [ 35.505442][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.509364][ T3505] total_inactive_file 57344 [ 35.516615][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.520543][ T3505] total_active_file 4096 [ 35.528329][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.533615][ T3505] total_unevictable 0 [ 35.538760][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.538785][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.538885][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.542635][ T3505] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 35.546849][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.550559][ T3505] ,cpuset=/ [ 35.558063][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.562097][ T3505] ,mems_allowed=0 [ 35.566414][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.573836][ T3505] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.24,pid=3504,uid=0 [ 35.573913][ T3505] Memory cgroup out of memory: Killed process 3504 (syz.1.24) total-vm:88964kB, anon-rss:608kB, file-rss:15916kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 35.728350][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.736467][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.744159][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.751629][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.759160][ T3504] syz.1.24 (3504) used greatest stack depth: 10008 bytes left [ 35.808577][ T3393] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 35.986173][ T3505] syz.1.24 (3505) used greatest stack depth: 7272 bytes left [ 36.041855][ T3566] loop1: detected capacity change from 0 to 164 [ 36.070176][ T3566] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 36.086771][ T3566] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 36.095351][ T3566] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 36.105876][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.121214][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.201569][ T3588] loop4: detected capacity change from 0 to 512 [ 36.213926][ T3588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.246408][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.257089][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.266965][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.276198][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 36.277562][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.277578][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.277596][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.277607][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.277622][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.345523][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.374380][ T3588] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.484584][ T3620] netlink: 'syz.1.64': attribute type 11 has an invalid length. [ 36.527318][ T3625] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 36.562128][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.658878][ T3641] mmap: syz.0.75 (3641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.686451][ T3643] loop3: detected capacity change from 0 to 4096 [ 36.762328][ T3653] loop2: detected capacity change from 0 to 2048 [ 36.769232][ T3653] EXT4-fs: Ignoring removed orlov option [ 36.777328][ T3643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.793583][ T3657] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 36.805041][ T3657] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 36.915562][ T3653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.929846][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.942838][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.986490][ T3678] batadv0: entered promiscuous mode [ 36.997813][ T3678] batadv_slave_0: entered promiscuous mode [ 37.003837][ T3678] batadv_slave_0: left promiscuous mode [ 37.014821][ T3678] batadv0: left promiscuous mode [ 37.054352][ T3682] bond1: entered promiscuous mode [ 37.059544][ T3682] bond1: entered allmulticast mode [ 37.065371][ T3682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.093888][ T3682] bond1 (unregistering): Released all slaves [ 37.146143][ T3696] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 37.156383][ T3696] syz_tun: entered promiscuous mode [ 37.166609][ T3696] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.331272][ T3720] loop4: detected capacity change from 0 to 512 [ 37.342490][ T3720] ======================================================= [ 37.342490][ T3720] WARNING: The mand mount option has been deprecated and [ 37.342490][ T3720] and is ignored by this kernel. Remove the mand [ 37.342490][ T3720] option from the mount to silence this warning. [ 37.342490][ T3720] ======================================================= [ 37.400531][ T3720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 37.415881][ T3730] all: renamed from bridge_slave_0 (while UP) [ 37.423915][ T3722] loop0: detected capacity change from 0 to 8192 [ 37.426694][ T3720] System zones: 0-2, 18-18, 34-34 [ 37.461103][ T3720] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.104: bg 0: block 248: padding at end of block bitmap is not set [ 37.480784][ T3722] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 37.488094][ T3722] FAT-fs (loop0): Filesystem has been set read-only [ 37.507220][ T3720] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.104: Failed to acquire dquot type 1 [ 37.524233][ T3720] EXT4-fs (loop4): 1 truncate cleaned up [ 37.551746][ T3720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.565066][ T3720] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.602468][ T3737] batadv0: entered promiscuous mode [ 37.611698][ T3737] batadv_slave_0: entered promiscuous mode [ 37.617688][ T3737] batadv_slave_0: left promiscuous mode [ 37.624390][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.636113][ T3737] batadv0: left promiscuous mode [ 37.648781][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 37.648797][ T29] audit: type=1400 audit(1731849418.547:392): avc: denied { write } for pid=3739 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.718292][ T29] audit: type=1400 audit(1731849418.577:393): avc: denied { execmem } for pid=3745 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.737484][ T29] audit: type=1400 audit(1731849418.627:394): avc: denied { ioctl } for pid=3751 comm="syz.4.118" path="socket:[5395]" dev="sockfs" ino=5395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.762175][ T29] audit: type=1400 audit(1731849418.627:395): avc: denied { bind } for pid=3751 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.813201][ T29] audit: type=1400 audit(1731849418.707:396): avc: denied { create } for pid=3756 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.846095][ T29] audit: type=1400 audit(1731849418.737:397): avc: denied { write } for pid=3756 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.874774][ T29] audit: type=1400 audit(1731849418.767:398): avc: denied { create } for pid=3759 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.895266][ T29] audit: type=1400 audit(1731849418.767:399): avc: denied { setopt } for pid=3759 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.920192][ T29] audit: type=1400 audit(1731849418.807:400): avc: denied { read write } for pid=3758 comm="syz.4.122" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.944580][ T29] audit: type=1400 audit(1731849418.807:401): avc: denied { open } for pid=3758 comm="syz.4.122" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.969784][ T3765] netlink: 108 bytes leftover after parsing attributes in process `syz.1.123'. [ 37.991291][ T3765] netlink: 108 bytes leftover after parsing attributes in process `syz.1.123'. [ 38.000370][ T3765] netlink: 84 bytes leftover after parsing attributes in process `syz.1.123'. [ 38.072199][ T3771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.118824][ T3778] rdma_op ffff888113224d80 conn xmit_rdma 0000000000000000 [ 38.171791][ T3783] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 38.200735][ T3785] can0: slcan on ttyS3. [ 38.256922][ T3785] can0 (unregistered): slcan off ttyS3. [ 38.266991][ T3785] Falling back ldisc for ttyS3. [ 38.292468][ T3794] loop1: detected capacity change from 0 to 512 [ 38.330252][ T3794] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.135: corrupted in-inode xattr: invalid ea_ino [ 38.359567][ T3794] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.135: couldn't read orphan inode 15 (err -117) [ 38.373025][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.411100][ T3808] batadv0: entered promiscuous mode [ 38.417321][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.430803][ T3808] batadv_slave_0: entered promiscuous mode [ 38.436915][ T3808] batadv_slave_0: left promiscuous mode [ 38.471415][ T3808] batadv0: left promiscuous mode [ 38.883191][ T3862] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 38.980962][ T3866] loop3: detected capacity change from 0 to 4096 [ 39.019640][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.041787][ T3880] IPv6: Can't replace route, no match found [ 39.131137][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.218486][ T3892] loop4: detected capacity change from 0 to 256 [ 39.224386][ T3894] loop0: detected capacity change from 0 to 1024 [ 39.234605][ T3894] EXT4-fs: Ignoring removed oldalloc option [ 39.269591][ T3894] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 39.324289][ T3894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.365494][ T3894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.428442][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.451701][ T3902] loop1: detected capacity change from 0 to 164 [ 39.495553][ T3906] syz.1.173[3906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.495707][ T3906] syz.1.173[3906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.516192][ T3906] syz.1.173[3906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.625886][ T3912] loop1: detected capacity change from 0 to 128 [ 39.658087][ T3914] xt_policy: neither incoming nor outgoing policy selected [ 39.666415][ T3912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 39.684994][ T3912] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 39.795961][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 39.809034][ T3923] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 39.823191][ T3923] Zero length message leads to an empty skb [ 39.896736][ T3929] loop2: detected capacity change from 0 to 2048 [ 39.910760][ T3929] EXT4-fs: Ignoring removed bh option [ 39.945410][ T3929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.060830][ T3929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.076232][ T3942] loop3: detected capacity change from 0 to 128 [ 40.099907][ T3892] syz.4.168 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 40.114187][ T3892] CPU: 1 UID: 0 PID: 3892 Comm: syz.4.168 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 40.124842][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 40.135633][ T3892] Call Trace: [ 40.138954][ T3892] [ 40.141983][ T3892] dump_stack_lvl+0xf2/0x150 [ 40.144480][ T3945] loop1: detected capacity change from 0 to 512 [ 40.146667][ T3892] dump_stack+0x15/0x20 [ 40.157176][ T3892] dump_header+0x83/0x2d0 [ 40.161735][ T3892] oom_kill_process+0x341/0x4c0 [ 40.166649][ T3892] out_of_memory+0x9af/0xbe0 [ 40.171279][ T3892] ? css_next_descendant_pre+0x11c/0x140 [ 40.177155][ T3892] mem_cgroup_out_of_memory+0x13e/0x190 [ 40.182741][ T3892] try_charge_memcg+0x51b/0x810 [ 40.183553][ T3945] EXT4-fs: Ignoring removed orlov option [ 40.187700][ T3892] obj_cgroup_charge_pages+0xbd/0x1a0 [ 40.187773][ T3892] __memcg_kmem_charge_page+0x9d/0x170 [ 40.204246][ T3892] __alloc_pages_noprof+0x1bc/0x340 [ 40.209567][ T3892] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 40.215114][ T3892] alloc_pages_noprof+0xe1/0x100 [ 40.220097][ T3892] __vmalloc_node_range_noprof+0x72e/0xec0 [ 40.225983][ T3892] __kvmalloc_node_noprof+0x121/0x170 [ 40.231598][ T3892] ? ip_set_alloc+0x1f/0x30 [ 40.236178][ T3892] ip_set_alloc+0x1f/0x30 [ 40.240537][ T3892] hash_netiface_create+0x273/0x730 [ 40.245848][ T3892] ? __nla_parse+0x40/0x60 [ 40.250286][ T3892] ? __pfx_hash_netiface_create+0x10/0x10 [ 40.256056][ T3892] ip_set_create+0x359/0x8a0 [ 40.260807][ T3892] ? strnstr+0xf1/0x100 [ 40.265044][ T3892] ? __nla_parse+0x40/0x60 [ 40.269493][ T3892] nfnetlink_rcv_msg+0x4a9/0x570 [ 40.274568][ T3892] netlink_rcv_skb+0x12c/0x230 [ 40.279402][ T3892] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 40.285002][ T3892] nfnetlink_rcv+0x16c/0x15c0 [ 40.289699][ T3892] ? kmem_cache_free+0xdc/0x2d0 [ 40.294691][ T3892] ? nlmon_xmit+0x51/0x60 [ 40.299173][ T3892] ? __kfree_skb+0x102/0x150 [ 40.303789][ T3892] ? consume_skb+0x49/0x160 [ 40.308461][ T3892] ? nlmon_xmit+0x51/0x60 [ 40.312797][ T3892] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 40.318162][ T3892] ? __dev_queue_xmit+0xb4c/0x2040 [ 40.323470][ T3892] ? ref_tracker_free+0x3a5/0x410 [ 40.328565][ T3892] ? __dev_queue_xmit+0x161/0x2040 [ 40.333761][ T3892] ? ref_tracker_alloc+0x1f5/0x2f0 [ 40.339001][ T3892] ? __netlink_deliver_tap+0x495/0x4c0 [ 40.344512][ T3892] netlink_unicast+0x599/0x670 [ 40.349403][ T3892] netlink_sendmsg+0x5cc/0x6e0 [ 40.354488][ T3892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.359837][ T3892] __sock_sendmsg+0x140/0x180 [ 40.364533][ T3892] ____sys_sendmsg+0x312/0x410 [ 40.369309][ T3892] __sys_sendmsg+0x1d9/0x270 [ 40.374001][ T3892] ? futex_wait+0x18e/0x1c0 [ 40.378878][ T3892] __x64_sys_sendmsg+0x46/0x50 [ 40.383650][ T3892] x64_sys_call+0x2689/0x2d60 [ 40.388372][ T3892] do_syscall_64+0xc9/0x1c0 [ 40.392961][ T3892] ? clear_bhb_loop+0x55/0xb0 [ 40.397764][ T3892] ? clear_bhb_loop+0x55/0xb0 [ 40.403126][ T3892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.409115][ T3892] RIP: 0033:0x7fd6b1d7e719 [ 40.413541][ T3892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.433681][ T3892] RSP: 002b:00007fd6b09f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.442798][ T3892] RAX: ffffffffffffffda RBX: 00007fd6b1f35f80 RCX: 00007fd6b1d7e719 [ 40.450893][ T3892] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 40.459422][ T3892] RBP: 00007fd6b1df175e R08: 0000000000000000 R09: 0000000000000000 [ 40.467449][ T3892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.475963][ T3892] R13: 0000000000000000 R14: 00007fd6b1f35f80 R15: 00007ffea35be668 [ 40.484069][ T3892] [ 40.487306][ T3892] memory: usage 307200kB, limit 307200kB, failcnt 220 [ 40.494361][ T3892] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 40.502356][ T3892] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 40.509700][ T3892] Memory cgroup stats for /syz4: [ 40.510008][ T3892] cache 8192 [ 40.518483][ T3892] rss 0 [ 40.521278][ T3892] shmem 0 [ 40.524276][ T3892] mapped_file 4096 [ 40.528138][ T3892] dirty 8192 [ 40.531350][ T3892] writeback 4096 [ 40.534955][ T3892] workingset_refault_anon 36 [ 40.539717][ T3892] workingset_refault_file 67 [ 40.544505][ T3892] swap 315392 [ 40.547824][ T3892] swapcached 12288 [ 40.551634][ T3892] pgpgin 23007 [ 40.555013][ T3892] pgpgout 23002 [ 40.558858][ T3892] pgfault 25209 [ 40.562398][ T3892] pgmajfault 15 [ 40.565890][ T3892] inactive_anon 0 [ 40.569579][ T3892] active_anon 12288 [ 40.573404][ T3892] inactive_file 0 [ 40.577073][ T3892] active_file 8192 [ 40.580867][ T3892] unevictable 0 [ 40.584347][ T3892] hierarchical_memory_limit 314572800 [ 40.589779][ T3892] hierarchical_memsw_limit 9223372036854771712 [ 40.595992][ T3892] total_cache 8192 [ 40.599800][ T3892] total_rss 0 [ 40.603105][ T3892] total_shmem 0 [ 40.606581][ T3892] total_mapped_file 4096 [ 40.611262][ T3892] total_dirty 8192 [ 40.615078][ T3892] total_writeback 4096 [ 40.619467][ T3892] total_workingset_refault_anon 36 [ 40.622199][ T3942] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.624690][ T3892] total_workingset_refault_file 67 [ 40.624703][ T3892] total_swap 315392 [ 40.645971][ T3892] total_swapcached 12288 [ 40.650279][ T3892] total_pgpgin 23007 [ 40.654196][ T3892] total_pgpgout 23002 [ 40.658202][ T3892] total_pgfault 25209 [ 40.662215][ T3892] total_pgmajfault 15 [ 40.666217][ T3892] total_inactive_anon 0 [ 40.670437][ T3892] total_active_anon 12288 [ 40.674780][ T3892] total_inactive_file 0 [ 40.679104][ T3892] total_active_file 8192 [ 40.683369][ T3892] total_unevictable 0 [ 40.687486][ T3892] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.168,pid=3891,uid=0 [ 40.694557][ T3942] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.702079][ T3892] Memory cgroup out of memory: Killed process 3891 (syz.4.168) total-vm:89036kB, anon-rss:612kB, file-rss:15932kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 40.845895][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.906974][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.956893][ T3945] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.990365][ T3965] syz.0.199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.011077][ T3967] Process accounting resumed [ 41.062728][ T3972] pim6reg: entered allmulticast mode [ 41.077452][ T3972] pim6reg: left allmulticast mode [ 41.086216][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.113216][ T3977] netlink: 'syz.0.204': attribute type 4 has an invalid length. [ 41.143367][ T3979] loop1: detected capacity change from 0 to 512 [ 41.184902][ T3985] loop0: detected capacity change from 0 to 256 [ 41.198262][ T3985] FAT-fs (loop0): bogus number of FAT sectors [ 41.204572][ T3985] FAT-fs (loop0): Can't find a valid FAT filesystem [ 41.244475][ T3979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.290742][ T3979] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.367994][ T3979] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.382478][ T3994] ebtables: ebtables: counters copy to user failed while replacing table [ 41.469347][ T4004] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 41.480709][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.546439][ T4011] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 41.605759][ T4016] bond1: entered promiscuous mode [ 41.610927][ T4016] bond1: entered allmulticast mode [ 41.654218][ T4016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.698855][ T4016] bond1 (unregistering): Released all slaves [ 41.772097][ T4036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 41.781107][ T4036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 41.791779][ T4034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.820300][ T4034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.919330][ T4045] Driver unsupported XDP return value 0 on prog (id 153) dev N/A, expect packet loss! [ 41.934674][ T4048] vhci_hcd: invalid port number 255 [ 41.940061][ T4048] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 42.055625][ T4065] process 'syz.4.244' launched '/dev/fd/5' with NULL argv: empty string added [ 42.112174][ T3016] ================================================================== [ 42.121507][ T3016] BUG: KCSAN: data-race in dont_mount / step_into [ 42.128041][ T3016] [ 42.130373][ T3016] read-write to 0xffff8881048ca180 of 4 bytes by task 3659 on cpu 0: [ 42.138496][ T3016] dont_mount+0x2a/0x40 [ 42.142737][ T3016] vfs_unlink+0x298/0x430 [ 42.147102][ T3016] do_unlinkat+0x236/0x4c0 [ 42.151632][ T3016] __x64_sys_unlink+0x2e/0x40 [ 42.156343][ T3016] x64_sys_call+0x280f/0x2d60 [ 42.161059][ T3016] do_syscall_64+0xc9/0x1c0 [ 42.165586][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.171771][ T3016] [ 42.174103][ T3016] read to 0xffff8881048ca180 of 4 bytes by task 3016 on cpu 1: [ 42.181647][ T3016] step_into+0x12f/0x810 [ 42.185899][ T3016] walk_component+0x169/0x230 [ 42.190586][ T3016] path_lookupat+0x10a/0x2b0 [ 42.195267][ T3016] filename_lookup+0x127/0x300 [ 42.200061][ T3016] do_readlinkat+0x89/0x210 [ 42.204587][ T3016] __x64_sys_readlink+0x47/0x60 [ 42.209451][ T3016] x64_sys_call+0x13c3/0x2d60 [ 42.214144][ T3016] do_syscall_64+0xc9/0x1c0 [ 42.218660][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.224584][ T3016] [ 42.226924][ T3016] value changed: 0x00600008 -> 0x00008008 [ 42.232656][ T3016] [ 42.234986][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 42.241497][ T3016] CPU: 1 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 42.251750][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 42.261812][ T3016] ==================================================================