last executing test programs: 19.578425763s ago: executing program 0 (id=70): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 19.536103294s ago: executing program 0 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 18.678725801s ago: executing program 0 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 17.826262067s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 17.805394327s ago: executing program 0 (id=88): open(0x0, 0x14927e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r1) r4 = socket(0x10, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 17.618920941s ago: executing program 0 (id=89): perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 17.618749901s ago: executing program 32 (id=89): perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 3.236558658s ago: executing program 3 (id=375): r0 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xb0f2, 0x0, 0x3, 0x60000002}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000005c0)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.921145814s ago: executing program 3 (id=381): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) 2.862387115s ago: executing program 1 (id=392): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.493023652s ago: executing program 1 (id=389): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, r0, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.283618466s ago: executing program 1 (id=393): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.214377787s ago: executing program 4 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) socket(0x400000000010, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) mq_open(0x0, 0x8c2, 0x30, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x50) 2.208960367s ago: executing program 1 (id=396): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5a918e20139b45afb6103dc440fcc2e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 1.852825164s ago: executing program 4 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 1.844920484s ago: executing program 3 (id=399): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 1.820892625s ago: executing program 5 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.772473326s ago: executing program 4 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0xfff1}, {0xfff3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 1.703017767s ago: executing program 3 (id=404): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) pread64(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x240, 0x0) io_setup(0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.702321237s ago: executing program 5 (id=414): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 1.686871608s ago: executing program 4 (id=405): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0xa, 0x0, 0x1, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 1.602937559s ago: executing program 5 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 1.382435494s ago: executing program 2 (id=409): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, &(0x7f00000021c0)=ANY=[], 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x64, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.293499925s ago: executing program 5 (id=410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r1) 1.293299745s ago: executing program 1 (id=411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 1.167802707s ago: executing program 5 (id=412): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 891.894673ms ago: executing program 2 (id=413): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) wait4(r0, 0x0, 0x40000000, 0x0) 473.426881ms ago: executing program 2 (id=415): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r3, r1, 0x80000) 447.155751ms ago: executing program 4 (id=416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x12011, r2, 0x0) 366.954943ms ago: executing program 1 (id=417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x26000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 366.679433ms ago: executing program 4 (id=418): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x141, 0xbd, 0x32, 0x7e, 0x20, 0xbed, 0x1100, 0x629a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x4c, 0x7, 0x0, 0xfd, 0x22, 0xcd}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 255.833725ms ago: executing program 5 (id=419): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 255.634105ms ago: executing program 2 (id=420): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x24, 0x0, 0x0) 221.900136ms ago: executing program 2 (id=421): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x64004004) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 195.354556ms ago: executing program 2 (id=422): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(0x0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7fffeffd) 96.015788ms ago: executing program 3 (id=423): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=424): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.603286][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 18.603302][ T29] audit: type=1400 audit(1757465588.786:57): avc: denied { transition } for pid=3180 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.608305][ T29] audit: type=1400 audit(1757465588.786:58): avc: denied { noatsecure } for pid=3180 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.611511][ T29] audit: type=1400 audit(1757465588.786:59): avc: denied { write } for pid=3180 comm="sh" path="pipe:[2124]" dev="pipefs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.614886][ T29] audit: type=1400 audit(1757465588.786:60): avc: denied { rlimitinh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.617745][ T29] audit: type=1400 audit(1757465588.786:61): avc: denied { siginh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 26.255849][ T29] audit: type=1400 audit(1757465596.436:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.256626][ T3292] cgroup: Unknown subsys name 'net' [ 26.278673][ T29] audit: type=1400 audit(1757465596.436:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.306143][ T29] audit: type=1400 audit(1757465596.466:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.447756][ T3292] cgroup: Unknown subsys name 'cpuset' [ 26.454073][ T3292] cgroup: Unknown subsys name 'rlimit' [ 26.622899][ T29] audit: type=1400 audit(1757465596.806:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.648192][ T29] audit: type=1400 audit(1757465596.806:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.668731][ T29] audit: type=1400 audit(1757465596.806:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.673740][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.689309][ T29] audit: type=1400 audit(1757465596.806:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.718311][ T29] audit: type=1400 audit(1757465596.816:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.743274][ T29] audit: type=1400 audit(1757465596.816:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.759858][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.766691][ T29] audit: type=1400 audit(1757465596.886:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.845733][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.943050][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.950176][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.957484][ T3302] bridge_slave_0: entered allmulticast mode [ 27.963835][ T3302] bridge_slave_0: entered promiscuous mode [ 27.971915][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.979160][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.986306][ T3302] bridge_slave_1: entered allmulticast mode [ 27.992785][ T3302] bridge_slave_1: entered promiscuous mode [ 28.009793][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.053791][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.062922][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.072114][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.083905][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.115761][ T3302] team0: Port device team_slave_0 added [ 28.122457][ T3302] team0: Port device team_slave_1 added [ 28.148243][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.170623][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.177782][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.185170][ T3307] bridge_slave_0: entered allmulticast mode [ 28.191849][ T3307] bridge_slave_0: entered promiscuous mode [ 28.200719][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.207826][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.215083][ T3307] bridge_slave_1: entered allmulticast mode [ 28.221570][ T3307] bridge_slave_1: entered promiscuous mode [ 28.230974][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.238047][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.263995][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.292790][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.299860][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.325949][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.369081][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.384587][ T3302] hsr_slave_0: entered promiscuous mode [ 28.391271][ T3302] hsr_slave_1: entered promiscuous mode [ 28.397394][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.404531][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.411820][ T3305] bridge_slave_0: entered allmulticast mode [ 28.418386][ T3305] bridge_slave_0: entered promiscuous mode [ 28.430448][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.448972][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.456170][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.463363][ T3309] bridge_slave_0: entered allmulticast mode [ 28.469728][ T3309] bridge_slave_0: entered promiscuous mode [ 28.476159][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.483257][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.490468][ T3305] bridge_slave_1: entered allmulticast mode [ 28.496716][ T3305] bridge_slave_1: entered promiscuous mode [ 28.507695][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.514911][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.522263][ T3304] bridge_slave_0: entered allmulticast mode [ 28.528753][ T3304] bridge_slave_0: entered promiscuous mode [ 28.544202][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.551379][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.558784][ T3309] bridge_slave_1: entered allmulticast mode [ 28.565282][ T3309] bridge_slave_1: entered promiscuous mode [ 28.576138][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.583243][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.590488][ T3304] bridge_slave_1: entered allmulticast mode [ 28.597343][ T3304] bridge_slave_1: entered promiscuous mode [ 28.604012][ T3307] team0: Port device team_slave_0 added [ 28.614980][ T3307] team0: Port device team_slave_1 added [ 28.644190][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.661087][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.675160][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.682257][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.708535][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.720597][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.730055][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.737303][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.763436][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.775422][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.785564][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.814024][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.826522][ T3305] team0: Port device team_slave_0 added [ 28.833782][ T3305] team0: Port device team_slave_1 added [ 28.862246][ T3309] team0: Port device team_slave_0 added [ 28.879776][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.886972][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.912975][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.930759][ T3309] team0: Port device team_slave_1 added [ 28.937053][ T3304] team0: Port device team_slave_0 added [ 28.954314][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.961443][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.987546][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.004091][ T3304] team0: Port device team_slave_1 added [ 29.014147][ T3307] hsr_slave_0: entered promiscuous mode [ 29.020390][ T3307] hsr_slave_1: entered promiscuous mode [ 29.026339][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 29.032158][ T3307] Cannot create hsr debugfs directory [ 29.056386][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.063531][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.089537][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.101271][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.108248][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.134558][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.155626][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.162693][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.188844][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.204350][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.211400][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.237665][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.278831][ T3305] hsr_slave_0: entered promiscuous mode [ 29.284871][ T3305] hsr_slave_1: entered promiscuous mode [ 29.290951][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 29.296809][ T3305] Cannot create hsr debugfs directory [ 29.311650][ T3309] hsr_slave_0: entered promiscuous mode [ 29.317697][ T3309] hsr_slave_1: entered promiscuous mode [ 29.323559][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 29.329330][ T3309] Cannot create hsr debugfs directory [ 29.360041][ T3304] hsr_slave_0: entered promiscuous mode [ 29.366010][ T3304] hsr_slave_1: entered promiscuous mode [ 29.372195][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 29.378166][ T3304] Cannot create hsr debugfs directory [ 29.444051][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.456894][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.467497][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.489880][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.557600][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.573698][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.587679][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.597050][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.617688][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.632961][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.642857][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.653739][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.670173][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.689595][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.700397][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.709785][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.726702][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.735902][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.742973][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.754586][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.764137][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.771299][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.808214][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.818330][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.829321][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.840143][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.855296][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.882487][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.924453][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.933543][ T2205] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.940873][ T2205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.949790][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.956897][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.985269][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.994816][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.018520][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.029052][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.036222][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.059974][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.067194][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.076705][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.090042][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.099075][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.113273][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.120363][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.148156][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.158945][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.166071][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.179998][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.187507][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.209648][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.216783][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.250712][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.301930][ T3302] veth0_vlan: entered promiscuous mode [ 30.339794][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.348529][ T3302] veth1_vlan: entered promiscuous mode [ 30.371594][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.400729][ T3302] veth0_macvtap: entered promiscuous mode [ 30.415805][ T3302] veth1_macvtap: entered promiscuous mode [ 30.436130][ T3307] veth0_vlan: entered promiscuous mode [ 30.461608][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.471386][ T3307] veth1_vlan: entered promiscuous mode [ 30.481008][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.498472][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.519555][ T3305] veth0_vlan: entered promiscuous mode [ 30.534592][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.551098][ T3307] veth0_macvtap: entered promiscuous mode [ 30.559456][ T3305] veth1_vlan: entered promiscuous mode [ 30.568072][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.582695][ T3307] veth1_macvtap: entered promiscuous mode [ 30.603559][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.613097][ T3309] veth0_vlan: entered promiscuous mode [ 30.622092][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.627137][ T3305] veth0_macvtap: entered promiscuous mode [ 30.645923][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.670405][ T3305] veth1_macvtap: entered promiscuous mode [ 30.678108][ T3309] veth1_vlan: entered promiscuous mode [ 30.691135][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.707332][ T3304] veth0_vlan: entered promiscuous mode [ 30.722818][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.734213][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.746741][ T3309] veth0_macvtap: entered promiscuous mode [ 30.755656][ T3309] veth1_macvtap: entered promiscuous mode [ 30.769475][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.783075][ T2205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.793525][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.804026][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.814487][ T3304] veth1_vlan: entered promiscuous mode [ 30.824722][ T310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.834474][ T310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.848000][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.877306][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.886349][ T3304] veth0_macvtap: entered promiscuous mode [ 30.903530][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.912980][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.934671][ T3304] veth1_macvtap: entered promiscuous mode [ 30.951749][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.967968][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.977597][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.987513][ T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.997255][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.012694][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.031826][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.048923][ T3482] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 31.055459][ T3483] batman_adv: batadv0: Adding interface: dummy0 [ 31.061916][ T3483] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.088125][ T3483] batman_adv: batadv0: Interface activated: dummy0 [ 31.098779][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.138155][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.168773][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.184091][ T3489] loop0: detected capacity change from 0 to 1024 [ 31.203002][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.212220][ T3489] ======================================================= [ 31.212220][ T3489] WARNING: The mand mount option has been deprecated and [ 31.212220][ T3489] and is ignored by this kernel. Remove the mand [ 31.212220][ T3489] option from the mount to silence this warning. [ 31.212220][ T3489] ======================================================= [ 31.320263][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 31.320280][ T29] audit: type=1400 audit(1757465601.506:108): avc: denied { mounton } for pid=3494 comm="syz.3.9" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.371365][ T29] audit: type=1400 audit(1757465601.546:109): avc: denied { create } for pid=3494 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.391920][ T29] audit: type=1400 audit(1757465601.546:110): avc: denied { write } for pid=3494 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.412139][ T29] audit: type=1400 audit(1757465601.546:111): avc: denied { read } for pid=3494 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.466404][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.482720][ T29] audit: type=1400 audit(1757465601.666:112): avc: denied { mount } for pid=3486 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.504633][ T29] audit: type=1400 audit(1757465601.666:113): avc: denied { add_name } for pid=3486 comm="syz.0.7" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.526199][ T29] audit: type=1400 audit(1757465601.666:114): avc: denied { create } for pid=3486 comm="syz.0.7" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.639076][ T29] audit: type=1400 audit(1757465601.796:115): avc: denied { create } for pid=3506 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.658397][ T29] audit: type=1400 audit(1757465601.796:116): avc: denied { connect } for pid=3506 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.677832][ T29] audit: type=1400 audit(1757465601.796:117): avc: denied { name_connect } for pid=3506 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 31.699324][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.714322][ T3504] loop3: detected capacity change from 0 to 128 [ 31.893224][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 31.938410][ T3529] team1: entered promiscuous mode [ 31.943505][ T3529] team1: entered allmulticast mode [ 31.956926][ T3529] Zero length message leads to an empty skb [ 32.077239][ T3529] syz.4.20 (3529) used greatest stack depth: 10912 bytes left [ 32.162517][ T3542] loop4: detected capacity change from 0 to 8192 [ 32.210380][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 32.219252][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 32.283262][ T3553] loop3: detected capacity change from 0 to 512 [ 32.325834][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.348173][ T3553] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.377237][ T3553] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.31: corrupted inode contents [ 32.410305][ T3553] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm syz.3.31: mark_inode_dirty error [ 32.426364][ T3553] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.31: corrupted inode contents [ 32.435529][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 32.448100][ T3553] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.31: mark_inode_dirty error [ 32.461018][ T3553] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.31: mark inode dirty (error -117) [ 32.475969][ T3553] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 32.585439][ T3572] bridge_slave_0: left allmulticast mode [ 32.591227][ T3572] bridge_slave_0: left promiscuous mode [ 32.597069][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.604880][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.620923][ T3572] bridge_slave_1: left allmulticast mode [ 32.626618][ T3572] bridge_slave_1: left promiscuous mode [ 32.632532][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.655242][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'. [ 32.671360][ T3577] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 32.679377][ T3577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.38'. [ 32.693592][ T3572] bond0: (slave bond_slave_0): Releasing backup interface [ 32.703992][ T3572] bond0: (slave bond_slave_1): Releasing backup interface [ 32.721198][ T3572] team0: Port device team_slave_0 removed [ 32.749769][ T3572] team0: Port device team_slave_1 removed [ 32.757332][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.765130][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.775350][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.783437][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.825058][ T3577] batman_adv: batadv0: Adding interface: veth1_vlan [ 32.831808][ T3577] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.868362][ T3577] batman_adv: batadv0: Interface activated: veth1_vlan [ 32.886204][ T3582] vlan2: entered allmulticast mode [ 32.891447][ T3582] veth0_to_bridge: entered allmulticast mode [ 33.000443][ T3595] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 33.026543][ T3595] vlan2: entered allmulticast mode [ 33.031824][ T3595] batadv0: entered allmulticast mode [ 33.087031][ T3597] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.152972][ T3602] loop3: detected capacity change from 0 to 2048 [ 33.220145][ T3602] loop3: p1 < > p4 [ 33.225469][ T3602] loop3: p4 size 8388608 extends beyond EOD, truncated [ 33.466135][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.475165][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.484291][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.495161][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 33.820453][ T3639] ref_ctr increment failed for inode: 0x5f offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff8881046d2840 [ 33.832920][ T3639] ref_ctr increment failed for inode: 0x5f offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881046d2840 [ 33.844828][ T3638] uprobe: syz.4.63:3638 failed to unregister, leaking uprobe [ 33.907459][ T3638] uprobe: syz.4.63:3638 failed to unregister, leaking uprobe [ 34.130519][ T3649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3649 comm=syz.4.68 [ 34.166233][ T3653] loop2: detected capacity change from 0 to 512 [ 34.178130][ T3653] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.69: iget: bad i_size value: 38620345925642 [ 34.192571][ T3653] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.69: couldn't read orphan inode 15 (err -117) [ 34.205409][ T3653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.291686][ T3665] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.69: bg 0: block 5: invalid block bitmap [ 34.305894][ T3665] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 34.318725][ T3665] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.318725][ T3665] [ 34.328529][ T3665] EXT4-fs (loop2): Total free blocks count 0 [ 34.334636][ T3665] EXT4-fs (loop2): Free/Dirty block details [ 34.340743][ T3665] EXT4-fs (loop2): free_blocks=0 [ 34.345695][ T3665] EXT4-fs (loop2): dirty_blocks=2260 [ 34.351100][ T3665] EXT4-fs (loop2): Block reservation details [ 34.357608][ T3665] EXT4-fs (loop2): i_reserved_data_blocks=2260 [ 34.400816][ T3649] syz.4.68 (3649) used greatest stack depth: 10888 bytes left [ 34.445497][ T3665] syz.2.69 (3665) used greatest stack depth: 10840 bytes left [ 34.505155][ T3728] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 208 with error 28 [ 35.694991][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.703455][ T3398] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.301824][ T3722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.349858][ T3722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.406544][ T3722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.415461][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 36.415515][ T29] audit: type=1400 audit(36.394:247): avc: denied { bind } for pid=3784 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.464145][ T29] audit: type=1400 audit(36.454:248): avc: denied { create } for pid=3789 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.490282][ T29] audit: type=1400 audit(36.474:249): avc: denied { connect } for pid=3789 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.509129][ T29] audit: type=1400 audit(36.474:250): avc: denied { bind } for pid=3789 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.527627][ T29] audit: type=1400 audit(36.474:251): avc: denied { write } for pid=3789 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.550299][ T3722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.596893][ T29] audit: type=1400 audit(36.584:252): avc: denied { setopt } for pid=3793 comm="syz.3.95" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.628753][ T3794] hub 6-0:1.0: USB hub found [ 36.637116][ T3794] hub 6-0:1.0: 8 ports detected [ 36.670342][ T3801] loop4: detected capacity change from 0 to 512 [ 36.674125][ T3722] bridge_slave_1: left allmulticast mode [ 36.682485][ T3722] bridge_slave_1: left promiscuous mode [ 36.688175][ T3722] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.696235][ T3801] journal_path: Non-blockdev passed as './bus' [ 36.697535][ T29] audit: type=1400 audit(36.654:253): avc: denied { search } for pid=3033 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.702491][ T3801] EXT4-fs: error: could not find journal device path [ 36.723327][ T29] audit: type=1400 audit(36.654:254): avc: denied { search } for pid=3033 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.750967][ T29] audit: type=1400 audit(36.654:255): avc: denied { search } for pid=3033 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.772577][ T29] audit: type=1400 audit(36.654:256): avc: denied { read } for pid=3033 comm="dhcpcd" name="n26" dev="tmpfs" ino=1024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.798649][ T3722] bridge_slave_0: left allmulticast mode [ 36.804456][ T3722] bridge_slave_0: left promiscuous mode [ 36.810327][ T3722] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.899359][ T3722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.909489][ T3722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.919072][ T3722] bond0 (unregistering): Released all slaves [ 36.938242][ T3804] syz_tun: entered allmulticast mode [ 36.998842][ T3722] hsr_slave_0: left promiscuous mode [ 37.027684][ T3722] hsr_slave_1: left promiscuous mode [ 37.046858][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.054442][ T3722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.074988][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.082509][ T3722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.091138][ T3722] batman_adv: batadv0: Interface deactivated: dummy0 [ 37.097898][ T3722] batman_adv: batadv0: Removing interface: dummy0 [ 37.117714][ T3822] syz.2.102 (3822) used greatest stack depth: 10200 bytes left [ 37.128238][ T3722] veth1_macvtap: left promiscuous mode [ 37.133741][ T3722] veth0_macvtap: left promiscuous mode [ 37.149622][ C1] hrtimer: interrupt took 53460 ns [ 37.153653][ T3722] veth1_vlan: left promiscuous mode [ 37.160835][ T3722] veth0_vlan: left promiscuous mode [ 37.222087][ T3722] team0 (unregistering): Port device team_slave_1 removed [ 37.232087][ T3722] team0 (unregistering): Port device team_slave_0 removed [ 37.315289][ T3776] chnl_net:caif_netlink_parms(): no params data found [ 37.384544][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.389251][ T3851] __nla_validate_parse: 5 callbacks suppressed [ 37.389334][ T3851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 37.391871][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.421167][ T3776] bridge_slave_0: entered allmulticast mode [ 37.427831][ T3776] bridge_slave_0: entered promiscuous mode [ 37.434619][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.441735][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.449146][ T3776] bridge_slave_1: entered allmulticast mode [ 37.455626][ T3776] bridge_slave_1: entered promiscuous mode [ 37.488417][ T3776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.521231][ T3863] loop1: detected capacity change from 0 to 2048 [ 37.535328][ T3776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.551528][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.571488][ T3872] loop9: detected capacity change from 0 to 7 [ 37.584805][ T3872] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.607375][ T3872] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.615234][ T3872] loop9: unable to read partition table [ 37.622671][ T3776] team0: Port device team_slave_0 added [ 37.629648][ T3776] team0: Port device team_slave_1 added [ 37.635688][ T3872] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 37.635688][ T3872] ) failed (rc=-5) [ 37.636727][ T3563] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.657595][ T3563] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.665711][ T3563] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.683211][ T3563] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.691278][ T3879] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 37.700395][ T3563] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.701082][ T3776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.715219][ T3776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.741400][ T3776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.776783][ T3879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.788167][ T3879] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.797205][ T3776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.804201][ T3776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.830500][ T3776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.844765][ T3879] syz.1.109 (3879) used greatest stack depth: 10144 bytes left [ 37.879276][ T3881] veth0_vlan: entered allmulticast mode [ 37.893531][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.902722][ T3882] veth0_vlan: left promiscuous mode [ 37.909822][ T3882] veth0_vlan: entered promiscuous mode [ 37.945264][ T3776] hsr_slave_0: entered promiscuous mode [ 37.965454][ T3776] hsr_slave_1: entered promiscuous mode [ 37.976527][ T3776] debugfs: 'hsr0' already exists in 'hsr' [ 37.982333][ T3776] Cannot create hsr debugfs directory [ 38.011184][ T3891] netlink: 96 bytes leftover after parsing attributes in process `syz.2.116'. [ 38.279632][ T3909] loop3: detected capacity change from 0 to 8192 [ 38.299538][ T3909] msdos: Unknown parameter 'A' [ 38.377333][ T3776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.430483][ T3776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.472258][ T3776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.495763][ T3776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.568295][ T3948] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 38.589053][ T3776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.627511][ T3948] netlink: 3 bytes leftover after parsing attributes in process `syz.2.127'. [ 38.629746][ T3776] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.668106][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.675288][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.697922][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.705111][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.726298][ T3948] batadv1: entered promiscuous mode [ 38.731705][ T3948] batadv1: entered allmulticast mode [ 38.749533][ T3952] mmap: syz.1.126 (3952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.796261][ T3776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.982470][ T3776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.227514][ T3776] veth0_vlan: entered promiscuous mode [ 39.243368][ T3776] veth1_vlan: entered promiscuous mode [ 39.286086][ T3776] veth0_macvtap: entered promiscuous mode [ 39.296040][ T3776] veth1_macvtap: entered promiscuous mode [ 39.322517][ T3776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.339065][ T3776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.352810][ T3722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.379600][ T3676] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.401087][ T3676] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.423704][ T3676] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.458565][ T3998] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 39.476310][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.90'. [ 39.662385][ T4006] process 'syz.2.139' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 39.743877][ T4017] bridge0: entered promiscuous mode [ 39.757083][ T4017] macvtap1: entered allmulticast mode [ 39.762507][ T4017] bridge0: entered allmulticast mode [ 39.789027][ T4017] bridge0: port 3(macvtap1) entered blocking state [ 39.795604][ T4017] bridge0: port 3(macvtap1) entered disabled state [ 39.828920][ T4017] bridge0: left allmulticast mode [ 39.834019][ T4017] bridge0: left promiscuous mode [ 39.859675][ T4020] syz.4.145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.897533][ T4022] netlink: 360 bytes leftover after parsing attributes in process `syz.2.146'. [ 40.138804][ T4045] loop2: detected capacity change from 0 to 8192 [ 40.163402][ T4045] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 40.171976][ T4045] FAT-fs (loop2): Filesystem has been set read-only [ 40.311019][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 40.320958][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 40.420906][ T4093] ipvlan2: entered promiscuous mode [ 40.428995][ T4093] bridge0: port 3(ipvlan2) entered blocking state [ 40.435480][ T4093] bridge0: port 3(ipvlan2) entered disabled state [ 40.442580][ T4093] ipvlan2: entered allmulticast mode [ 40.447958][ T4093] bridge0: entered allmulticast mode [ 40.456191][ T4093] ipvlan2: left allmulticast mode [ 40.461301][ T4093] bridge0: left allmulticast mode [ 41.173644][ T4211] loop3: detected capacity change from 0 to 512 [ 41.205719][ T4211] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.219537][ T4211] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.252696][ T4211] EXT4-fs (loop3): 1 truncate cleaned up [ 41.258880][ T4211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.330769][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.556524][ T4266] netlink: 'syz.5.183': attribute type 1 has an invalid length. [ 41.565086][ T4266] veth0_to_team: entered promiscuous mode [ 41.571133][ T4266] veth0_to_team: entered allmulticast mode [ 41.735237][ T4288] capability: warning: `syz.5.190' uses deprecated v2 capabilities in a way that may be insecure [ 41.752685][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 41.752699][ T29] audit: type=1401 audit(41.744:485): op=setxattr invalid_context="" [ 41.814445][ T29] audit: type=1400 audit(41.804:486): avc: denied { mount } for pid=4291 comm="syz.5.191" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 41.840611][ T29] audit: type=1400 audit(41.804:487): avc: denied { watch watch_reads } for pid=4291 comm="syz.5.191" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 41.893083][ T4297] loop2: detected capacity change from 0 to 512 [ 41.948610][ T4297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.003476][ T4303] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 42.011684][ T4303] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.195'. [ 42.021912][ T4297] vhci_hcd: invalid port number 96 [ 42.027080][ T4297] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 42.064985][ T29] audit: type=1400 audit(42.054:488): avc: denied { mount } for pid=4304 comm="syz.3.197" name="/" dev="configfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.075916][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.088344][ T29] audit: type=1400 audit(42.084:489): avc: denied { search } for pid=4304 comm="syz.3.197" name="/" dev="configfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.117244][ T29] audit: type=1400 audit(42.084:490): avc: denied { search } for pid=4304 comm="syz.3.197" name="/" dev="configfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.138639][ T29] audit: type=1400 audit(42.084:491): avc: denied { read open } for pid=4304 comm="syz.3.197" path="/" dev="configfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.173546][ T4299] vlan2: entered allmulticast mode [ 42.178930][ T4299] dummy0: entered allmulticast mode [ 42.274304][ T29] audit: type=1400 audit(42.264:492): avc: denied { append } for pid=4318 comm="syz.3.203" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 42.275551][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 42.330149][ T29] audit: type=1400 audit(42.324:493): avc: denied { create } for pid=4323 comm="syz.5.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 42.356628][ T29] audit: type=1400 audit(42.344:494): avc: denied { ioctl } for pid=4323 comm="syz.5.205" path="socket:[7535]" dev="sockfs" ino=7535 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 42.618857][ T4343] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 42.635190][ T4345] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 42.645615][ T4327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.692579][ T4345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.718040][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 42.746121][ T4351] bond1 (unregistering): Released all slaves [ 42.854666][ T4327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.918180][ T4355] loop3: detected capacity change from 0 to 1024 [ 42.925184][ T4355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.953341][ T4355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 42.963470][ T4355] System zones: 0-1, 3-36 [ 42.969819][ T4355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.005483][ T4358] sd 0:0:1:0: device reset [ 43.013495][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.042549][ T4327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.061752][ T4361] openvswitch: netlink: Message has 6 unknown bytes. [ 43.134675][ T4369] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 649 [ 43.296032][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 43.373201][ T4380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.409007][ T4327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.515342][ T3703] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.531408][ T3722] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.552763][ T3722] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.565569][ T3722] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.665135][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.679820][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 43.688667][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 43.695885][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.275327][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 44.720023][ T4469] Set syz1 is full, maxelem 65536 reached [ 44.840833][ T4499] loop3: detected capacity change from 0 to 764 [ 44.857737][ T4499] Symlink component flag not implemented [ 44.863691][ T4499] Symlink component flag not implemented (129) [ 44.870768][ T4499] rock: directory entry would overflow storage [ 44.876964][ T4499] rock: sig=0x4f50, size=4, remaining=3 [ 44.882686][ T4499] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 44.967820][ T4510] loop1: detected capacity change from 0 to 512 [ 45.022473][ T4510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.050476][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 45.103613][ T4519] team1: entered promiscuous mode [ 45.109294][ T4519] team1: entered allmulticast mode [ 45.127243][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.644175][ T4589] loop1: detected capacity change from 0 to 512 [ 45.672226][ T4589] EXT4-fs: Ignoring removed nobh option [ 45.685363][ T4589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.724620][ T4589] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.268: iget: bad i_size value: 38620345925642 [ 45.750703][ T4589] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.268: couldn't read orphan inode 15 (err -117) [ 45.775516][ T4589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.889334][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.946153][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.977119][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.036730][ T4631] tipc: Started in network mode [ 46.041809][ T4631] tipc: Node identity ac14140f, cluster identity 4711 [ 46.049430][ T4631] tipc: New replicast peer: 255.255.255.83 [ 46.055299][ T4631] tipc: Enabled bearer , priority 10 [ 46.244017][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 46.253144][ T4643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'. [ 46.262095][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 46.271822][ T4643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'. [ 46.280693][ T4643] netlink: 'syz.1.285': attribute type 6 has an invalid length. [ 46.450086][ T4649] loop5: detected capacity change from 0 to 512 [ 46.470053][ T4649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.497441][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.520753][ T4655] netlink: 'syz.5.289': attribute type 1 has an invalid length. [ 46.583115][ T4655] veth0_macvtap: entered allmulticast mode [ 46.762059][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 46.762074][ T29] audit: type=1326 audit(46.754:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78082a5b67 code=0x7ffc0000 [ 46.763221][ T4668] @: renamed from vlan0 (while UP) [ 46.769095][ T29] audit: type=1400 audit(46.754:809): avc: denied { ioctl } for pid=4666 comm="syz.1.296" path="socket:[7996]" dev="sockfs" ino=7996 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.821080][ T29] audit: type=1326 audit(46.764:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f780824ada9 code=0x7ffc0000 [ 46.843581][ T29] audit: type=1326 audit(46.764:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f78082aeba9 code=0x7ffc0000 [ 46.867921][ T29] audit: type=1326 audit(46.784:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78082a5b67 code=0x7ffc0000 [ 46.891024][ T29] audit: type=1326 audit(46.784:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f780824ada9 code=0x7ffc0000 [ 46.913772][ T29] audit: type=1326 audit(46.784:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f78082aeba9 code=0x7ffc0000 [ 46.936588][ T29] audit: type=1326 audit(46.814:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78082a5b67 code=0x7ffc0000 [ 46.959742][ T29] audit: type=1326 audit(46.814:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f780824ada9 code=0x7ffc0000 [ 46.982336][ T29] audit: type=1326 audit(46.814:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f78082aeba9 code=0x7ffc0000 [ 47.046798][ T3398] tipc: Node number set to 2886997007 [ 47.190227][ T4695] vlan2: entered allmulticast mode [ 47.195494][ T4695] dummy0: entered allmulticast mode [ 47.244550][ T4700] loop5: detected capacity change from 0 to 1024 [ 47.251857][ T4700] EXT4-fs: Ignoring removed orlov option [ 47.267036][ T4700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.509700][ T4715] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 47.661002][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.711175][ T4738] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 47.737316][ T4736] vlan0: entered allmulticast mode [ 47.750800][ T4736] dummy0: entered allmulticast mode [ 47.767691][ T4738] bond1: (slave veth3): Enslaving as an active interface with a down link [ 47.921931][ T4738] bond1: entered promiscuous mode [ 47.927737][ T4738] bond1: entered allmulticast mode [ 47.993549][ T4738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.272875][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.313696][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.434409][ T4759] loop2: detected capacity change from 0 to 512 [ 48.452539][ T4749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.476870][ T4759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.493030][ T4759] EXT4-fs (loop2): 1 truncate cleaned up [ 48.512027][ T4759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.680574][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.796831][ T4749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.839738][ T4766] loop3: detected capacity change from 0 to 128 [ 48.858434][ T4766] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 48.911939][ T4766] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 48.963628][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.081249][ T4749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.233025][ T4749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.315874][ T3703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.340860][ T3684] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.376383][ T3684] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.403270][ T3684] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.446484][ T4790] bridge: RTM_NEWNEIGH with invalid ether address [ 49.988053][ T4830] hub 6-0:1.0: USB hub found [ 49.993814][ T4825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.000393][ T4830] hub 6-0:1.0: 8 ports detected [ 50.094895][ T4833] tipc: Enabling of bearer rejected, failed to enable media [ 50.115515][ T4773] syz.2.338 (4773) used greatest stack depth: 7304 bytes left [ 50.353302][ T4825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.548120][ T4868] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.589891][ T4888] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000008 [ 50.709454][ T4825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.738295][ T4868] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.829581][ T4825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.863220][ T4868] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.906037][ T3684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.940537][ T3684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.953763][ T4868] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.987684][ T3684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.024645][ T3684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.084955][ T3684] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.120415][ T3684] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.147646][ T3684] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.169048][ T3684] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.253595][ T4949] tls_set_device_offload: netdev not found [ 51.409052][ T4954] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.427386][ T4954] vhci_hcd: invalid port number 96 [ 51.432637][ T4954] vhci_hcd: default hub control req: 0017 vfffc i0060 l0 [ 51.690436][ T4962] netlink: 96 bytes leftover after parsing attributes in process `syz.4.394'. [ 51.779080][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 51.779096][ T29] audit: type=1326 audit(51.734:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28ff4a5b67 code=0x7ffc0000 [ 51.808573][ T29] audit: type=1326 audit(51.734:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28ff44ada9 code=0x7ffc0000 [ 51.831194][ T29] audit: type=1326 audit(51.734:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f28ff4aeba9 code=0x7ffc0000 [ 51.854426][ T29] audit: type=1326 audit(51.744:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28ff4a5b67 code=0x7ffc0000 [ 51.877637][ T29] audit: type=1326 audit(51.744:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28ff44ada9 code=0x7ffc0000 [ 51.894742][ T4973] $H: renamed from bond0 (while UP) [ 51.900704][ T29] audit: type=1326 audit(51.744:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f28ff4aeba9 code=0x7ffc0000 [ 51.928883][ T29] audit: type=1326 audit(51.754:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28ff4a5b67 code=0x7ffc0000 [ 51.952034][ T29] audit: type=1326 audit(51.754:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28ff44ada9 code=0x7ffc0000 [ 51.974862][ T29] audit: type=1326 audit(51.754:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f28ff4aeba9 code=0x7ffc0000 [ 51.998145][ T29] audit: type=1326 audit(51.764:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28ff4a5b67 code=0x7ffc0000 [ 52.022286][ T4973] $H: entered promiscuous mode [ 52.027542][ T4973] bond_slave_0: entered promiscuous mode [ 52.033267][ T4973] bond_slave_1: entered promiscuous mode [ 52.328886][ T4999] ref_ctr increment failed for inode: 0x114 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888131d71cc0 [ 52.356118][ T4999] ref_ctr increment failed for inode: 0x114 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888131d71cc0 [ 52.394833][ T4998] uprobe: syz.5.406:4998 failed to unregister, leaking uprobe [ 52.480410][ T5002] veth1_to_bond: entered allmulticast mode [ 52.486675][ T5002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.506723][ T5002] bond_slave_1: entered promiscuous mode [ 52.516174][ T5002] bond_slave_1: left promiscuous mode [ 52.521821][ T5002] veth1_to_bond: left allmulticast mode [ 52.577665][ T4998] uprobe: syz.5.406:4998 failed to unregister, leaking uprobe [ 52.685371][ T5010] tipc: Started in network mode [ 52.690434][ T5010] tipc: Node identity 4aacb8532074, cluster identity 4711 [ 52.697673][ T5010] tipc: Enabled bearer , priority 0 [ 52.707603][ T5010] tipc: Disabling bearer [ 52.888857][ T4995] syz.3.404 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 52.903118][ T4995] CPU: 1 UID: 0 PID: 4995 Comm: syz.3.404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.903203][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.903215][ T4995] Call Trace: [ 52.903221][ T4995] [ 52.903229][ T4995] __dump_stack+0x1d/0x30 [ 52.903254][ T4995] dump_stack_lvl+0xe8/0x140 [ 52.903275][ T4995] dump_stack+0x15/0x1b [ 52.903295][ T4995] dump_header+0x81/0x220 [ 52.903480][ T4995] oom_kill_process+0x342/0x400 [ 52.903508][ T4995] out_of_memory+0x979/0xb80 [ 52.903539][ T4995] try_charge_memcg+0x5e6/0x9e0 [ 52.903638][ T4995] obj_cgroup_charge_pages+0xa6/0x150 [ 52.903666][ T4995] __memcg_kmem_charge_page+0x9f/0x170 [ 52.903703][ T4995] __alloc_frozen_pages_noprof+0x188/0x360 [ 52.903779][ T4995] alloc_pages_mpol+0xb3/0x250 [ 52.903807][ T4995] alloc_pages_noprof+0x90/0x130 [ 52.903834][ T4995] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 52.903951][ T4995] __kvmalloc_node_noprof+0x30f/0x4e0 [ 52.903994][ T4995] ? ip_set_alloc+0x1f/0x30 [ 52.904012][ T4995] ? ip_set_alloc+0x1f/0x30 [ 52.904065][ T4995] ? __kmalloc_cache_noprof+0x189/0x320 [ 52.904100][ T4995] ip_set_alloc+0x1f/0x30 [ 52.904122][ T4995] hash_netiface_create+0x282/0x740 [ 52.904274][ T4995] ? __pfx_hash_netiface_create+0x10/0x10 [ 52.904299][ T4995] ip_set_create+0x3c9/0x960 [ 52.904355][ T4995] ? __nla_parse+0x40/0x60 [ 52.904383][ T4995] nfnetlink_rcv_msg+0x4c3/0x590 [ 52.904432][ T4995] netlink_rcv_skb+0x123/0x220 [ 52.904455][ T4995] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 52.904531][ T4995] nfnetlink_rcv+0x16b/0x1690 [ 52.904573][ T4995] ? nlmon_xmit+0x4f/0x60 [ 52.904602][ T4995] ? consume_skb+0x49/0x150 [ 52.904774][ T4995] ? nlmon_xmit+0x4f/0x60 [ 52.904863][ T4995] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 52.904891][ T4995] ? __dev_queue_xmit+0x1200/0x2000 [ 52.904918][ T4995] ? __dev_queue_xmit+0x182/0x2000 [ 52.904943][ T4995] ? __rcu_read_unlock+0x4f/0x70 [ 52.904968][ T4995] ? ref_tracker_free+0x37d/0x3e0 [ 52.905006][ T4995] ? __netlink_deliver_tap+0x4dc/0x500 [ 52.905037][ T4995] netlink_unicast+0x5bd/0x690 [ 52.905061][ T4995] netlink_sendmsg+0x58b/0x6b0 [ 52.905111][ T4995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.905137][ T4995] __sock_sendmsg+0x142/0x180 [ 52.905171][ T4995] ____sys_sendmsg+0x31e/0x4e0 [ 52.905201][ T4995] ___sys_sendmsg+0x17b/0x1d0 [ 52.905318][ T4995] __x64_sys_sendmsg+0xd4/0x160 [ 52.905346][ T4995] x64_sys_call+0x191e/0x2ff0 [ 52.905369][ T4995] do_syscall_64+0xd2/0x200 [ 52.905403][ T4995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.905481][ T4995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.905511][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.905532][ T4995] RIP: 0033:0x7f28ff4aeba9 [ 52.905550][ T4995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.905566][ T4995] RSP: 002b:00007f28fdf0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.905646][ T4995] RAX: ffffffffffffffda RBX: 00007f28ff6f5fa0 RCX: 00007f28ff4aeba9 [ 52.905658][ T4995] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 52.905672][ T4995] RBP: 00007f28ff531e19 R08: 0000000000000000 R09: 0000000000000000 [ 52.905686][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.905781][ T4995] R13: 00007f28ff6f6038 R14: 00007f28ff6f5fa0 R15: 00007ffe12026038 [ 52.905839][ T4995] [ 52.905890][ T4995] memory: usage 307200kB, limit 307200kB, failcnt 318 [ 53.249279][ T4995] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 53.257238][ T4995] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 53.264538][ T4995] Memory cgroup stats for /syz3: [ 53.277415][ T4995] cache 0 [ 53.285315][ T4995] rss 0 [ 53.288133][ T4995] shmem 0 [ 53.291085][ T4995] mapped_file 0 [ 53.294549][ T4995] dirty 0 [ 53.297511][ T4995] writeback 0 [ 53.300835][ T4995] workingset_refault_anon 4 [ 53.305342][ T4995] workingset_refault_file 252 [ 53.310113][ T4995] swap 192512 [ 53.313413][ T4995] swapcached 0 [ 53.316826][ T4995] pgpgin 9615 [ 53.320388][ T4995] pgpgout 9615 [ 53.323800][ T4995] pgfault 15909 [ 53.327298][ T4995] pgmajfault 6 [ 53.330764][ T4995] inactive_anon 0 [ 53.334399][ T4995] active_anon 0 [ 53.337946][ T4995] inactive_file 0 [ 53.341739][ T4995] active_file 0 [ 53.345247][ T4995] unevictable 0 [ 53.348793][ T4995] hierarchical_memory_limit 314572800 [ 53.354167][ T4995] hierarchical_memsw_limit 9223372036854771712 [ 53.360359][ T4995] total_cache 0 [ 53.363944][ T4995] total_rss 0 [ 53.367269][ T4995] total_shmem 0 [ 53.370739][ T4995] total_mapped_file 0 [ 53.374805][ T4995] total_dirty 0 [ 53.378494][ T4995] total_writeback 0 [ 53.382308][ T4995] total_workingset_refault_anon 4 [ 53.387357][ T4995] total_workingset_refault_file 252 [ 53.392560][ T4995] total_swap 192512 [ 53.396384][ T4995] total_swapcached 0 [ 53.400365][ T4995] total_pgpgin 9615 [ 53.404212][ T4995] total_pgpgout 9615 [ 53.408134][ T4995] total_pgfault 15923 [ 53.412121][ T4995] total_pgmajfault 8 [ 53.416098][ T4995] total_inactive_anon 0 [ 53.420340][ T4995] total_active_anon 0 [ 53.424329][ T4995] total_inactive_file 0 [ 53.428560][ T4995] total_active_file 0 [ 53.432550][ T4995] total_unevictable 0 [ 53.436631][ T4995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3/syz1,task=syz.3.404,pid=4994,uid=0 [ 53.451673][ T4995] Memory cgroup out of memory: Killed process 4994 (syz.3.404) total-vm:95808kB, anon-rss:1072kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 53.571124][ T5028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.582927][ T5028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.725422][ T5033] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.742998][ T5035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 53.771381][ T5037] loop2: detected capacity change from 0 to 512 [ 53.785081][ T5037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.800107][ T5037] EXT4-fs (loop2): 1 truncate cleaned up [ 53.806339][ T5037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.806826][ T5033] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.881110][ T5033] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.930362][ T5033] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.963155][ T5045] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 53.983196][ T5045] bond1: entered promiscuous mode [ 53.988310][ T5045] bond1: entered allmulticast mode [ 53.994113][ T5045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.010897][ T5045] ip6gretap1: entered promiscuous mode [ 54.016487][ T5045] ip6gretap1: entered allmulticast mode [ 54.023227][ T5045] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 54.042569][ T3676] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.068119][ T5037] ================================================================== [ 54.073959][ T3676] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.076241][ T5037] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 54.088223][ T3676] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.091498][ T5037] [ 54.091508][ T5037] write to 0xffff88811a0a3254 of 4 bytes by task 5043 on cpu 1: [ 54.103371][ T3676] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.109736][ T5037] xas_set_mark+0x12b/0x140 [ 54.109776][ T5037] __folio_start_writeback+0x1dd/0x440 [ 54.109799][ T5037] ext4_bio_write_folio+0x5ad/0x9f0 [ 54.109823][ T5037] mpage_process_page_bufs+0x4a1/0x620 [ 54.138608][ T5037] mpage_prepare_extent_to_map+0x786/0xc00 [ 54.144498][ T5037] ext4_do_writepages+0xa05/0x2750 [ 54.149818][ T5037] ext4_writepages+0x176/0x300 [ 54.154694][ T5037] do_writepages+0x1c6/0x310 [ 54.159305][ T5037] file_write_and_wait_range+0x156/0x2c0 [ 54.165061][ T5037] generic_buffers_fsync_noflush+0x45/0x120 [ 54.171003][ T5037] ext4_sync_file+0x1ab/0x690 [ 54.175712][ T5037] vfs_fsync_range+0x10a/0x130 [ 54.180509][ T5037] ext4_buffered_write_iter+0x34f/0x3c0 [ 54.186279][ T5037] ext4_file_write_iter+0xdbf/0xf00 [ 54.191530][ T5037] iter_file_splice_write+0x666/0xa60 [ 54.196930][ T5037] direct_splice_actor+0x156/0x2a0 [ 54.202062][ T5037] splice_direct_to_actor+0x312/0x680 [ 54.207454][ T5037] do_splice_direct+0xda/0x150 [ 54.212246][ T5037] do_sendfile+0x380/0x650 [ 54.216697][ T5037] __x64_sys_sendfile64+0x105/0x150 [ 54.221962][ T5037] x64_sys_call+0x2bb0/0x2ff0 [ 54.226662][ T5037] do_syscall_64+0xd2/0x200 [ 54.231213][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.237140][ T5037] [ 54.239479][ T5037] read to 0xffff88811a0a3254 of 4 bytes by task 5037 on cpu 0: [ 54.247040][ T5037] xas_find_marked+0x5dc/0x620 [ 54.252195][ T5037] find_get_entry+0x5d/0x380 [ 54.256806][ T5037] filemap_get_folios_tag+0x92/0x210 [ 54.262207][ T5037] mpage_prepare_extent_to_map+0x320/0xc00 [ 54.268447][ T5037] ext4_do_writepages+0x708/0x2750 [ 54.273584][ T5037] ext4_writepages+0x176/0x300 [ 54.278443][ T5037] do_writepages+0x1c6/0x310 [ 54.283065][ T5037] file_write_and_wait_range+0x156/0x2c0 [ 54.288968][ T5037] generic_buffers_fsync_noflush+0x45/0x120 [ 54.294888][ T5037] ext4_sync_file+0x1ab/0x690 [ 54.299588][ T5037] vfs_fsync_range+0x10a/0x130 [ 54.304379][ T5037] ext4_buffered_write_iter+0x34f/0x3c0 [ 54.309996][ T5037] ext4_file_write_iter+0xdbf/0xf00 [ 54.315232][ T5037] iter_file_splice_write+0x666/0xa60 [ 54.320625][ T5037] direct_splice_actor+0x156/0x2a0 [ 54.325767][ T5037] splice_direct_to_actor+0x312/0x680 [ 54.331161][ T5037] do_splice_direct+0xda/0x150 [ 54.336027][ T5037] do_sendfile+0x380/0x650 [ 54.340460][ T5037] __x64_sys_sendfile64+0x105/0x150 [ 54.345784][ T5037] x64_sys_call+0x2bb0/0x2ff0 [ 54.350481][ T5037] do_syscall_64+0xd2/0x200 [ 54.355011][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.360916][ T5037] [ 54.363257][ T5037] value changed: 0x0a000021 -> 0x04000021 [ 54.369020][ T5037] [ 54.371361][ T5037] Reported by Kernel Concurrency Sanitizer on: [ 54.377611][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.2.422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.387253][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.397325][ T5037] ================================================================== [ 54.407128][ T3671] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.547046][ T3713] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 54.572214][ T5037] ================================================================== [ 54.580336][ T5037] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 54.588434][ T5037] [ 54.590864][ T5037] write to 0xffff8881166c0be8 of 8 bytes by task 5043 on cpu 1: [ 54.598594][ T5037] filemap_splice_read+0x4f4/0x740 [ 54.603821][ T5037] ext4_file_splice_read+0x8f/0xb0 [ 54.609062][ T5037] splice_direct_to_actor+0x26c/0x680 [ 54.614463][ T5037] do_splice_direct+0xda/0x150 [ 54.619341][ T5037] do_sendfile+0x380/0x650 [ 54.623840][ T5037] __x64_sys_sendfile64+0x105/0x150 [ 54.629067][ T5037] x64_sys_call+0x2bb0/0x2ff0 [ 54.633851][ T5037] do_syscall_64+0xd2/0x200 [ 54.638381][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.644310][ T5037] [ 54.646649][ T5037] write to 0xffff8881166c0be8 of 8 bytes by task 5037 on cpu 0: [ 54.654297][ T5037] filemap_splice_read+0x4f4/0x740 [ 54.659524][ T5037] ext4_file_splice_read+0x8f/0xb0 [ 54.664672][ T5037] splice_direct_to_actor+0x26c/0x680 [ 54.670069][ T5037] do_splice_direct+0xda/0x150 [ 54.675109][ T5037] do_sendfile+0x380/0x650 [ 54.679560][ T5037] __x64_sys_sendfile64+0x105/0x150 [ 54.684784][ T5037] x64_sys_call+0x2bb0/0x2ff0 [ 54.689484][ T5037] do_syscall_64+0xd2/0x200 [ 54.694020][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.699941][ T5037] [ 54.702273][ T5037] value changed: 0x000000000000047f -> 0x0000000000000480 [ 54.709391][ T5037] [ 54.711724][ T5037] Reported by Kernel Concurrency Sanitizer on: [ 54.717951][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.2.422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.727686][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.737757][ T5037] ================================================================== [ 54.757442][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.