last executing test programs: 1.120269053s ago: executing program 0 (id=225): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.096042793s ago: executing program 0 (id=226): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) acct(0x0) 1.067011713s ago: executing program 0 (id=229): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.033471083s ago: executing program 0 (id=232): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) exit(0xffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 821.915605ms ago: executing program 1 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 806.574835ms ago: executing program 1 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) 791.959955ms ago: executing program 1 (id=243): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 714.503355ms ago: executing program 3 (id=248): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xff}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 686.863426ms ago: executing program 3 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 643.388986ms ago: executing program 3 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) 598.968726ms ago: executing program 3 (id=255): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x400}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x9, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 590.830036ms ago: executing program 1 (id=256): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1, 0x3, 0x5) 572.381266ms ago: executing program 1 (id=257): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x3c}}, 0xeb64d656001f6f32) 571.958126ms ago: executing program 3 (id=258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 543.647947ms ago: executing program 1 (id=259): ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 345.608858ms ago: executing program 4 (id=262): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 332.020028ms ago: executing program 3 (id=263): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 329.917928ms ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 300.028238ms ago: executing program 4 (id=266): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 267.550268ms ago: executing program 4 (id=268): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 262.452788ms ago: executing program 2 (id=269): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 211.589838ms ago: executing program 2 (id=270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xf, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x8, 0x0) 138.959609ms ago: executing program 0 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) stat(0x0, 0x0) 135.116789ms ago: executing program 2 (id=272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1fffffffffffffce, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 87.845009ms ago: executing program 0 (id=273): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x10, &(0x7f0000000080)={0x2, 0x0, 0x3}) io_setup(0x2, &(0x7f0000000180)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000001c0)=[{}], 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0xe]}, 0x8}) 74.775359ms ago: executing program 4 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000010000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 53.81918ms ago: executing program 2 (id=275): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) 35.431329ms ago: executing program 4 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rpc\x00') fchdir(r1) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 18.96667ms ago: executing program 2 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 0s ago: executing program 2 (id=278): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x9ae6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 23.318305][ T29] audit: type=1400 audit(1761845090.788:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.341239][ T29] audit: type=1400 audit(1761845090.818:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.341964][ T3302] cgroup: Unknown subsys name 'net' [ 23.368865][ T29] audit: type=1400 audit(1761845090.838:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.529815][ T3302] cgroup: Unknown subsys name 'cpuset' [ 23.535908][ T3302] cgroup: Unknown subsys name 'rlimit' [ 23.644530][ T29] audit: type=1400 audit(1761845091.118:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.667869][ T29] audit: type=1400 audit(1761845091.118:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.683708][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.688301][ T29] audit: type=1400 audit(1761845091.118:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.717196][ T29] audit: type=1400 audit(1761845091.118:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.737487][ T29] audit: type=1400 audit(1761845091.128:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.762301][ T29] audit: type=1400 audit(1761845091.128:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.773137][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.785616][ T29] audit: type=1400 audit(1761845091.178:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.654523][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.723766][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.730881][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.738050][ T3312] bridge_slave_0: entered allmulticast mode [ 25.744375][ T3312] bridge_slave_0: entered promiscuous mode [ 25.754467][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.761535][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.769139][ T3312] bridge_slave_1: entered allmulticast mode [ 25.775590][ T3312] bridge_slave_1: entered promiscuous mode [ 25.792454][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.804914][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 25.839600][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.856172][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.869445][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.886729][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 25.933243][ T3312] team0: Port device team_slave_0 added [ 25.956426][ T3312] team0: Port device team_slave_1 added [ 25.968700][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.975799][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.982960][ T3313] bridge_slave_0: entered allmulticast mode [ 25.989241][ T3313] bridge_slave_0: entered promiscuous mode [ 25.995969][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.003056][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.010219][ T3313] bridge_slave_1: entered allmulticast mode [ 26.016448][ T3313] bridge_slave_1: entered promiscuous mode [ 26.042523][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.049599][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.056717][ T3322] bridge_slave_0: entered allmulticast mode [ 26.063046][ T3322] bridge_slave_0: entered promiscuous mode [ 26.069559][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.076521][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.102427][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.131264][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.138344][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.145652][ T3322] bridge_slave_1: entered allmulticast mode [ 26.151965][ T3322] bridge_slave_1: entered promiscuous mode [ 26.158300][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.165251][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.191133][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.207433][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.216662][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.223817][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.230949][ T3316] bridge_slave_0: entered allmulticast mode [ 26.237414][ T3316] bridge_slave_0: entered promiscuous mode [ 26.254580][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.261648][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.268727][ T3319] bridge_slave_0: entered allmulticast mode [ 26.275061][ T3319] bridge_slave_0: entered promiscuous mode [ 26.282307][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.291424][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.298519][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.305659][ T3319] bridge_slave_1: entered allmulticast mode [ 26.311941][ T3319] bridge_slave_1: entered promiscuous mode [ 26.317955][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.325016][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.332202][ T3316] bridge_slave_1: entered allmulticast mode [ 26.338524][ T3316] bridge_slave_1: entered promiscuous mode [ 26.355443][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.378809][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.388881][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.407977][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.418010][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.435971][ T3313] team0: Port device team_slave_0 added [ 26.446807][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.465921][ T3313] team0: Port device team_slave_1 added [ 26.473354][ T3312] hsr_slave_0: entered promiscuous mode [ 26.479412][ T3312] hsr_slave_1: entered promiscuous mode [ 26.493705][ T3316] team0: Port device team_slave_0 added [ 26.500083][ T3319] team0: Port device team_slave_0 added [ 26.506220][ T3322] team0: Port device team_slave_0 added [ 26.521421][ T3316] team0: Port device team_slave_1 added [ 26.527754][ T3319] team0: Port device team_slave_1 added [ 26.534063][ T3322] team0: Port device team_slave_1 added [ 26.549779][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.556818][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.582903][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.606699][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.613696][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.639869][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.650683][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.657645][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.683538][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.710211][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.717154][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.743107][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.764375][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.771345][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.797249][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.808186][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.815146][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.841059][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.854661][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.861619][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.887518][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.905007][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.912008][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.937970][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.957212][ T3313] hsr_slave_0: entered promiscuous mode [ 26.963102][ T3313] hsr_slave_1: entered promiscuous mode [ 26.968920][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 26.974647][ T3313] Cannot create hsr debugfs directory [ 27.013634][ T3316] hsr_slave_0: entered promiscuous mode [ 27.019622][ T3316] hsr_slave_1: entered promiscuous mode [ 27.025471][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.031211][ T3316] Cannot create hsr debugfs directory [ 27.062928][ T3319] hsr_slave_0: entered promiscuous mode [ 27.068704][ T3319] hsr_slave_1: entered promiscuous mode [ 27.074905][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 27.080652][ T3319] Cannot create hsr debugfs directory [ 27.093330][ T3322] hsr_slave_0: entered promiscuous mode [ 27.099456][ T3322] hsr_slave_1: entered promiscuous mode [ 27.105315][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.111094][ T3322] Cannot create hsr debugfs directory [ 27.241872][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.259641][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.268095][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.282183][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.303193][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.316020][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.327840][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.336635][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.356372][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.365164][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.381035][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.390285][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.415458][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.433602][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.441870][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.450473][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.490366][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.500714][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.509683][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.518183][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.528801][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.546854][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.558419][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.566365][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.573417][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.595234][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.603965][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.611079][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.623040][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.633493][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.640538][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.665373][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.672454][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.698657][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.715729][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.722800][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.740221][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.747340][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.784397][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.793889][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.816459][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.828704][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.846807][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.857614][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.864745][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.873195][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.880256][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.894593][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.911802][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.918856][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.927863][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.935003][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.962268][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.972684][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.002869][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.068541][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.114155][ T3313] veth0_vlan: entered promiscuous mode [ 28.124769][ T3313] veth1_vlan: entered promiscuous mode [ 28.145959][ T3316] veth0_vlan: entered promiscuous mode [ 28.156702][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.176135][ T3312] veth0_vlan: entered promiscuous mode [ 28.187712][ T3312] veth1_vlan: entered promiscuous mode [ 28.196771][ T3313] veth0_macvtap: entered promiscuous mode [ 28.203632][ T3316] veth1_vlan: entered promiscuous mode [ 28.217425][ T3312] veth0_macvtap: entered promiscuous mode [ 28.224914][ T3313] veth1_macvtap: entered promiscuous mode [ 28.242057][ T3312] veth1_macvtap: entered promiscuous mode [ 28.252509][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.260140][ T3316] veth0_macvtap: entered promiscuous mode [ 28.274066][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.284802][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.296829][ T296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.306916][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.319738][ T296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.328506][ T296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.338187][ T3316] veth1_macvtap: entered promiscuous mode [ 28.354189][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.354202][ T29] audit: type=1400 audit(1761845095.828:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.7pp0k4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.362941][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.384428][ T29] audit: type=1400 audit(1761845095.828:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.402542][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.415190][ T29] audit: type=1400 audit(1761845095.828:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.7pp0k4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.420810][ T296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.445942][ T29] audit: type=1400 audit(1761845095.828:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.461292][ T3322] veth0_vlan: entered promiscuous mode [ 28.476413][ T29] audit: type=1400 audit(1761845095.828:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.7pp0k4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.483778][ T3322] veth1_vlan: entered promiscuous mode [ 28.508294][ T29] audit: type=1400 audit(1761845095.828:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.7pp0k4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.541112][ T29] audit: type=1400 audit(1761845095.828:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.562564][ T29] audit: type=1400 audit(1761845095.988:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.585274][ T29] audit: type=1400 audit(1761845095.988:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.608871][ T1870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.621280][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.640883][ T29] audit: type=1400 audit(1761845096.118:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.670687][ T1870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.684666][ T3319] veth0_vlan: entered promiscuous mode [ 28.703649][ T3322] veth0_macvtap: entered promiscuous mode [ 28.722206][ T3319] veth1_vlan: entered promiscuous mode [ 28.737190][ T1870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.757520][ T3319] veth0_macvtap: entered promiscuous mode [ 28.775342][ T3322] veth1_macvtap: entered promiscuous mode [ 28.785568][ T1870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.804016][ T3319] veth1_macvtap: entered promiscuous mode [ 28.820302][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.827711][ T1870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.838252][ T3486] atomic_op ffff88811aa70928 conn xmit_atomic 0000000000000000 [ 28.849265][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.867110][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.894546][ T1870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.906771][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.923859][ T1870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.936225][ T3494] loop0: detected capacity change from 0 to 512 [ 28.951096][ T1870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.990533][ T3494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.017733][ T3494] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.019120][ T1870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.080107][ T1870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.090563][ T1870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.108566][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.133607][ T1870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.145196][ T1870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.154223][ T1870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.163587][ T1870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.198079][ T1870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.330737][ T3534] syz.3.22: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 29.345128][ T3534] CPU: 0 UID: 0 PID: 3534 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.345155][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.345195][ T3534] Call Trace: [ 29.345200][ T3534] [ 29.345207][ T3534] __dump_stack+0x1d/0x30 [ 29.345232][ T3534] dump_stack_lvl+0xe8/0x140 [ 29.345317][ T3534] dump_stack+0x15/0x1b [ 29.345332][ T3534] warn_alloc+0x12b/0x1a0 [ 29.345363][ T3534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 29.345396][ T3534] __vmalloc_node_range_noprof+0x9d/0xed0 [ 29.345451][ T3534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 29.345559][ T3534] ? slow_avc_audit+0x104/0x140 [ 29.345592][ T3534] ? should_fail_ex+0x30/0x280 [ 29.345664][ T3534] ? xskq_create+0x36/0xe0 [ 29.345686][ T3534] vmalloc_user_noprof+0x7d/0xb0 [ 29.345773][ T3534] ? xskq_create+0x80/0xe0 [ 29.345793][ T3534] xskq_create+0x80/0xe0 [ 29.345814][ T3534] xsk_init_queue+0x95/0xf0 [ 29.345832][ T3534] xsk_setsockopt+0x3f5/0x640 [ 29.345849][ T3534] ? __pfx_xsk_setsockopt+0x10/0x10 [ 29.345916][ T3534] __sys_setsockopt+0x184/0x200 [ 29.345947][ T3534] __x64_sys_setsockopt+0x64/0x80 [ 29.345976][ T3534] x64_sys_call+0x20ec/0x3000 [ 29.346067][ T3534] do_syscall_64+0xd2/0x200 [ 29.346143][ T3534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 29.346165][ T3534] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 29.346240][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.346258][ T3534] RIP: 0033:0x7f95462cefc9 [ 29.346330][ T3534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.346344][ T3534] RSP: 002b:00007f9544d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 29.346361][ T3534] RAX: ffffffffffffffda RBX: 00007f9546525fa0 RCX: 00007f95462cefc9 [ 29.346371][ T3534] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 29.346382][ T3534] RBP: 00007f9546351f91 R08: 0000000000000004 R09: 0000000000000000 [ 29.346392][ T3534] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.346419][ T3534] R13: 00007f9546526038 R14: 00007f9546525fa0 R15: 00007fff63035428 [ 29.346437][ T3534] [ 29.346446][ T3534] Mem-Info: [ 29.564758][ T3534] active_anon:5586 inactive_anon:2 isolated_anon:0 [ 29.564758][ T3534] active_file:8213 inactive_file:2226 isolated_file:0 [ 29.564758][ T3534] unevictable:0 dirty:1361 writeback:0 [ 29.564758][ T3534] slab_reclaimable:3056 slab_unreclaimable:13945 [ 29.564758][ T3534] mapped:29074 shmem:182 pagetables:1015 [ 29.564758][ T3534] sec_pagetables:0 bounce:0 [ 29.564758][ T3534] kernel_misc_reclaimable:0 [ 29.564758][ T3534] free:1905062 free_pcp:7345 free_cma:0 [ 29.609686][ T3534] Node 0 active_anon:22344kB inactive_anon:8kB active_file:32852kB inactive_file:8904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116296kB dirty:5444kB writeback:0kB shmem:728kB kernel_stack:3312kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 29.636870][ T3534] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 29.666710][ T3534] lowmem_reserve[]: 0 2881 7859 7859 [ 29.672220][ T3534] Node 0 DMA32 free:2946640kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 29.703599][ T3534] lowmem_reserve[]: 0 0 4978 4978 [ 29.708640][ T3534] Node 0 Normal free:4654364kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22460kB inactive_anon:8kB active_file:32852kB inactive_file:8904kB unevictable:0kB writepending:5444kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:25544kB local_pcp:2176kB free_cma:0kB [ 29.741669][ T3534] lowmem_reserve[]: 0 0 0 0 [ 29.746278][ T3534] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 29.759365][ T3534] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946640kB [ 29.775494][ T3534] Node 0 Normal: 2*4kB (UE) 1*8kB (E) 0*16kB 1*32kB (U) 18*64kB (UM) 14*128kB (ME) 9*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 1133*4096kB (M) = 4653744kB [ 29.792663][ T3534] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 29.801990][ T3534] 10648 total pagecache pages [ 29.806963][ T3534] 2 pages in swap cache [ 29.811155][ T3534] Free swap = 124988kB [ 29.815301][ T3534] Total swap = 124996kB [ 29.818283][ T3542] netlink: 'syz.0.27': attribute type 5 has an invalid length. [ 29.819567][ T3534] 2097051 pages RAM [ 29.830919][ T3534] 0 pages HighMem/MovableOnly [ 29.835585][ T3534] 81083 pages reserved [ 29.891579][ T3542] Zero length message leads to an empty skb [ 30.250111][ T3575] netem: change failed [ 30.259357][ T3581] loop3: detected capacity change from 0 to 1024 [ 30.268797][ T3581] ======================================================= [ 30.268797][ T3581] WARNING: The mand mount option has been deprecated and [ 30.268797][ T3581] and is ignored by this kernel. Remove the mand [ 30.268797][ T3581] option from the mount to silence this warning. [ 30.268797][ T3581] ======================================================= [ 30.377768][ T3590] SELinux: security_context_str_to_sid (staff_) failed with errno=-22 [ 30.377943][ T3581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.581893][ T3608] vlan2: entered allmulticast mode [ 30.742194][ T3617] xt_limit: Overflow, try lower: 0/0 [ 30.881203][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 30.890060][ T3623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 30.898816][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 30.977275][ T3625] SELinux: policydb version 1500455552 does not match my version range 15-35 [ 30.998557][ T3623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 31.007470][ T3623] netlink: 'syz.1.63': attribute type 6 has an invalid length. [ 31.020403][ T3610] mmap: syz.0.57 (3610) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.035361][ T3625] SELinux: failed to load policy [ 31.156805][ T3629] SELinux: Context Ü is not valid (left unmapped). [ 31.393056][ T3639] SELinux: failed to load policy [ 31.453985][ T3643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3643 comm=syz.4.73 [ 31.484646][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.649119][ T3663] loop2: detected capacity change from 0 to 512 [ 31.672609][ T3663] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.685710][ T3663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.686367][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 31.702685][ T3663] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.755982][ T3681] hub 9-0:1.0: USB hub found [ 31.760917][ T3681] hub 9-0:1.0: 8 ports detected [ 31.766097][ T3663] EXT4-fs (loop2): 1 truncate cleaned up [ 31.778961][ T3663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.857068][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.896400][ T3694] loop0: detected capacity change from 0 to 1024 [ 31.948901][ T3694] EXT4-fs: Ignoring removed orlov option [ 31.994173][ T3694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.055870][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.142547][ T3737] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 32.165690][ T41] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 32.170195][ T3740] netlink: 'syz.0.116': attribute type 13 has an invalid length. [ 32.203067][ T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.203102][ T3740] netlink: 'syz.0.116': attribute type 13 has an invalid length. [ 32.219813][ T394] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.228555][ T394] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.244213][ T394] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.013370][ T3797] netem: change failed [ 33.108054][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 33.145083][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 33.178560][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 33.236300][ T3822] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 33.255977][ T3822] SELinux: failed to load policy [ 33.386264][ T3844] loop0: detected capacity change from 0 to 8192 [ 33.437283][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 33.437297][ T29] audit: type=1400 audit(1761845100.908:299): avc: denied { watch } for pid=3858 comm="syz.1.166" path="/proc/69/task/70/ns" dev="proc" ino=6305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.437434][ T3860] syz.3.161 uses obsolete (PF_INET,SOCK_PACKET) [ 33.527359][ T3868] loop4: detected capacity change from 0 to 512 [ 33.536961][ T3868] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.553225][ T29] audit: type=1326 audit(1761845101.018:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1163efc9 code=0x7ffc0000 [ 33.576820][ T29] audit: type=1326 audit(1761845101.028:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ffb1163efc9 code=0x7ffc0000 [ 33.588763][ T3868] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.170: error while reading EA inode 32 err=-116 [ 33.600281][ T29] audit: type=1326 audit(1761845101.028:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1163efc9 code=0x7ffc0000 [ 33.629670][ T3868] EXT4-fs (loop4): 1 orphan inode deleted [ 33.635458][ T29] audit: type=1326 audit(1761845101.028:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1163efc9 code=0x7ffc0000 [ 33.642014][ T3868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.743157][ T29] audit: type=1326 audit(1761845101.178:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ac7efc9 code=0x7ffc0000 [ 33.766520][ T29] audit: type=1326 audit(1761845101.178:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ac7efc9 code=0x7ffc0000 [ 33.789740][ T29] audit: type=1326 audit(1761845101.178:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f963ac7efc9 code=0x7ffc0000 [ 33.813125][ T29] audit: type=1326 audit(1761845101.178:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963ac7efc9 code=0x7ffc0000 [ 33.836374][ T29] audit: type=1326 audit(1761845101.178:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f963ac7efc9 code=0x7ffc0000 [ 33.889598][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.993978][ T3902] tipc: Started in network mode [ 33.998916][ T3902] tipc: Node identity ac14140f, cluster identity 4711 [ 34.010262][ T3904] sg_write: data in/out 196864/1 bytes for SCSI command 0x0-- guessing data in; [ 34.010262][ T3904] program syz.3.186 not setting count and/or reply_len properly [ 34.022032][ T3902] tipc: New replicast peer: 255.255.255.255 [ 34.033218][ T3902] tipc: Enabled bearer , priority 10 [ 34.051645][ T3902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 34.060703][ T3902] tipc: Disabling bearer [ 34.131913][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 34.143741][ T3916] capability: warning: `syz.4.192' uses deprecated v2 capabilities in a way that may be insecure [ 34.222831][ T3924] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 34.269725][ T3931] rdma_op ffff88811b252d80 conn xmit_rdma 0000000000000000 [ 34.389381][ T3947] veth0: entered promiscuous mode [ 34.404778][ T3946] veth0: left promiscuous mode [ 34.439551][ T3953] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 34.446098][ T3953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.453594][ T3953] vhci_hcd vhci_hcd.0: Device attached [ 34.476233][ T3954] vhci_hcd: connection closed [ 34.476448][ T394] vhci_hcd: stop threads [ 34.485404][ T394] vhci_hcd: release socket [ 34.489850][ T394] vhci_hcd: disconnect device [ 34.828858][ T3004] udevd[3004]: worker [3297] terminated by signal 33 (Unknown signal 33) [ 34.923322][ T4022] syz.3.239 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.975460][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.983527][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.336081][ T4068] netlink: 'syz.4.260': attribute type 15 has an invalid length. [ 35.348291][ T296] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.357136][ T296] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.369663][ T296] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.378422][ T296] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.433509][ T4074] loop3: detected capacity change from 0 to 128 [ 35.472229][ T4080] process 'syz.4.266' launched './file0' with NULL argv: empty string added [ 35.796355][ T4106] SELinux: failed to load policy [ 35.813065][ T4086] ================================================================== [ 35.821158][ T4086] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 35.830679][ T4086] [ 35.833004][ T4086] read to 0xffff88810b0f8800 of 512 bytes by task 296 on cpu 1: [ 35.840608][ T4086] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 35.846501][ T4086] generic_perform_write+0x2c2/0x490 [ 35.851761][ T4086] shmem_file_write_iter+0xc5/0xf0 [ 35.856872][ T4086] lo_rw_aio+0x6a0/0x760 [ 35.861095][ T4086] loop_process_work+0x52d/0xa60 [ 35.866016][ T4086] loop_workfn+0x31/0x40 [ 35.870237][ T4086] process_scheduled_works+0x4ce/0x9d0 [ 35.875676][ T4086] worker_thread+0x582/0x770 [ 35.880237][ T4086] kthread+0x489/0x510 [ 35.884284][ T4086] ret_from_fork+0x122/0x1b0 [ 35.888849][ T4086] ret_from_fork_asm+0x1a/0x30 [ 35.893589][ T4086] [ 35.895889][ T4086] write to 0xffff88810b0f886b of 22 bytes by task 4086 on cpu 0: [ 35.903664][ T4086] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 35.909543][ T4086] generic_perform_write+0x2c2/0x490 [ 35.914822][ T4086] __generic_file_write_iter+0x9e/0x120 [ 35.920347][ T4086] generic_file_write_iter+0x8d/0x2f0 [ 35.925701][ T4086] iter_file_splice_write+0x666/0xa60 [ 35.931050][ T4086] direct_splice_actor+0x156/0x2a0 [ 35.936138][ T4086] splice_direct_to_actor+0x312/0x680 [ 35.941489][ T4086] do_splice_direct+0xda/0x150 [ 35.946227][ T4086] do_sendfile+0x380/0x650 [ 35.950624][ T4086] __x64_sys_sendfile64+0x105/0x150 [ 35.955804][ T4086] x64_sys_call+0x2bb4/0x3000 [ 35.960457][ T4086] do_syscall_64+0xd2/0x200 [ 35.964933][ T4086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.970801][ T4086] [ 35.973098][ T4086] Reported by Kernel Concurrency Sanitizer on: [ 35.979222][ T4086] CPU: 0 UID: 0 PID: 4086 Comm: syz.3.263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.988827][ T4086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 35.998863][ T4086] ================================================================== [ 36.041781][ T4086] syz.3.263: attempt to access beyond end of device [ 36.041781][ T4086] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 36.055260][ T4086] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 36.067219][ T4086] syz.3.263: attempt to access beyond end of device [ 36.067219][ T4086] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 36.080650][ T4086] Buffer I/O error on dev loop3, logical block 128, lost async page write