last executing test programs: 2.820776964s ago: executing program 1 (id=2495): syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) 2.664479807s ago: executing program 3 (id=2496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 2.650425778s ago: executing program 3 (id=2497): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 2.621219931s ago: executing program 3 (id=2498): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x20105100, 0x0, 0x0, &(0x7f0000000400), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2.06442589s ago: executing program 3 (id=2500): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17", 0xb6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1.952336999s ago: executing program 1 (id=2501): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) epoll_create(0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@mblk_io_submit}, {@delalloc}]}, 0x1, 0x787, &(0x7f0000001000)="$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") fspick(0xffffffffffffffff, 0x0, 0x1) socket(0x1a, 0x3, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/59, 0x3b) getdents(r2, 0x0, 0x66) 1.768771356s ago: executing program 1 (id=2502): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}], 0x20}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x0, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0xffffffffffffff85, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:port\x00'}]}, 0x20}}, 0x4048800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c0002"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r3, 0x0, 0x0) 1.49245329s ago: executing program 1 (id=2505): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@routing={0x84}]}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0xa5, 0x1}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) ioctl$TCSBRKP(r4, 0x5425, 0x1ff) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000200)={0x81, "6f6bca87831bebb13988d63c452ffc6829ce114ffa744ce24b8c3f8020717e9a19243680e98a1d19544a6c271db4ebb3a73de90b389833fd05bfdbdf3558fe6263386c88d6f9b205faf3d62c185da65b8caf92a32cf8b0b49077f81ce53f42af67ae46198858d39e80762d7068952a74312a70f8f3043761172400282e91f8571afa0d3a61903468415d757f9f2bee2a104080a9747720fd41fbf61c2e4e10fc220650536bb45001874085250a3408a34dd0f540a6a3be8f174327105278685fb45402004af75bba0adf4697b104398af8d0e0ad35cb73cb16240f45ce5cc9d67711f58f811bdec10e0464dbc4c09d14dff6d136aee4cacdbc7d4657e36b7439995de0d14199c55adfe2648f462280a2e8a294a1563c989d74700d3da401cac695e77504be4991f94d5c35e76d4cb07d4dcd4c99febbb0723e4d54dd1b0e435fb60d78a97542ba337995f31f08809dd9608a56978780b97673313494ea8ea1681fa3497b5fe924202e246f17994102d031f6cb8a5cc3788484dab95248f7b99c29e7f1dd0414f7a927fcf4d7d1f09a9373d8cf4467c4c5153cfd73bbc6e8698603c16a34a871d823ed863f03f699df02b41183fb99b5e8b9eacceb9eb3ad82c2c77a10d5da95646dfd00b8da971dae6406f60e9c5397e5b7d723809ad037225a8db4ee89c73b747dc9fc344e9fcaa89aa0cceb4e6dcee4fdd45f2a51bc14938a"}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.49201728s ago: executing program 2 (id=2506): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100e8ffffff00000000230000002000018008000100", @ANYRES32=r4, @ANYBLOB="14000200776731"], 0x34}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x2b6, &(0x7f00000017c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "9e314f", 0x280, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x5e, 0x25, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xbf, "e0ce6423c7085d0a0c47fba1f309046378b85ae4d5735ab5ecb09e99aa67b9e942eb392ba7645114e324702e4ab3f4cd5efd968b4e1b8a84a333d3ca74901f163af6c12d4030e3230b0bf6760adefedc5e0af760af24e883136f2e3e926bd60f2a5d90c6dfe4b1dd95a67c3103358743622057ba1cf15ad6359b582bb4bd55d57cf42f670366aa8fc79440e5f42f5adb0a9b92cb05afa4215cca71923db52a9a68ee3424c1a95c1edfe34bcbb68079221277a968a9a95bc6d8ddbdad502c6b"}, @calipso={0x7, 0x58, {0x0, 0x14, 0x40, 0xffff, [0x1a2, 0xb, 0x50d16de0, 0x31000000, 0xd35, 0x400, 0x4, 0x8, 0x40, 0x1]}}]}, @fragment={0x73, 0x0, 0xc, 0x0, 0x0, 0x4, 0x65}, @srh={0x1d, 0x12, 0x4, 0x9, 0x3, 0x28, 0x0, [@remote, @mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x8, 0x0, 0x6, 0x1, 0x0, 0x3, 0x68}, @routing={0x3b, 0x10, 0x0, 0x1, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback, @mcast2]}], @mld={0x82, 0x0, 0x0, 0x9, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x10b4, 0x32, 0x200, 0x70bd27, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x98, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="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", @typed={0x8, 0x117, 0x0, 0x0, @uid=r7}, @typed={0x8d, 0xcc, 0x0, 0x0, @binary="c6fc14fc2f03468c8ddd2289ff1e175d1d95b1d51e3354a5e9028dd82b42bac7477ffabe0002b79ea8fddcd8e66cda5600bcbe272b358ea546a3e5c1d3cb199862efd7973db83274632eeb38433e06d70aea797247baaa2866383c038df5c7cd004425687e87a419defa8baa55e4341ed4a6851e53d7e02c304fe0ceb9d9dad393c892072a8f6dcd7c"}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x4}, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0x2, 0x2100, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f00000006c0)="ab63c077cfac06f5a16c14dd7464da2c058f1ccb4f14b3fb6e8a7a15264b86f81e1c1c528f1a8c36e8a0d8b7", 0x2c}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x10}}], 0x2, 0x0) 1.390078649s ago: executing program 1 (id=2507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$int_in(r0, 0x5452, 0x0) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.389569049s ago: executing program 2 (id=2508): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") 1.321644955s ago: executing program 2 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@iter={&(0x7f0000000140), 0x10}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) 1.320925955s ago: executing program 2 (id=2510): r0 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000001080)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@broadcast}, {@dev}]}]}}}}}}}, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000100)={0x60, 0x3, 0xa, 0x9, 0x6c, 0x16, &(0x7f0000000080)="f52df65be90a83eb94d8cea733e756be9b9d3a6ae07ca41d785f324b40786c5a6db186117dee7ccdd1b5a350b4091bf355320cc5c7818bb60e2bd227065dd7194c4b696acec126c03a6b5f48b226d74c73693227c5c80fb4972db8073507f7a734be88dc600caaef8b520398"}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000300)=0x4) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) 1.282707958s ago: executing program 1 (id=2512): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') fchdir(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) syz_mount_image$iso9660(&(0x7f0000001dc0), &(0x7f0000000000)='./file0\x00', 0x2110c12, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_user=&#@,euid=', @ANYRESDEC=0xee01, @ANYBLOB="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"], 0x2, 0x9e8, &(0x7f0000000440)="$eJzs3c1vHOd9B/Dv8EWiaUOSbdV1BdtayZVM2yxFUrVUwYdWIlcSXb4UJAVY6MFyLaoQxNat3QK2UaAyUPRUowVa9JDcjJxyMuBLfAl8S27JKYcAgf8FIyflxGBml9SSXHJJhW+WPx9id+flN8/zm53Zebi7s/OE75alo6vGlpaq2yOO3/jxHmTMAXZl/JvPv/isvH16P4fSnTeKnyR9SWpJT5Lnk96x8dmZqQ4F3UtuJfk6KZIcTuNxS26l+O889XD86xQ/LOvd0KGtlkwnS3yv7ff+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1ExNj48PFIcysT0jbdrDUltnbHx2ZkiS0vr5ywv0/BV1et38VXHepOivKWvb7mr7+ePP5z9XJLa6bzQGHuh6pA8ffnkyeeOvflsT9fy8htl8wc5vPViP/z4k3vvLi4ufLAriRx81+rTE3MzE1OXr9VrE3MztUsXLgyfu351rnZ1YrI+d3Nuvj5VG5utX56fma0NjL1aG7l06XytPnRz5sb0tfGhyfryxIt/Njo8fKH21tDf1C/Pzs1Mn3traG7s+sTk5MT0tSqmnF3GXCx3xL+emK/N1y9P1Wp37i4unF+TU3fW7L9l0EinNSmDRjsFjQ6Pjo6MjI6OfNrsPXtlwoU3Lr1xcXi4Z3iNrIvYpZ2Wg+WJjTfzzh/E4RF1Ndr/ZDITmc6NvJ1a27+xjGc2M5naYH7Tcvt/5lx903pb2/9mK9/TMvtEeXc6LzVH+zZo/zfIZe/+PszH+ST38m4Ws5iFfLDvGe3t37XUM52JzGUmE5nK5WpKrTmllku5kAsZzju5npOZSy1XM5HJ1DOXm5nLfOrVHjWW2dRzOfOZyWxqGchYXk0tI7mUSzmfWuoZys3M5Eamcy3juVyVcid3q+f9/CY5rgSNbCVodJOgdY35ttv/+tp/Tvje2fmDODyipWb7f6hz6MDYXiQEAAAA7Lg/+XmOHH/mZ79JirxYfS5/dWKyPrzfaQEAAAA7qDpd74XyobccejGF9/8AAADwuCmq39gVSfpzsjG0/EsoHwIAAADAY6L6/v+lFCcfTvD+HwAAAB4zna+x3zGiGFy+/G/tduPxdjOiMVb0X52YrA+NzUy+OZKz1VUGql8arCutOyl6q58fvJZTjahT/Y3H/ocllnX2lVEjQ2+O5LWcbq7IwMvlw8sDbSJHG5GvNCJfaY3szqrI82UkADzuTm/SHm+1/X8tg42IwRNVk99zok0bPKxlBYCDYqWPnd81uzRr0/43I17aqP3/803e/5cRz+TOycYpBUN5L+9nMbczmOYZByfblbrcG0HjNITBDp8G9DdPWfjlxa4Mrvs8oG9lXVtjFzKawbafCLSUWyzncL4R17072wAA9trpTdvhrbX/gx3e//c7pRAADpSVHux3cWC/1xEAWE0rDQAAAAAAAAAAAAAAAAAAAAAAAAAAADtvSxfw/8XZZHFxIdmDzgJWBvq2k+HmA13Zo5z3faA7yX7V/pfZ9lLlNj4oT52B1QP7fGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTxRJd7vpXcnhJMNJzu19Vrvn/n4nsFNqj7ZY8SAP8lGO7HQ6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfd83r/3el8fhkY1J6upIzSW4l+dv9znEnPdjvBPbNP1T3Ldf/70p6s1Skp7HZU/SOjc/OTJWbvzhczv/m8y8+K2+dy17fq0JZQFnDqs4lmjW0TOldvdTT1VL94wsf3vuX9/+pNn6l2jGvzF+dHJ+6NvtXDwOfK75sdIHQ2g3Ccr7/duan/9My+VCz8i/LNW1vbb1Xq3rH19f7x+2W3qDeLbi7uDBa1jRff3v+X//x7kcts57JqeTlgWRgdU1/X942qOnU2udzteLb4j+LI/n/3Kq2f/lsFEtFuYmOVuv/xJ27iwtD772/eHslp39fldOxnExyO+nbek4nq+NJW9Ve19Vb1jpcBZV3xzuUt6mWEkc2eF6frnaZ/m2tQ23jdah0eN6bGZ1vm9H//vOzObvtLX22Q41tFd8Wvy6u51f5j5b+P7rK7X8mbV+dbYqoIlv2lNZ5q15eXY3Ias1HW2e8s7bMDV+V7IL/yt/lL1a2f1fL8b+5rfbmeNRSY/vXRbL918WPjq5rUR6qWqTja1qk5tFno2WaeR5vRG2Q5x/l9aTnxLaOKK93OKLs1uv/B8VAfpv7+v8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOviLpbje9KzmT5FiSo+V4LVlaG3P/Eerr6i8eJc0d8yg5f/cUG65o8SAP8lGO7HVGAAAAAAAAAOyOK+PffP7FZ+Wt+j6+O3/a1ZxTS3qSHCv+r3dsfHZmqkNBvcmt5a/0+7aXw63y7qmH41+XY893WGh/Tx8AgO+03wcAAP//BZNu0Q==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() readv(r2, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) 1.160860399s ago: executing program 0 (id=2513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 845.034146ms ago: executing program 0 (id=2514): socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000010000104000000efff00000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014000280080001000800000006ef02000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 731.728146ms ago: executing program 2 (id=2515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 660.600172ms ago: executing program 2 (id=2516): syz_read_part_table(0x5bc, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) 660.124362ms ago: executing program 0 (id=2517): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@routing={0x84}]}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0xa5, 0x1}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) ioctl$TCSBRKP(r4, 0x5425, 0x1ff) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000200)={0x81, "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"}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 642.950154ms ago: executing program 3 (id=2518): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 626.282095ms ago: executing program 3 (id=2519): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp(0x0, 0x0, 0x0, r0, r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x4, 0x0, 0x0) socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x104c08e, &(0x7f0000000540)=ANY=[@ANYBLOB='utf8=0,shortname=mixed,uni_xlate=1,shortname=lower,nonumtail=0,rodir,iocharset=cp437,utf8=0,shortname=winnt,tz=UTC,shortname=win95,uny_xlate=1,sys_immutable,rodir,dos1xfloppy,nfs=nostale_ro,nfs=nostale_ro,\x00'], 0x6, 0x2d2, &(0x7f00000008c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) futex(&(0x7f00000001c0)=0x2, 0x0, 0x2, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) utime(&(0x7f00000011c0)='./file0\x00', 0x0) 622.975426ms ago: executing program 0 (id=2520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x3d1a}}, './file2\x00'}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x8}}]}, 0x1, 0x7a7, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) socket$inet(0x2, 0x5, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000380)={'pim6reg0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x0) 527.680354ms ago: executing program 0 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@iter={&(0x7f0000000140), 0x10}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) 527.175074ms ago: executing program 0 (id=2522): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_emit_ethernet(0x1d1, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x19b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000"}, {}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x1, "b8a3e100908f"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x67b783d8a3898a04) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 63.685874ms ago: executing program 4 (id=2528): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = io_uring_setup(0x752d, &(0x7f00000002c0)={0x0, 0x3273, 0x40, 0x0, 0x392}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000040)=""/49, 0x31) setsockopt$sock_timeval(r1, 0x1, 0x48, &(0x7f0000000000)={0x77359400}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000080)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000001c0)={[{@discard}, {@block_validity}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 63.316474ms ago: executing program 4 (id=2529): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 41.002146ms ago: executing program 4 (id=2530): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 40.699216ms ago: executing program 4 (id=2531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_emit_ethernet(0x5fa, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x5c4, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af5"}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0xa5, 0x1}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) ioctl$TCSBRKP(r4, 0x5425, 0x1ff) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000200)={0x81, "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"}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 16.266789ms ago: executing program 4 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x7, @val=@iter={&(0x7f0000000140), 0x10}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 4 (id=2533): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfe, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x28302, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.169662][ T29] audit: type=1326 audit(1725822617.623:18051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.193353][ T29] audit: type=1326 audit(1725822617.623:18052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.216901][ T29] audit: type=1326 audit(1725822617.623:18053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.240301][ T29] audit: type=1326 audit(1725822617.623:18054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.263842][ T29] audit: type=1326 audit(1725822617.623:18055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.287472][ T29] audit: type=1326 audit(1725822617.623:18056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.311016][ T29] audit: type=1326 audit(1725822617.623:18057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 248.335066][T10533] tipc: Started in network mode [ 248.339993][T10533] tipc: Node identity ac1414aa, cluster identity 4711 [ 248.346894][T10533] tipc: New replicast peer: 100.1.1.1 [ 248.352294][T10533] tipc: Enabled bearer , priority 10 [ 248.365310][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.372471][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.398499][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.410202][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.417233][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.443122][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.471955][T10496] hsr_slave_0: entered promiscuous mode [ 248.478512][T10496] hsr_slave_1: entered promiscuous mode [ 248.497991][ T5310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.547147][ T5310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.607950][ T5310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.647085][ T5310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.748122][ T5310] vlan2: left allmulticast mode [ 248.753000][ T5310] vlan2: left promiscuous mode [ 248.757961][ T5310] bridge0: port 3(vlan2) entered disabled state [ 248.758860][T10546] netlink: 'syz.0.1746': attribute type 1 has an invalid length. [ 248.785704][ T5310] bridge_slave_1: left allmulticast mode [ 248.791543][ T5310] bridge_slave_1: left promiscuous mode [ 248.797562][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.813037][ T5310] bridge_slave_0: left allmulticast mode [ 248.818714][ T5310] bridge_slave_0: left promiscuous mode [ 248.824570][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.871880][ T5310] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 248.911432][ T5310] team0: Port device bridge0 removed [ 248.936733][ T5310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.948040][ T5310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.958430][ T5310] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 248.970818][ T5310] bond0 (unregistering): Released all slaves [ 248.979506][ T5310] bond1 (unregistering): Released all slaves [ 248.990452][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 249.106721][ T5310] hsr_slave_0: left promiscuous mode [ 249.112398][ T5310] hsr_slave_1: left promiscuous mode [ 249.118701][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.126158][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.133776][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.141173][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.150649][ T5310] veth1_macvtap: left promiscuous mode [ 249.156230][ T5310] veth0_macvtap: left promiscuous mode [ 249.161799][ T5310] veth1_vlan: left promiscuous mode [ 249.281149][ T5310] team0 (unregistering): Port device team_slave_1 removed [ 249.296056][ T5310] team0 (unregistering): Port device team_slave_0 removed [ 249.473773][ T8] tipc: Node number set to 2886997162 [ 249.666115][T10496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.674744][T10496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.683218][T10496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.692101][T10496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.724806][T10496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.737223][T10496] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.749554][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.756640][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.768658][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.775733][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.843339][T10496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.918988][T10496] veth0_vlan: entered promiscuous mode [ 249.931504][T10496] veth1_vlan: entered promiscuous mode [ 249.947747][T10496] veth0_macvtap: entered promiscuous mode [ 249.955712][T10496] veth1_macvtap: entered promiscuous mode [ 249.966151][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.976745][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.986652][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.997085][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.006905][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.017327][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.028146][T10496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.038004][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.048641][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.058535][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.069156][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.078990][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.089431][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.100702][T10496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.111428][T10496] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.120259][T10496] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.129089][T10496] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.137791][T10496] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.176223][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.183929][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.191306][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.198920][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.206407][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.213854][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.221309][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.228732][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.236181][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.243580][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.251201][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.258601][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.266030][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.273405][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.280783][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.288173][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.295575][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.302964][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.310376][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.317774][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.325573][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.332996][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.340410][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.347906][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.355410][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.362804][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.370227][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.377659][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.385088][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.392468][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.399890][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.407297][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.414755][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.422146][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.429571][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.437066][ T3401] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 250.447074][ T3401] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 251.249115][T10624] bridge0: port 3(bond0) entered blocking state [ 251.255500][T10624] bridge0: port 3(bond0) entered disabled state [ 251.261943][T10624] bond0: entered allmulticast mode [ 251.267206][T10624] bond_slave_0: entered allmulticast mode [ 251.273008][T10624] bond_slave_1: entered allmulticast mode [ 251.280127][T10624] bridge0: port 3(bond0) entered blocking state [ 251.286401][T10624] bridge0: port 3(bond0) entered forwarding state [ 254.186841][T10643] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1776'. [ 254.197025][T10643] gretap0: entered promiscuous mode [ 254.261497][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 254.261510][ T29] audit: type=1400 audit(1725822623.793:18246): avc: denied { listen } for pid=10652 comm="syz.3.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.342185][T10644] chnl_net:caif_netlink_parms(): no params data found [ 254.382012][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.389159][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.397809][T10644] bridge_slave_0: entered allmulticast mode [ 254.404178][T10644] bridge_slave_0: entered promiscuous mode [ 254.411112][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.418344][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.425483][T10644] bridge_slave_1: entered allmulticast mode [ 254.431843][T10644] bridge_slave_1: entered promiscuous mode [ 254.448016][ T29] audit: type=1326 audit(1725822623.983:18247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.471688][ T29] audit: type=1326 audit(1725822623.983:18248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.495375][ T29] audit: type=1326 audit(1725822623.983:18249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.519007][ T29] audit: type=1326 audit(1725822623.983:18250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.542556][ T29] audit: type=1326 audit(1725822623.983:18251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.566160][ T29] audit: type=1326 audit(1725822623.983:18252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.589736][ T29] audit: type=1326 audit(1725822623.983:18253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.613555][ T29] audit: type=1326 audit(1725822623.983:18254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.637245][ T29] audit: type=1326 audit(1725822623.983:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 254.665354][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.677576][ T6479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.692023][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.713009][T10644] team0: Port device team_slave_0 added [ 254.722805][ T6479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.735543][T10644] team0: Port device team_slave_1 added [ 254.753283][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.760353][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.786395][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.801397][ T6479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.813222][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.820212][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.831834][T10686] syz.0.1786[10686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.846202][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.868280][T10686] syz.0.1786[10686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.879284][T10644] hsr_slave_0: entered promiscuous mode [ 254.898037][T10644] hsr_slave_1: entered promiscuous mode [ 254.905370][T10644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.912943][T10644] Cannot create hsr debugfs directory [ 254.921118][ T6479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.986664][ T6479] bridge_slave_1: left allmulticast mode [ 254.992497][ T6479] bridge_slave_1: left promiscuous mode [ 254.998153][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.006120][ T6479] bridge_slave_0: left allmulticast mode [ 255.011796][ T6479] bridge_slave_0: left promiscuous mode [ 255.017568][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.117470][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.129917][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.141190][ T6479] bond0 (unregistering): Released all slaves [ 255.276603][ T6479] hsr_slave_0: left promiscuous mode [ 255.289062][ T6479] hsr_slave_1: left promiscuous mode [ 255.301362][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.308868][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.319914][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.327575][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.361254][ T6479] veth1_macvtap: left promiscuous mode [ 255.366829][ T6479] veth0_macvtap: left promiscuous mode [ 255.372345][ T6479] veth1_vlan: left promiscuous mode [ 255.377597][ T6479] veth0_vlan: left promiscuous mode [ 255.924946][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 255.951361][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 256.287822][T10714] syzkaller1: entered promiscuous mode [ 256.293357][T10714] syzkaller1: entered allmulticast mode [ 256.477306][T10726] veth0_vlan: left promiscuous mode [ 256.483386][T10726] veth0_vlan: entered promiscuous mode [ 256.529078][T10644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.546344][T10644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.559771][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 256.563355][T10644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.580614][T10644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.625167][T10644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.633720][T10739] bridge0: port 3(bond0) entered blocking state [ 256.640481][T10739] bridge0: port 3(bond0) entered disabled state [ 256.651380][T10739] bond0: entered allmulticast mode [ 256.656565][T10739] bond_slave_0: entered allmulticast mode [ 256.662320][T10739] bond_slave_1: entered allmulticast mode [ 256.669401][T10739] bond0: entered promiscuous mode [ 256.674523][T10739] bond_slave_0: entered promiscuous mode [ 256.680389][T10739] bond_slave_1: entered promiscuous mode [ 256.686233][T10739] bridge0: port 3(bond0) entered blocking state [ 256.692530][T10739] bridge0: port 3(bond0) entered forwarding state [ 256.703416][T10644] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.721993][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.729119][ T6471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.747702][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.754791][ T6471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.802843][T10752] syz.0.1819[10752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.803033][T10752] syz.0.1819[10752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.837001][T10644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.861939][T10752] netlink: 'syz.0.1819': attribute type 14 has an invalid length. [ 256.958317][T10644] veth0_vlan: entered promiscuous mode [ 257.015510][T10644] veth1_vlan: entered promiscuous mode [ 257.041219][T10644] veth0_macvtap: entered promiscuous mode [ 257.059638][T10644] veth1_macvtap: entered promiscuous mode [ 257.077167][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.087744][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.097731][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.108269][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.118180][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.128675][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.143703][T10644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.154965][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.165456][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.175383][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.185980][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.195823][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.206406][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.219383][T10644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.227988][T10644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.236750][T10644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.245460][T10644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.254160][T10644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.332069][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.339596][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.347004][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.356388][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.363793][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.371185][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.378620][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.386051][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.393438][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.400940][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.408454][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.415924][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.423313][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.430708][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.438188][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.445669][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.453059][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.460602][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.468102][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.475567][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.499830][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.507244][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.514648][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.522009][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.529423][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.536804][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.544182][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.551557][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.559010][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.566694][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.574135][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.581505][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.588914][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.596314][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.603739][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.611104][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 257.644786][ T3402] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 258.106423][T10786] chnl_net:caif_netlink_parms(): no params data found [ 258.244379][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.251507][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.266293][T10786] bridge_slave_0: entered allmulticast mode [ 258.273130][T10786] bridge_slave_0: entered promiscuous mode [ 258.280197][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.287305][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.294612][T10786] bridge_slave_1: entered allmulticast mode [ 258.301187][T10786] bridge_slave_1: entered promiscuous mode [ 258.336235][T10786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.355320][T10786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.393460][T10786] team0: Port device team_slave_0 added [ 258.401320][T10786] team0: Port device team_slave_1 added [ 258.466148][T10786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.473104][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.499111][T10786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.604533][T10786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.611484][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.637403][T10786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.686843][T10786] hsr_slave_0: entered promiscuous mode [ 258.725747][T10786] hsr_slave_1: entered promiscuous mode [ 258.733768][T10786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.741312][T10786] Cannot create hsr debugfs directory [ 258.932306][T10846] vlan2: entered promiscuous mode [ 259.005096][T10786] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.075198][T10786] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.155587][T10786] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.224980][T10786] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.264773][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 259.264787][ T29] audit: type=1326 audit(1725822628.803:18514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.267091][T10855] vxcan1: tx address claim with dlc 1 [ 259.271151][ T29] audit: type=1326 audit(1725822628.803:18515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.323620][ T29] audit: type=1326 audit(1725822628.803:18516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.347301][ T29] audit: type=1326 audit(1725822628.803:18517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd35380b890 code=0x7ffc0000 [ 259.370909][ T29] audit: type=1326 audit(1725822628.803:18518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd35380b890 code=0x7ffc0000 [ 259.394572][ T29] audit: type=1326 audit(1725822628.803:18519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.418241][ T29] audit: type=1326 audit(1725822628.803:18520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.441892][ T29] audit: type=1326 audit(1725822628.803:18521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.465532][ T29] audit: type=1326 audit(1725822628.803:18522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.489497][ T29] audit: type=1326 audit(1725822628.803:18523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 259.533267][T10786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.545373][T10786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.557243][T10786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.575405][T10786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.642570][T10786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.665210][T10786] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.682350][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.689472][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.728958][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.736094][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.835821][T10786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.939955][T10889] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 260.006420][T10786] veth0_vlan: entered promiscuous mode [ 260.018819][T10786] veth1_vlan: entered promiscuous mode [ 260.043480][T10786] veth0_macvtap: entered promiscuous mode [ 260.052553][T10786] veth1_macvtap: entered promiscuous mode [ 260.070107][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.080632][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.090466][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.100898][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.110786][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.121507][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.131435][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.141912][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.154541][T10786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.164336][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.174886][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.184810][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.195254][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.205226][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.215690][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.225589][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.236099][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.265037][T10786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.281398][T10786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.290213][T10786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.298977][T10786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.307880][T10786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.517161][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.555425][T10911] batadv_slave_0: entered promiscuous mode [ 260.705498][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 260.721876][T10915] netlink: 'syz.4.1854': attribute type 4 has an invalid length. [ 261.249663][T10942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.257561][T10942] batadv_slave_0: entered promiscuous mode [ 261.668503][T10953] bridge0: entered allmulticast mode [ 261.675943][T10953] bridge_slave_1: left allmulticast mode [ 261.681634][T10953] bridge_slave_1: left promiscuous mode [ 261.687339][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.697132][T10953] bridge_slave_0: left allmulticast mode [ 261.702784][T10953] bridge_slave_0: left promiscuous mode [ 261.708612][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.735741][T10953] bridge0 (unregistering): left allmulticast mode [ 261.941113][T10963] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 262.227221][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 263.225081][T10998] sd 0:0:1:0: device reset [ 263.453464][T11006] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1885'. [ 266.140010][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 266.140023][ T29] audit: type=1326 audit(1725822635.673:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.177695][ T29] audit: type=1326 audit(1725822635.673:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.201363][ T29] audit: type=1326 audit(1725822635.673:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.225114][ T29] audit: type=1326 audit(1725822635.673:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.248672][ T29] audit: type=1326 audit(1725822635.673:18727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.257536][T11051] bond1: entered promiscuous mode [ 266.272314][ T29] audit: type=1326 audit(1725822635.673:18728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.272353][ T29] audit: type=1326 audit(1725822635.673:18729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.277391][T11051] bond1: entered allmulticast mode [ 266.277574][T11051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.300961][ T29] audit: type=1326 audit(1725822635.673:18730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.301030][ T29] audit: type=1326 audit(1725822635.673:18731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.384168][ T29] audit: type=1326 audit(1725822635.673:18732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11050 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 266.475740][T11051] bond1 (unregistering): Released all slaves [ 268.150388][T11117] SELinux: failed to load policy [ 268.319090][T11127] 9pnet_fd: Insufficient options for proto=fd [ 269.382195][T11152] Invalid ELF header magic: != ELF [ 269.792364][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.810563][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.427929][T11177] netlink: '+}[@': attribute type 10 has an invalid length. [ 270.459047][T11177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.469856][T11177] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 270.774275][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1948'. [ 271.476630][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 271.476642][ T29] audit: type=1326 audit(1725822641.013:18841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.512804][ T29] audit: type=1326 audit(1725822641.043:18842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.536496][ T29] audit: type=1326 audit(1725822641.043:18843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.560088][ T29] audit: type=1326 audit(1725822641.043:18844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.583677][ T29] audit: type=1326 audit(1725822641.043:18845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.607458][ T29] audit: type=1326 audit(1725822641.043:18846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.631020][ T29] audit: type=1326 audit(1725822641.043:18847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.654936][ T29] audit: type=1326 audit(1725822641.043:18848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.678771][ T29] audit: type=1326 audit(1725822641.043:18849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.702433][ T29] audit: type=1326 audit(1725822641.043:18850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 271.839745][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 271.893179][T11226] bond1: entered promiscuous mode [ 271.898317][T11226] bond1: entered allmulticast mode [ 271.912918][T11226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.920597][T11233] sd 0:0:1:0: device reset [ 271.931604][T11226] bond1 (unregistering): Released all slaves [ 272.989523][T11272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1980'. [ 277.439293][T11294] chnl_net:caif_netlink_parms(): no params data found [ 277.480807][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.488061][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.496873][T11294] bridge_slave_0: entered allmulticast mode [ 277.504692][T11294] bridge_slave_0: entered promiscuous mode [ 277.516583][ T6479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.530231][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.537382][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.546380][T11294] bridge_slave_1: entered allmulticast mode [ 277.553370][T11294] bridge_slave_1: entered promiscuous mode [ 277.590095][ T6479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.603233][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.613977][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.632749][T11294] team0: Port device team_slave_0 added [ 277.639196][T11294] team0: Port device team_slave_1 added [ 277.647697][ T6479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.667758][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.674826][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.700777][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.712070][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.719014][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.744913][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.761436][ T6479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.784043][T11294] hsr_slave_0: entered promiscuous mode [ 277.790003][T11294] hsr_slave_1: entered promiscuous mode [ 277.795933][T11294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.803467][T11294] Cannot create hsr debugfs directory [ 277.832896][ T6479] bond0: left allmulticast mode [ 277.837822][ T6479] bond_slave_0: left allmulticast mode [ 277.843278][ T6479] bond_slave_1: left allmulticast mode [ 277.848771][ T6479] bond0: left promiscuous mode [ 277.853595][ T6479] bond_slave_0: left promiscuous mode [ 277.859031][ T6479] bond_slave_1: left promiscuous mode [ 277.864610][ T6479] bridge0: port 3(bond0) entered disabled state [ 277.871528][ T6479] bridge_slave_1: left allmulticast mode [ 277.877197][ T6479] bridge_slave_1: left promiscuous mode [ 277.882845][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.890709][ T6479] bridge_slave_0: left allmulticast mode [ 277.896382][ T6479] bridge_slave_0: left promiscuous mode [ 277.901961][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.986418][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.997033][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.006858][ T6479] bond0 (unregistering): Released all slaves [ 278.109692][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 278.109704][ T29] audit: type=1400 audit(1725822647.643:18955): avc: denied { write } for pid=11323 comm="syz.2.1997" name="file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.142142][ T29] audit: type=1400 audit(1725822647.673:18956): avc: denied { open } for pid=11323 comm="syz.2.1997" path="/64/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.157462][T11324] block device autoloading is deprecated and will be removed. [ 278.180102][ T6479] hsr_slave_0: left promiscuous mode [ 278.194011][ T6479] hsr_slave_1: left promiscuous mode [ 278.200198][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.207646][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.214431][ T29] audit: type=1326 audit(1725822647.743:18957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.238538][ T29] audit: type=1326 audit(1725822647.743:18958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.262267][ T29] audit: type=1326 audit(1725822647.753:18959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.285905][ T29] audit: type=1326 audit(1725822647.753:18960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.309573][ T29] audit: type=1326 audit(1725822647.753:18961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.333290][ T29] audit: type=1326 audit(1725822647.753:18962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.356943][ T29] audit: type=1326 audit(1725822647.753:18963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.380538][ T29] audit: type=1326 audit(1725822647.753:18964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 278.405555][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.413022][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.432049][ T6479] veth1_macvtap: left promiscuous mode [ 278.437652][ T6479] veth0_macvtap: left promiscuous mode [ 278.443376][ T6479] veth1_vlan: left promiscuous mode [ 278.448769][ T6479] veth0_vlan: left promiscuous mode [ 278.531788][T11344] syz.2.2002: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 278.541635][T11343] hub 9-0:1.0: USB hub found [ 278.546766][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.2.2002 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 278.551262][T11343] hub 9-0:1.0: 8 ports detected [ 278.561838][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.561886][T11344] Call Trace: [ 278.561895][T11344] [ 278.583080][T11344] dump_stack_lvl+0xf2/0x150 [ 278.587698][T11344] dump_stack+0x15/0x20 [ 278.587720][T11344] warn_alloc+0x145/0x1b0 [ 278.596183][T11344] ? __schedule+0x5fa/0x950 [ 278.600719][T11344] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 278.606610][T11344] __vmalloc_node_range_noprof+0xaa/0xec0 [ 278.612393][T11344] ? __pfx_futex_wake_mark+0x10/0x10 [ 278.617661][T11344] ? __rcu_read_unlock+0x4e/0x70 [ 278.623031][T11344] ? avc_has_perm_noaudit+0x1cc/0x210 [ 278.628425][T11344] ? xskq_create+0x36/0xd0 [ 278.632825][T11344] vmalloc_user_noprof+0x59/0x70 [ 278.637811][T11344] ? xskq_create+0x79/0xd0 [ 278.642425][T11344] xskq_create+0x79/0xd0 [ 278.646664][T11344] xsk_init_queue+0x82/0xd0 [ 278.651153][T11344] xsk_setsockopt+0x409/0x520 [ 278.655890][T11344] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.661081][T11344] __sys_setsockopt+0x1d8/0x250 [ 278.665993][T11344] __x64_sys_setsockopt+0x66/0x80 [ 278.671000][T11344] x64_sys_call+0x278d/0x2d60 [ 278.675742][T11344] do_syscall_64+0xc9/0x1c0 [ 278.680224][T11344] ? clear_bhb_loop+0x55/0xb0 [ 278.684912][T11344] ? clear_bhb_loop+0x55/0xb0 [ 278.689705][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.695644][T11344] RIP: 0033:0x7fd35380cef9 [ 278.700046][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.719642][T11344] RSP: 002b:00007fd352466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 278.728047][T11344] RAX: ffffffffffffffda RBX: 00007fd3539c6058 RCX: 00007fd35380cef9 [ 278.736160][T11344] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 278.744117][T11344] RBP: 00007fd35387f046 R08: 0000000000000020 R09: 0000000000000000 [ 278.752076][T11344] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 278.760096][T11344] R13: 0000000000000000 R14: 00007fd3539c6058 R15: 00007fff20e436b8 [ 278.768055][T11344] [ 278.771514][T11344] Mem-Info: [ 278.772714][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 278.774760][T11344] active_anon:23748 inactive_anon:18 isolated_anon:0 [ 278.774760][T11344] active_file:7048 inactive_file:14948 isolated_file:0 [ 278.774760][T11344] unevictable:0 dirty:245 writeback:0 [ 278.774760][T11344] slab_reclaimable:2781 slab_unreclaimable:17143 [ 278.774760][T11344] mapped:23283 shmem:3079 pagetables:674 [ 278.774760][T11344] sec_pagetables:0 bounce:0 [ 278.774760][T11344] kernel_misc_reclaimable:0 [ 278.774760][T11344] free:1846362 free_pcp:40716 free_cma:0 [ 278.826818][T11344] Node 0 active_anon:94992kB inactive_anon:72kB active_file:28192kB inactive_file:59792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93132kB dirty:980kB writeback:0kB shmem:12316kB writeback_tmp:0kB kernel_stack:3696kB pagetables:2696kB sec_pagetables:0kB all_unreclaimable? no [ 278.854984][T11344] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.881875][T11344] lowmem_reserve[]: 0 2866 7844 0 [ 278.886981][T11344] Node 0 DMA32 free:2950336kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953968kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 278.915716][T11344] lowmem_reserve[]: 0 0 4978 0 [ 278.920561][T11344] Node 0 Normal free:4419752kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:94992kB inactive_anon:72kB active_file:28192kB inactive_file:59792kB unevictable:0kB writepending:980kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:159264kB local_pcp:148524kB free_cma:0kB [ 278.951241][T11344] lowmem_reserve[]: 0 0 0 0 [ 278.955782][T11344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.968530][T11344] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950336kB [ 278.984662][T11344] Node 0 Normal: 322*4kB (UME) 238*8kB (UME) 86*16kB (UE) 1013*32kB (UME) 1038*64kB (UME) 430*128kB (UME) 200*256kB (UME) 107*512kB (UME) 82*1024kB (UME) 22*2048kB (UME) 983*4096kB (UM) = 4419832kB [ 279.004148][T11344] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 279.013422][T11344] 22244 total pagecache pages [ 279.018166][T11344] 21 pages in swap cache [ 279.022393][T11344] Free swap = 124528kB [ 279.026608][T11344] Total swap = 124996kB [ 279.030739][T11344] 2097051 pages RAM [ 279.034561][T11344] 0 pages HighMem/MovableOnly [ 279.039224][T11344] 80167 pages reserved [ 279.044772][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 279.144897][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2006'. [ 279.171090][T11359] bridge0: entered promiscuous mode [ 279.177570][T11359] bridge0: left promiscuous mode [ 279.187730][T11362] 9pnet_fd: Insufficient options for proto=fd [ 279.202254][T11294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.211636][T11294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.220660][T11294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.232931][T11294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.275734][T11365] vlan2: entered promiscuous mode [ 279.281137][T11365] team0: Device vlan2 is already an upper device of the team interface [ 279.357899][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 279.375727][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.408626][T11382] delete_channel: no stack [ 279.410187][T11294] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.452487][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.459723][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.518112][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.525272][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.583462][T11294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.593875][T11294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.996440][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.091423][T11294] veth0_vlan: entered promiscuous mode [ 280.111557][T11294] veth1_vlan: entered promiscuous mode [ 280.149956][T11294] veth0_macvtap: entered promiscuous mode [ 280.161744][T11294] veth1_macvtap: entered promiscuous mode [ 280.172774][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.183304][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.193132][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.203714][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.219623][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.231945][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.242998][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.252837][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.263332][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.273158][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.283626][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.293445][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.304033][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.316921][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.357536][T11294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.366455][T11294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.375200][T11294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.383969][T11294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.825704][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 280.834743][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.842160][T11433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.885723][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.893208][T11433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.021479][T11432] vlan3: entered promiscuous mode [ 281.027533][T11432] team0: Device vlan3 is already an upper device of the team interface [ 281.725663][T11453] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 282.739711][T11474] Falling back ldisc for ptm0. [ 282.912107][T11478] loop0: detected capacity change from 0 to 512 [ 282.980179][T11478] loop0: detected capacity change from 0 to 1024 [ 282.989602][T11478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.001868][T11478] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 283.064095][T11478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.064179][T11492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.108540][T11478] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 283.135676][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.166340][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 283.175363][T11497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.182786][T11497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.191280][T11497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.198952][T11497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.778404][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 283.778418][ T29] audit: type=1326 audit(1725822653.313:19122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.810593][ T29] audit: type=1326 audit(1725822653.313:19123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.834240][ T29] audit: type=1326 audit(1725822653.313:19124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.857730][ T29] audit: type=1326 audit(1725822653.313:19125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.881434][ T29] audit: type=1326 audit(1725822653.313:19126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.905024][ T29] audit: type=1326 audit(1725822653.313:19127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.928525][ T29] audit: type=1326 audit(1725822653.313:19128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.952091][ T29] audit: type=1326 audit(1725822653.313:19129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.975687][ T29] audit: type=1326 audit(1725822653.313:19130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 283.999258][ T29] audit: type=1326 audit(1725822653.313:19131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.4.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 284.146335][T11513] xt_policy: output policy not valid in PREROUTING and INPUT [ 284.183150][T11517] ipip0: entered promiscuous mode [ 285.601798][T11537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.663124][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 285.680223][T11541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.704504][T11541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.711973][T11541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.804550][T11540] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 286.057150][T11554] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2074'. [ 286.089839][T11556] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2074'. [ 286.769243][T11588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.803677][T11594] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 286.860594][T11588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.921970][T11599] netlink: 'syz.4.2094': attribute type 21 has an invalid length. [ 286.929939][T11599] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 286.937830][T11599] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2094'. [ 286.946868][T11599] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.955001][T11599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.962189][T11599] IPv6: NLM_F_CREATE should be set when creating new route [ 286.969463][T11599] IPv6: NLM_F_CREATE should be set when creating new route [ 286.976650][T11599] IPv6: NLM_F_CREATE should be set when creating new route [ 286.992089][T11588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.015488][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 287.049113][T11611] loop0: detected capacity change from 0 to 256 [ 287.109603][T11588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.173440][T11588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.187093][T11588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.199317][T11588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.211790][T11588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.860340][T11621] rdma_op ffff888104ae5580 conn xmit_rdma 0000000000000000 [ 287.945978][T11631] hsr0: entered promiscuous mode [ 287.953232][T11631] hsr_slave_0: left promiscuous mode [ 287.958993][T11631] hsr_slave_1: left promiscuous mode [ 287.975793][T11631] hsr0 (unregistering): left promiscuous mode [ 288.104741][T11649] lo: entered allmulticast mode [ 288.264470][T11655] team0: entered promiscuous mode [ 288.269533][T11655] team_slave_0: entered promiscuous mode [ 288.275222][T11655] team_slave_1: entered promiscuous mode [ 288.339257][T11655] dummy0: entered promiscuous mode [ 288.376836][T11655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.411832][T11655] Cannot create hsr debugfs directory [ 288.785461][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 288.785474][ T29] audit: type=1326 audit(1725822658.323:19738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ebe3c3ea7 code=0x7ffc0000 [ 288.815467][ T29] audit: type=1326 audit(1725822658.323:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ebe368859 code=0x7ffc0000 [ 288.838963][ T29] audit: type=1326 audit(1725822658.323:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 288.862530][ T29] audit: type=1326 audit(1725822658.323:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ebe3c3ea7 code=0x7ffc0000 [ 288.886041][ T29] audit: type=1326 audit(1725822658.323:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ebe368859 code=0x7ffc0000 [ 288.909571][ T29] audit: type=1326 audit(1725822658.323:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 288.933456][ T29] audit: type=1326 audit(1725822658.323:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ebe3c3ea7 code=0x7ffc0000 [ 288.957135][ T29] audit: type=1326 audit(1725822658.323:19745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ebe368859 code=0x7ffc0000 [ 288.980615][ T29] audit: type=1326 audit(1725822658.323:19746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 289.004245][ T29] audit: type=1326 audit(1725822658.353:19747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11661 comm="syz.4.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ebe3c3ea7 code=0x7ffc0000 [ 289.082651][T11672] loop0: detected capacity change from 0 to 4096 [ 289.091978][T11672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.120223][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.214489][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 289.299748][T11687] loop0: detected capacity change from 0 to 128 [ 289.308579][T11687] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.321273][T11687] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.475786][T11294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.778509][T11755] loop0: detected capacity change from 0 to 512 [ 289.785827][T11755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.805455][T11755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.818081][T11755] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.837270][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.875438][T11763] netlink: 'syz.0.2145': attribute type 2 has an invalid length. [ 289.904317][T11765] loop0: detected capacity change from 0 to 2048 [ 289.925042][T11765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.995987][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.993356][T11816] loop0: detected capacity change from 0 to 512 [ 291.000300][T11816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.015611][T11816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.015670][T11820] syz.4.2167[11820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.028391][T11816] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.041080][T11820] syz.4.2167[11820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.059043][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.106612][T11822] batadv_slave_0: entered promiscuous mode [ 291.353536][T11839] netlink: 'syz.1.2175': attribute type 29 has an invalid length. [ 291.648609][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 291.901740][T11864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.911201][T11864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.794725][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 292.870246][T11895] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 292.901743][T11902] bridge0: port 3(veth0_to_bond) entered blocking state [ 292.908831][T11902] bridge0: port 3(veth0_to_bond) entered disabled state [ 292.916152][T11902] veth0_to_bond: entered allmulticast mode [ 292.922390][T11902] veth0_to_bond: entered promiscuous mode [ 292.928407][T11902] bridge0: port 3(veth0_to_bond) entered blocking state [ 292.935359][T11902] bridge0: port 3(veth0_to_bond) entered forwarding state [ 293.307151][T11930] netlink: 'syz.4.2205': attribute type 1 has an invalid length. [ 293.834355][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 293.834369][ T29] audit: type=1400 audit(1725822663.373:20244): avc: denied { create } for pid=11934 comm="syz.4.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.860599][ T29] audit: type=1400 audit(1725822663.373:20245): avc: denied { read } for pid=11934 comm="syz.4.2207" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 293.864773][T11935] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 293.884050][ T29] audit: type=1400 audit(1725822663.373:20246): avc: denied { open } for pid=11934 comm="syz.4.2207" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 293.921072][ T29] audit: type=1400 audit(1725822663.403:20247): avc: denied { setopt } for pid=11934 comm="syz.4.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.942396][ T29] audit: type=1400 audit(1725822663.473:20248): avc: denied { create } for pid=11932 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.955011][T11937] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 293.973820][ T29] audit: type=1400 audit(1725822663.503:20249): avc: denied { getopt } for pid=11934 comm="syz.4.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.994900][ T29] audit: type=1400 audit(1725822663.513:20250): avc: denied { bind } for pid=11932 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.014687][ T29] audit: type=1400 audit(1725822663.513:20251): avc: denied { name_bind } for pid=11932 comm="syz.1.2206" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 294.035795][ T29] audit: type=1400 audit(1725822663.513:20252): avc: denied { node_bind } for pid=11932 comm="syz.1.2206" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 294.058268][ T29] audit: type=1400 audit(1725822663.513:20253): avc: denied { read } for pid=11932 comm="syz.1.2206" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.476772][T11953] loop0: detected capacity change from 0 to 512 [ 294.485858][T11953] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2212: corrupted in-inode xattr: invalid ea_ino [ 294.499470][T11953] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2212: couldn't read orphan inode 15 (err -117) [ 294.512269][T11953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.578910][T11956] 9pnet_fd: Insufficient options for proto=fd [ 294.762547][T11963] vhci_hcd: invalid port number 63 [ 294.846104][T11969] team0: left promiscuous mode [ 294.850913][T11969] team_slave_0: left promiscuous mode [ 294.856478][T11969] team_slave_1: left promiscuous mode [ 294.878419][T11969] dummy0: left promiscuous mode [ 294.958844][T11979] loop1: detected capacity change from 0 to 2048 [ 294.994240][T11979] loop1: p3 < > p4 < > [ 294.998491][T11979] loop1: partition table partially beyond EOD, truncated [ 295.016087][T11979] loop1: p3 start 4284289 is beyond EOD, truncated [ 295.028727][T11986] No control pipe specified [ 295.157390][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 295.169311][T11996] bridge0: entered promiscuous mode [ 295.178935][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2228'. [ 295.188309][T11996] bridge0: left promiscuous mode [ 295.312806][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.346239][T12003] loop0: detected capacity change from 0 to 128 [ 295.355656][T12003] raw_sendmsg: syz.0.2230 forgot to set AF_INET. Fix it! [ 295.839879][T12015] loop1: detected capacity change from 0 to 2048 [ 295.874388][T12015] loop1: p3 < > p4 < > [ 295.878582][T12015] loop1: partition table partially beyond EOD, truncated [ 295.885884][T12015] loop1: p3 start 4284289 is beyond EOD, truncated [ 296.206233][T12028] pim6reg1: entered promiscuous mode [ 296.211563][T12028] pim6reg1: entered allmulticast mode [ 296.251091][T12031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 296.257653][T12031] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.265324][T12031] vhci_hcd vhci_hcd.0: Device attached [ 296.274313][T12031] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 296.280856][T12031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.288295][T12031] vhci_hcd vhci_hcd.0: Device attached [ 296.290431][T12035] loop0: detected capacity change from 0 to 512 [ 296.299605][T12031] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2240'. [ 296.309009][T12031] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2240'. [ 296.309161][T12035] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 296.327388][T12035] EXT4-fs (loop0): invalid journal inode [ 296.333044][T12035] EXT4-fs (loop0): can't get journal size [ 296.333254][T12032] vhci_hcd: connection closed [ 296.340295][T12035] EXT4-fs (loop0): 1 truncate cleaned up [ 296.343537][ T6471] vhci_hcd: stop threads [ 296.350230][T12035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.350658][ T6471] vhci_hcd: release socket [ 296.359238][T12036] vhci_hcd: connection closed [ 296.366876][ T6471] vhci_hcd: disconnect device [ 296.381514][ T6471] vhci_hcd: stop threads [ 296.385902][ T6471] vhci_hcd: release socket [ 296.390412][ T6471] vhci_hcd: disconnect device [ 296.432158][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.503686][T12052] loop0: detected capacity change from 0 to 2048 [ 296.510429][T12052] ext4: Unknown parameter 'obj_user' [ 296.838519][T12056] can0: slcan on ttyS3. [ 296.978999][T12060] pimreg: entered allmulticast mode [ 297.043393][T12061] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.273822][T12055] can0 (unregistered): slcan off ttyS3. [ 297.392219][T12086] loop0: detected capacity change from 0 to 512 [ 297.406749][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.411080][T12086] netlink: 'syz.0.2258': attribute type 5 has an invalid length. [ 297.441671][T12086] SET target dimension over the limit! [ 297.453497][T12090] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2254'. [ 297.652110][T12097] 9pnet_fd: Insufficient options for proto=fd [ 298.981367][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 298.981381][ T29] audit: type=1400 audit(1725822668.513:20388): avc: denied { write } for pid=12175 comm="syz.4.2271" name="igmp" dev="proc" ino=4026532761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 299.030323][ T29] audit: type=1400 audit(1725822668.513:20389): avc: denied { create } for pid=12175 comm="syz.4.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.392794][ T29] audit: type=1326 audit(1725822668.923:20390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.436463][T12229] loop1: detected capacity change from 0 to 512 [ 299.446804][ T29] audit: type=1326 audit(1725822668.953:20391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.470415][ T29] audit: type=1326 audit(1725822668.953:20392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.494009][ T29] audit: type=1326 audit(1725822668.953:20393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.517618][ T29] audit: type=1326 audit(1725822668.953:20394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.541371][ T29] audit: type=1326 audit(1725822668.953:20395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.565035][ T29] audit: type=1326 audit(1725822668.953:20396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.588634][ T29] audit: type=1326 audit(1725822668.953:20397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0d3ecef9 code=0x7ffc0000 [ 299.642108][T12242] loop0: detected capacity change from 0 to 2048 [ 299.686896][T12229] loop1: detected capacity change from 0 to 1024 [ 299.697506][T12229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.705144][T12242] loop0: p1 < > p4 [ 299.708793][T12229] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 299.720076][T12242] loop0: p4 size 8388608 extends beyond EOD, truncated [ 299.756371][T12229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.774336][T12229] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 299.792385][T10644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.469370][T12269] rdma_op ffff888115960580 conn xmit_rdma 0000000000000000 [ 300.867445][T12284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 300.901153][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 304.320139][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 304.327792][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 304.327805][ T29] audit: type=1400 audit(1725822673.863:20507): avc: denied { unmount } for pid=10786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 304.365133][T12309] loop1: detected capacity change from 0 to 2048 [ 304.367647][ T29] audit: type=1326 audit(1725822673.873:20508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.395088][ T29] audit: type=1326 audit(1725822673.873:20509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.418822][ T29] audit: type=1326 audit(1725822673.873:20510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.442297][ T29] audit: type=1326 audit(1725822673.873:20511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.466086][ T29] audit: type=1326 audit(1725822673.873:20512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.487436][T12317] syz.2.2304[12317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.489746][T12317] syz.2.2304[12317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.489754][ T29] audit: type=1326 audit(1725822673.873:20513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.536159][ T29] audit: type=1326 audit(1725822673.873:20514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.559801][ T29] audit: type=1326 audit(1725822673.873:20515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.583366][ T29] audit: type=1326 audit(1725822673.873:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.1.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650761cef9 code=0x7ffc0000 [ 304.627636][T12323] loop1: p1 < > p4 [ 304.628593][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 304.639008][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 304.647969][T12323] loop1: p4 size 8388608 extends beyond EOD, truncated [ 304.648377][ T8] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 304.678914][T12309] loop1: p1 < > p4 [ 304.683472][T12309] loop1: p4 size 8388608 extends beyond EOD, truncated [ 304.730365][T12331] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 304.805337][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.815124][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.005358][T12356] loop1: detected capacity change from 0 to 256 [ 305.727485][T12351] syz.1.2315 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 305.741855][T12351] CPU: 1 UID: 0 PID: 12351 Comm: syz.1.2315 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 305.752701][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.762763][T12351] Call Trace: [ 305.766044][T12351] [ 305.769092][T12351] dump_stack_lvl+0xf2/0x150 [ 305.773726][T12351] dump_stack+0x15/0x20 [ 305.777985][T12351] dump_header+0x83/0x2d0 [ 305.782320][T12351] oom_kill_process+0x341/0x4c0 [ 305.787198][T12351] out_of_memory+0x9af/0xbe0 [ 305.791821][T12351] ? __rcu_read_unlock+0x4e/0x70 [ 305.796904][T12351] mem_cgroup_out_of_memory+0x13e/0x190 [ 305.802479][T12351] try_charge_memcg+0x51b/0x810 [ 305.807520][T12351] obj_cgroup_charge_pages+0xbd/0x1a0 [ 305.813006][T12351] __memcg_kmem_charge_page+0x9d/0x170 [ 305.818507][T12351] __alloc_pages_noprof+0x1bc/0x360 [ 305.823737][T12351] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 305.829185][T12351] alloc_pages_noprof+0xe1/0x100 [ 305.834118][T12351] __vmalloc_node_range_noprof+0x736/0xec0 [ 305.839950][T12351] __kvmalloc_node_noprof+0x121/0x170 [ 305.845327][T12351] ? ip_set_alloc+0x1f/0x30 [ 305.849865][T12351] ip_set_alloc+0x1f/0x30 [ 305.854208][T12351] hash_netiface_create+0x273/0x730 [ 305.859467][T12351] ? __nla_parse+0x40/0x60 [ 305.863887][T12351] ? __pfx_hash_netiface_create+0x10/0x10 [ 305.869682][T12351] ip_set_create+0x359/0x8a0 [ 305.874916][T12351] ? strnstr+0xf1/0x100 [ 305.879155][T12351] ? __nla_parse+0x40/0x60 [ 305.883567][T12351] nfnetlink_rcv_msg+0x4a9/0x570 [ 305.888563][T12351] netlink_rcv_skb+0x12c/0x230 [ 305.893319][T12351] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 305.898861][T12351] nfnetlink_rcv+0x16c/0x15e0 [ 305.903567][T12351] ? kmem_cache_free+0xd8/0x280 [ 305.908462][T12351] ? nlmon_xmit+0x51/0x60 [ 305.912784][T12351] ? __kfree_skb+0x102/0x150 [ 305.917510][T12351] ? consume_skb+0x57/0x180 [ 305.922074][T12351] ? nlmon_xmit+0x51/0x60 [ 305.926465][T12351] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 305.931765][T12351] ? __dev_queue_xmit+0xb86/0x1fe0 [ 305.936904][T12351] ? ref_tracker_free+0x3a5/0x410 [ 305.941918][T12351] ? __dev_queue_xmit+0x161/0x1fe0 [ 305.947095][T12351] ? __netlink_deliver_tap+0x495/0x4c0 [ 305.952630][T12351] netlink_unicast+0x599/0x670 [ 305.957397][T12351] netlink_sendmsg+0x5cc/0x6e0 [ 305.962162][T12351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.967464][T12351] __sock_sendmsg+0x140/0x180 [ 305.972273][T12351] ____sys_sendmsg+0x312/0x410 [ 305.977084][T12351] __sys_sendmsg+0x1e9/0x280 [ 305.981666][T12351] ? futex_wait+0x18e/0x1c0 [ 305.986183][T12351] __x64_sys_sendmsg+0x46/0x50 [ 305.990944][T12351] x64_sys_call+0x2689/0x2d60 [ 305.995818][T12351] do_syscall_64+0xc9/0x1c0 [ 306.000311][T12351] ? clear_bhb_loop+0x55/0xb0 [ 306.004986][T12351] ? clear_bhb_loop+0x55/0xb0 [ 306.009702][T12351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.015649][T12351] RIP: 0033:0x7f650761cef9 [ 306.020112][T12351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.039725][T12351] RSP: 002b:00007f6506297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.048136][T12351] RAX: ffffffffffffffda RBX: 00007f65077d5f80 RCX: 00007f650761cef9 [ 306.056101][T12351] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 306.064155][T12351] RBP: 00007f650768f046 R08: 0000000000000000 R09: 0000000000000000 [ 306.072119][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.080190][T12351] R13: 0000000000000000 R14: 00007f65077d5f80 R15: 00007fff6ec5cc68 [ 306.088158][T12351] [ 306.091375][T12351] memory: usage 307200kB, limit 307200kB, failcnt 240 [ 306.098194][T12351] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 306.106195][T12351] kmem: usage 306972kB, limit 9007199254740988kB, failcnt 0 [ 306.113570][T12351] Memory cgroup stats for /syz1: [ 306.124304][T12351] cache 229376 [ 306.132773][T12351] rss 0 [ 306.135575][T12351] shmem 0 [ 306.138507][T12351] mapped_file 229376 [ 306.142404][T12351] dirty 229376 [ 306.145837][T12351] writeback 0 [ 306.149110][T12351] workingset_refault_anon 133 [ 306.153804][T12351] workingset_refault_file 58 [ 306.158385][T12351] swap 294912 [ 306.161663][T12351] swapcached 4096 [ 306.165309][T12351] pgpgin 318264 [ 306.168767][T12351] pgpgout 318207 [ 306.172305][T12351] pgfault 334700 [ 306.175977][T12351] pgmajfault 75 [ 306.179453][T12351] inactive_anon 4096 [ 306.183342][T12351] active_anon 0 [ 306.186870][T12351] inactive_file 229376 [ 306.190929][T12351] active_file 0 [ 306.194408][T12351] unevictable 0 [ 306.197946][T12351] hierarchical_memory_limit 314572800 [ 306.203359][T12351] hierarchical_memsw_limit 9223372036854771712 [ 306.209725][T12351] total_cache 229376 [ 306.213620][T12351] total_rss 0 [ 306.216932][T12351] total_shmem 0 [ 306.220385][T12351] total_mapped_file 229376 [ 306.224908][T12351] total_dirty 229376 [ 306.228865][T12351] total_writeback 0 [ 306.232658][T12351] total_workingset_refault_anon 133 [ 306.237861][T12351] total_workingset_refault_file 58 [ 306.242986][T12351] total_swap 294912 [ 306.246804][T12351] total_swapcached 4096 [ 306.251039][T12351] total_pgpgin 318264 [ 306.255096][T12351] total_pgpgout 318207 [ 306.259158][T12351] total_pgfault 334704 [ 306.263220][T12351] total_pgmajfault 75 [ 306.267276][T12351] total_inactive_anon 4096 [ 306.271694][T12351] total_active_anon 0 [ 306.275744][T12351] total_inactive_file 229376 [ 306.280362][T12351] total_active_file 0 [ 306.284357][T12351] total_unevictable 0 [ 306.288320][T12351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2315,pid=12350,uid=0 [ 306.303374][T12351] Memory cgroup out of memory: Killed process 12350 (syz.1.2315) total-vm:89116kB, anon-rss:568kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 306.325047][T12374] netlink: 'syz.4.2323': attribute type 21 has an invalid length. [ 306.332873][T12374] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2323'. [ 306.400441][T12377] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 306.562307][T12387] loop0: detected capacity change from 0 to 2048 [ 306.600578][T12388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 306.610583][T12387] loop0: p1 < > p4 [ 306.615313][T12387] loop0: p4 size 8388608 extends beyond EOD, truncated [ 306.741593][ T3334] IPVS: starting estimator thread 0... [ 306.791917][T12408] loop1: detected capacity change from 0 to 1024 [ 306.798814][T12408] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 458755)! [ 306.809428][T12408] EXT4-fs (loop1): group descriptors corrupted! [ 306.843801][T12406] IPVS: using max 2784 ests per chain, 139200 per kthread [ 306.860125][T12413] syz.2.2337[12413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.860244][T12413] syz.2.2337[12413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.873544][T12413] syz.2.2337[12413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.885262][T12413] syz.2.2337[12413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.904357][T12414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12414 comm=syz.1.2336 [ 307.537301][T12423] loop0: detected capacity change from 0 to 132 [ 307.730098][T12437] syz.0.2344[12437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.730172][T12437] syz.0.2344[12437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.765680][T12437] loop0: detected capacity change from 0 to 1024 [ 307.794158][T12437] EXT4-fs: Ignoring removed orlov option [ 307.799868][T12437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.825856][T12437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.966156][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.155003][T12450] loop0: detected capacity change from 0 to 128 [ 308.208555][T12450] syz.0.2347: attempt to access beyond end of device [ 308.208555][T12450] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 308.252736][T12449] syz.0.2347: attempt to access beyond end of device [ 308.252736][T12449] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 308.281539][T12450] syz.0.2347: attempt to access beyond end of device [ 308.281539][T12450] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 308.309120][T12450] syz.0.2347: attempt to access beyond end of device [ 308.309120][T12450] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 308.515390][T12428] Can't find ip_set type bitmap:ip,mac [ 309.112752][T12485] loop1: detected capacity change from 0 to 2048 [ 309.136221][T12485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.153305][T12485] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 309.168400][T12485] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28 [ 309.180780][T12485] EXT4-fs (loop1): This should not happen!! Data will be lost [ 309.180780][T12485] [ 309.190509][T12485] EXT4-fs (loop1): Total free blocks count 0 [ 309.196506][T12485] EXT4-fs (loop1): Free/Dirty block details [ 309.202413][T12485] EXT4-fs (loop1): free_blocks=2415919104 [ 309.208221][T12485] EXT4-fs (loop1): dirty_blocks=32 [ 309.213335][T12485] EXT4-fs (loop1): Block reservation details [ 309.219424][T12485] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 309.368438][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 309.368452][ T29] audit: type=1400 audit(1725822678.903:20995): avc: denied { read } for pid=12497 comm="syz.0.2361" path="socket:[41802]" dev="sockfs" ino=41802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.437052][T12499] loop0: detected capacity change from 0 to 1024 [ 309.446633][T12499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.472597][ T29] audit: type=1400 audit(1725822679.003:20996): avc: denied { append } for pid=12497 comm="syz.0.2361" path="/74/file1/memory.events.local" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 309.540422][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.558275][T12505] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 309.566640][T12505] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 309.593899][ T29] audit: type=1326 audit(1725822679.123:20997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.617560][ T29] audit: type=1326 audit(1725822679.123:20998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.641235][ T29] audit: type=1326 audit(1725822679.123:20999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.665055][ T29] audit: type=1326 audit(1725822679.123:21000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.688738][ T29] audit: type=1326 audit(1725822679.123:21001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.712798][ T29] audit: type=1326 audit(1725822679.123:21002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.736564][ T29] audit: type=1326 audit(1725822679.123:21003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.760700][ T29] audit: type=1326 audit(1725822679.123:21004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.4.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 309.793587][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'. [ 309.809049][T12518] vhci_hcd: invalid port number 63 [ 309.827992][T12513] loop0: detected capacity change from 0 to 256 [ 309.870836][T10644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.088740][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.237567][T12535] netem: change failed [ 310.703558][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 310.726260][ C0] vcan0: j1939_session_tx_dat: 0xffff888113f53400: queue data error: -100 [ 311.307223][T12558] vhci_hcd: invalid port number 63 [ 311.329411][T12560] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 311.336036][T12560] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 311.343781][T12560] vhci_hcd vhci_hcd.0: Device attached [ 311.351324][T12560] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 311.357866][T12560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 311.365468][T12560] vhci_hcd vhci_hcd.0: Device attached [ 311.372049][T12560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2384'. [ 311.381026][T12560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2384'. [ 311.391430][T12561] vhci_hcd: connection closed [ 311.391686][ T6474] vhci_hcd: stop threads [ 311.393945][T12565] vhci_hcd: connection closed [ 311.396424][ T6474] vhci_hcd: release socket [ 311.409867][ T6474] vhci_hcd: disconnect device [ 311.417676][ T6474] vhci_hcd: stop threads [ 311.421936][ T6474] vhci_hcd: release socket [ 311.426387][ T6474] vhci_hcd: disconnect device [ 311.621387][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 312.150322][T12592] xt_NFQUEUE: number of total queues is 0 [ 312.181717][T12594] syz.1.2394[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.181939][T12594] syz.1.2394[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.276077][T12594] syz.1.2394[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.288087][T12594] syz.1.2394[12594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.634728][T12605] netlink: 'syz.3.2400': attribute type 1 has an invalid length. [ 312.654304][T12605] netlink: 'syz.3.2400': attribute type 4 has an invalid length. [ 312.662356][T12605] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2400'. [ 312.715221][T12612] netlink: 'syz.3.2403': attribute type 10 has an invalid length. [ 312.772248][T12618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.502142][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 313.730632][T12665] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 314.374711][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 314.374726][ T29] audit: type=1400 audit(1725822683.913:21286): avc: denied { mount } for pid=12678 comm="syz.4.2425" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 314.380857][ T29] audit: type=1400 audit(1725822683.913:21287): avc: denied { unmount } for pid=10786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 314.432547][ T29] audit: type=1326 audit(1725822683.923:21288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456187][ T29] audit: type=1326 audit(1725822683.923:21289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456225][ T29] audit: type=1326 audit(1725822683.923:21290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456248][ T29] audit: type=1326 audit(1725822683.923:21291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456272][ T29] audit: type=1326 audit(1725822683.923:21292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456328][ T29] audit: type=1326 audit(1725822683.923:21293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456422][ T29] audit: type=1326 audit(1725822683.923:21294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.456458][ T29] audit: type=1326 audit(1725822683.923:21295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12680 comm="syz.4.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x7ffc0000 [ 314.578625][T12685] team_slave_0: entered promiscuous mode [ 314.630197][T12685] team_slave_1: entered promiscuous mode [ 314.637958][T12685] vlan0: entered promiscuous mode [ 314.643093][T12685] team0: entered promiscuous mode [ 314.649936][T12685] team0: left promiscuous mode [ 314.654970][T12685] team_slave_0: left promiscuous mode [ 314.660414][T12685] team_slave_1: left promiscuous mode [ 314.983642][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2431'. [ 315.014208][T12692] team_slave_0: entered promiscuous mode [ 315.019946][T12692] team_slave_1: entered promiscuous mode [ 315.043026][T12692] macvtap1: entered promiscuous mode [ 315.048387][T12692] team0: entered promiscuous mode [ 315.053600][T12692] macvtap1: entered allmulticast mode [ 315.059050][T12692] team0: entered allmulticast mode [ 315.064179][T12692] team_slave_0: entered allmulticast mode [ 315.069916][T12692] team_slave_1: entered allmulticast mode [ 315.080430][T12692] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 315.160386][T12703] team0: left allmulticast mode [ 315.165596][T12703] team_slave_0: left allmulticast mode [ 315.171108][T12703] team_slave_1: left allmulticast mode [ 315.176666][T12703] team0: left promiscuous mode [ 315.181572][T12703] team_slave_0: left promiscuous mode [ 315.186955][T12703] team_slave_1: left promiscuous mode [ 315.267506][T12710] pim6reg1: entered promiscuous mode [ 315.272847][T12710] pim6reg1: entered allmulticast mode [ 315.938009][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 316.044420][T12746] block device autoloading is deprecated and will be removed. [ 316.248999][T12768] loop3: detected capacity change from 0 to 256 [ 316.272225][T12754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2455'. [ 316.528643][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 316.961004][T12800] x_tables: duplicate underflow at hook 2 [ 317.014013][T12806] devtmpfs: Too few inodes for current use [ 317.025313][T12805] loop1: detected capacity change from 0 to 2048 [ 317.065059][T12805] loop1: p3 < > p4 < > [ 317.069243][T12805] loop1: partition table partially beyond EOD, truncated [ 317.086839][T12805] loop1: p3 start 4284289 is beyond EOD, truncated [ 317.300877][T12822] netlink: 'syz.2.2478': attribute type 2 has an invalid length. [ 317.431531][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.563375][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.668637][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.749417][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.824739][ T57] bridge_slave_1: left allmulticast mode [ 317.830414][ T57] bridge_slave_1: left promiscuous mode [ 317.836268][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.852054][ T57] bridge_slave_0: left allmulticast mode [ 317.857804][ T57] bridge_slave_0: left promiscuous mode [ 317.863558][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.987007][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.997452][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.008020][ T57] bond0 (unregistering): Released all slaves [ 318.018073][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2485'. [ 318.030535][T12851] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.039282][T12851] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.048025][T12851] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.056751][T12851] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.095997][T12851] vxlan0: entered promiscuous mode [ 318.108877][T12859] tipc: Can't bind to reserved service type 0 [ 318.141550][T12861] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.152344][T12831] chnl_net:caif_netlink_parms(): no params data found [ 318.172289][ T57] hsr_slave_0: left promiscuous mode [ 318.180786][ T57] hsr_slave_1: left promiscuous mode [ 318.188227][ T57] veth1_macvtap: left promiscuous mode [ 318.193788][ T57] veth0_macvtap: left promiscuous mode [ 318.199360][ T57] veth1_vlan: left promiscuous mode [ 318.204624][ T57] veth0_vlan: left promiscuous mode [ 318.299942][ T57] team0 (unregistering): Port device team_slave_1 removed [ 318.310620][ T57] team0 (unregistering): Port device team_slave_0 removed [ 318.382231][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.389340][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.396541][T12831] bridge_slave_0: entered allmulticast mode [ 318.402999][T12831] bridge_slave_0: entered promiscuous mode [ 318.409871][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.416987][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.424174][T12831] bridge_slave_1: entered allmulticast mode [ 318.430616][T12831] bridge_slave_1: entered promiscuous mode [ 318.448371][T12831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.458955][T12831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.484924][T12831] team0: Port device team_slave_0 added [ 318.491452][T12831] team0: Port device team_slave_1 added [ 318.510226][T12831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.517228][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.543289][T12831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.555836][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.562788][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.588799][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.619056][T12831] hsr_slave_0: entered promiscuous mode [ 318.625811][T12831] hsr_slave_1: entered promiscuous mode [ 318.631652][T12831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.639321][T12831] Cannot create hsr debugfs directory [ 318.842934][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 318.862193][T12865] syz.2.2490 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 318.876493][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.2.2490 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 318.876994][T12880] loop1: detected capacity change from 0 to 2048 [ 318.887266][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 318.887281][T12865] Call Trace: [ 318.887288][T12865] [ 318.887295][T12865] dump_stack_lvl+0xf2/0x150 [ 318.914441][T12865] dump_stack+0x15/0x20 [ 318.918637][T12865] dump_header+0x83/0x2d0 [ 318.922954][T12865] oom_kill_process+0x341/0x4c0 [ 318.927819][T12865] out_of_memory+0x9af/0xbe0 [ 318.932399][T12865] ? __rcu_read_unlock+0x4e/0x70 [ 318.937321][T12865] mem_cgroup_out_of_memory+0x13e/0x190 [ 318.942892][T12865] try_charge_memcg+0x51b/0x810 [ 318.947762][T12865] obj_cgroup_charge_pages+0xbd/0x1a0 [ 318.953145][T12865] __memcg_kmem_charge_page+0x9d/0x170 [ 318.958630][T12865] __alloc_pages_noprof+0x1bc/0x360 [ 318.963895][T12865] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 318.969314][T12865] alloc_pages_noprof+0xe1/0x100 [ 318.974358][T12865] __vmalloc_node_range_noprof+0x736/0xec0 [ 318.980193][T12865] __kvmalloc_node_noprof+0x121/0x170 [ 318.985569][T12865] ? ip_set_alloc+0x1f/0x30 [ 318.990082][T12865] ip_set_alloc+0x1f/0x30 [ 318.994477][T12865] hash_netiface_create+0x273/0x730 [ 318.999681][T12865] ? __nla_parse+0x40/0x60 [ 319.004148][T12865] ? __pfx_hash_netiface_create+0x10/0x10 [ 319.009894][T12865] ip_set_create+0x359/0x8a0 [ 319.014481][T12865] ? strnstr+0xf1/0x100 [ 319.018644][T12865] ? __nla_parse+0x40/0x60 [ 319.023114][T12865] nfnetlink_rcv_msg+0x4a9/0x570 [ 319.028076][T12865] netlink_rcv_skb+0x12c/0x230 [ 319.032925][T12865] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 319.038460][T12865] nfnetlink_rcv+0x16c/0x15e0 [ 319.043156][T12865] ? kmem_cache_free+0xd8/0x280 [ 319.048001][T12865] ? nlmon_xmit+0x51/0x60 [ 319.052401][T12865] ? __kfree_skb+0x102/0x150 [ 319.057002][T12865] ? consume_skb+0x57/0x180 [ 319.061576][T12865] ? nlmon_xmit+0x51/0x60 [ 319.066064][T12865] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 319.071409][T12865] ? __dev_queue_xmit+0xb86/0x1fe0 [ 319.076547][T12865] ? ref_tracker_free+0x3a5/0x410 [ 319.081559][T12865] ? __dev_queue_xmit+0x161/0x1fe0 [ 319.086683][T12865] ? __netlink_deliver_tap+0x495/0x4c0 [ 319.092214][T12865] netlink_unicast+0x599/0x670 [ 319.096967][T12865] netlink_sendmsg+0x5cc/0x6e0 [ 319.101754][T12865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.107122][T12865] __sock_sendmsg+0x140/0x180 [ 319.111878][T12865] ____sys_sendmsg+0x312/0x410 [ 319.116695][T12865] __sys_sendmsg+0x1e9/0x280 [ 319.121277][T12865] ? futex_wait+0x18e/0x1c0 [ 319.125782][T12865] __x64_sys_sendmsg+0x46/0x50 [ 319.130589][T12865] x64_sys_call+0x2689/0x2d60 [ 319.135272][T12865] do_syscall_64+0xc9/0x1c0 [ 319.139860][T12865] ? clear_bhb_loop+0x55/0xb0 [ 319.144602][T12865] ? clear_bhb_loop+0x55/0xb0 [ 319.149272][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.155181][T12865] RIP: 0033:0x7fd35380cef9 [ 319.159579][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.179448][T12865] RSP: 002b:00007fd352487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.187875][T12865] RAX: ffffffffffffffda RBX: 00007fd3539c5f80 RCX: 00007fd35380cef9 [ 319.195842][T12865] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 319.203803][T12865] RBP: 00007fd35387f046 R08: 0000000000000000 R09: 0000000000000000 [ 319.211776][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.219748][T12865] R13: 0000000000000000 R14: 00007fd3539c5f80 R15: 00007fff20e436b8 [ 319.227715][T12865] [ 319.231468][T12865] memory: usage 307200kB, limit 307200kB, failcnt 151 [ 319.238824][T12865] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 319.246790][T12865] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 319.254100][T12865] Memory cgroup stats for /syz2: [ 319.255411][T12865] cache 90112 [ 319.263645][T12865] rss 0 [ 319.266472][T12865] shmem 0 [ 319.269397][T12865] mapped_file 90112 [ 319.273179][T12865] dirty 90112 [ 319.276550][T12865] writeback 0 [ 319.279881][T12865] workingset_refault_anon 43 [ 319.284485][T12865] workingset_refault_file 51 [ 319.289112][T12865] swap 188416 [ 319.292393][T12865] swapcached 12288 [ 319.296183][T12865] pgpgin 561824 [ 319.299629][T12865] pgpgout 561798 [ 319.303145][T12865] pgfault 507649 [ 319.306738][T12865] pgmajfault 26 [ 319.310176][T12865] inactive_anon 0 [ 319.313908][T12865] active_anon 12288 [ 319.317698][T12865] inactive_file 0 [ 319.321321][T12865] active_file 94208 [ 319.325170][T12865] unevictable 0 [ 319.328723][T12865] hierarchical_memory_limit 314572800 [ 319.334108][T12865] hierarchical_memsw_limit 9223372036854771712 [ 319.340239][T12865] total_cache 90112 [ 319.344076][T12865] total_rss 0 [ 319.347361][T12865] total_shmem 0 [ 319.350792][T12865] total_mapped_file 90112 [ 319.355135][T12865] total_dirty 90112 [ 319.358973][T12865] total_writeback 0 [ 319.362839][T12865] total_workingset_refault_anon 43 [ 319.367953][T12865] total_workingset_refault_file 51 [ 319.373100][T12865] total_swap 188416 [ 319.376898][T12865] total_swapcached 12288 [ 319.381188][T12865] total_pgpgin 561827 [ 319.385177][T12865] total_pgpgout 561801 [ 319.389215][T12865] total_pgfault 507686 [ 319.393253][T12865] total_pgmajfault 26 [ 319.397300][T12865] total_inactive_anon 0 [ 319.401439][T12865] total_active_anon 12288 [ 319.405783][T12865] total_inactive_file 0 [ 319.409960][T12865] total_active_file 94208 [ 319.414326][T12865] total_unevictable 0 [ 319.414936][T12880] loop1: p3 < > p4 < > [ 319.418349][T12865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2 [ 319.422522][T12880] loop1: partition table partially beyond EOD, [ 319.422526][T12865] ,task_memcg= [ 319.422532][T12880] truncated [ 319.422701][T12880] loop1: p3 start 4284289 is beyond EOD, [ 319.433147][T12865] /syz2 [ 319.439353][T12880] truncated [ 319.442706][T12865] ,task=syz.2.2490,pid=12864,uid=0 [ 319.462619][T12865] Memory cgroup out of memory: Killed process 12864 (syz.2.2490) total-vm:89116kB, anon-rss:564kB, file-rss:16040kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 319.499836][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 319.499849][ T29] audit: type=1326 audit(1725822689.033:21656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.4.2499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ebe3ccef9 code=0x0 [ 319.510924][T12831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.539006][T12831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.547903][T12831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.559262][T12831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.622662][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.646286][T12831] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.667489][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.674594][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.700999][T12831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.711391][T12831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.741015][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.748072][T12901] loop1: detected capacity change from 0 to 2048 [ 319.749540][T12901] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.754506][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.799358][T12901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.812095][ T29] audit: type=1400 audit(1725822689.343:21657): avc: denied { mount } for pid=12900 comm="syz.1.2501" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.834957][T10644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.836489][ T29] audit: type=1400 audit(1725822689.343:21658): avc: denied { create } for pid=12900 comm="syz.1.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 319.863512][ T29] audit: type=1400 audit(1725822689.343:21659): avc: denied { unmount } for pid=10644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.878257][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.906919][ T29] audit: type=1400 audit(1725822689.443:21660): avc: denied { create } for pid=12913 comm="syz.1.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.937048][ T29] audit: type=1326 audit(1725822689.463:21661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 319.960781][ T29] audit: type=1326 audit(1725822689.463:21662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd35380b890 code=0x7ffc0000 [ 319.984484][ T29] audit: type=1326 audit(1725822689.463:21663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd35380e727 code=0x7ffc0000 [ 320.008155][ T29] audit: type=1326 audit(1725822689.463:21664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35380cef9 code=0x7ffc0000 [ 320.023290][T12831] veth0_vlan: entered promiscuous mode [ 320.031757][ T29] audit: type=1326 audit(1725822689.463:21665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.2.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd35380e727 code=0x7ffc0000 [ 320.064841][T12831] veth1_vlan: entered promiscuous mode [ 320.084200][T12831] veth0_macvtap: entered promiscuous mode [ 320.096238][T12831] veth1_macvtap: entered promiscuous mode [ 320.122210][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.132717][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.145072][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.164639][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.175103][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.184959][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.195457][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.207181][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.218775][T12831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.227570][T12831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.236332][T12831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.245244][T12831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.325279][T12939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2482'. [ 320.346296][ T3336] IPVS: starting estimator thread 0... [ 320.446752][T12948] loop1: detected capacity change from 0 to 1764 [ 320.474035][T12944] IPVS: using max 2784 ests per chain, 139200 per kthread [ 320.812186][T12950] netlink: 'syz.2.2510': attribute type 15 has an invalid length. [ 320.820135][T12950] netlink: 723 bytes leftover after parsing attributes in process `syz.2.2510'. [ 320.834032][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 320.847729][T12957] dummy0: entered promiscuous mode [ 320.854403][T12957] dummy0: left promiscuous mode [ 321.030958][T12970] loop0: detected capacity change from 0 to 2048 [ 321.044530][T12970] EXT4-fs (loop0): can't mount with commit=8, fs mounted w/o journal [ 321.057410][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 321.072143][T12973] loop3: detected capacity change from 0 to 256 [ 321.357976][T12987] sctp: [Deprecated]: syz.4.2524 (pid 12987) Use of int in max_burst socket option. [ 321.357976][T12987] Use struct sctp_assoc_value instead [ 321.682680][T12967] ================================================================== [ 321.690769][T12967] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 321.696810][ T9075] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 321.698120][T12967] [ 321.698127][T12967] read-write to 0xffff8881140cfe68 of 4 bytes by task 9075 on cpu 1: [ 321.709335][ T9075] CPU: 1 UID: 0 PID: 9075 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 321.711589][T12967] mem_cgroup_iter+0x28e/0x380 [ 321.719616][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 321.730422][T12967] shrink_node+0x74a/0x1d40 [ 321.730441][T12967] do_try_to_free_pages+0x3c6/0xc50 [ 321.735172][ T9075] Call Trace: [ 321.735180][ T9075] [ 321.745196][T12967] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 321.749667][ T9075] dump_stack_lvl+0xf2/0x150 [ 321.754832][T12967] try_charge_memcg+0x2bc/0x810 [ 321.754850][T12967] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 321.758116][ T9075] dump_stack+0x15/0x20 [ 321.761018][T12967] __read_swap_cache_async+0x2b7/0x520 [ 321.766877][ T9075] dump_header+0x83/0x2d0 [ 321.771435][T12967] swap_cluster_readahead+0x37e/0x3f0 [ 321.776270][ T9075] oom_kill_process+0x341/0x4c0 [ 321.782304][T12967] swapin_readahead+0xe4/0x760 [ 321.786432][ T9075] out_of_memory+0x9af/0xbe0 [ 321.791871][T12967] do_swap_page+0x3da/0x1ef0 [ 321.796187][ T9075] ? __rcu_read_unlock+0x4e/0x70 [ 321.801530][T12967] handle_mm_fault+0x8cb/0x2a30 [ 321.806359][ T9075] mem_cgroup_out_of_memory+0x13e/0x190 [ 321.811097][T12967] exc_page_fault+0x3b9/0x650 [ 321.815674][ T9075] try_charge_memcg+0x51b/0x810 [ 321.820225][T12967] asm_exc_page_fault+0x26/0x30 [ 321.825137][ T9075] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 321.829955][T12967] [ 321.829962][T12967] read to 0xffff8881140cfe68 of 4 bytes by task 12967 on cpu 0: [ 321.835472][ T9075] __read_swap_cache_async+0x2b7/0x520 [ 321.840112][T12967] mem_cgroup_iter+0xba/0x380 [ 321.844935][ T9075] swap_cluster_readahead+0x37e/0x3f0 [ 321.849744][T12967] shrink_node+0x458/0x1d40 [ 321.855783][ T9075] swapin_readahead+0xe4/0x760 [ 321.858077][T12967] do_try_to_free_pages+0x3c6/0xc50 [ 321.865678][ T9075] ? __filemap_get_folio+0x420/0x5b0 [ 321.871100][T12967] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 321.871128][T12967] try_charge_memcg+0x2bc/0x810 [ 321.875779][ T9075] ? swap_cache_get_folio+0x77/0x210 [ 321.881118][T12967] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 321.885589][ T9075] do_swap_page+0x3da/0x1ef0 [ 321.890315][T12967] __read_swap_cache_async+0x2b7/0x520 [ 321.895478][ T9075] ? hrtimer_start_range_ns+0x53d/0x580 [ 321.900727][T12967] swap_cluster_readahead+0x276/0x3f0 [ 321.906591][ T9075] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 321.911406][T12967] swapin_readahead+0xe4/0x760 [ 321.916662][ T9075] ? __rcu_read_lock+0x36/0x50 [ 321.922692][T12967] do_swap_page+0x3da/0x1ef0 [ 321.927250][ T9075] ? pte_offset_map_nolock+0x124/0x1d0 [ 321.932672][T12967] handle_mm_fault+0x8cb/0x2a30 [ 321.938199][ T9075] handle_mm_fault+0x8cb/0x2a30 [ 321.943538][T12967] exc_page_fault+0x3b9/0x650 [ 321.943563][T12967] asm_exc_page_fault+0x26/0x30 [ 321.943586][T12967] [ 321.943589][T12967] value changed: 0x0000053d -> 0x0000053e [ 321.943598][T12967] [ 321.943600][T12967] Reported by Kernel Concurrency Sanitizer on: [ 321.943606][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.3.2519 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 321.949038][ T9075] exc_page_fault+0x3b9/0x650 [ 321.953759][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 321.958499][ T9075] asm_exc_page_fault+0x26/0x30 [ 321.963053][T12967] ================================================================== [ 321.968483][ T9075] RIP: 0033:0x7f6f0d41efa5 [ 322.047420][ T9075] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 15 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 322.047439][ T9075] RSP: 002b:00007ffd25eec0e8 EFLAGS: 00010246 [ 322.047455][ T9075] RAX: 0000000000000000 RBX: 00000000000002ce RCX: 00007f6f0d41efa3 [ 322.047478][ T9075] RDX: 00007ffd25eec100 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.047488][ T9075] RBP: 00007ffd25eec15c R08: 00000000259d2e2f R09: 7fffffffffffffff [ 322.047499][ T9075] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 322.047509][ T9075] R13: 000000000004e633 R14: 000000000004e5e5 R15: 00007ffd25eec1b0 [ 322.047526][ T9075] [ 322.047712][ T9075] memory: usage 307200kB, limit 307200kB, failcnt 156 [ 322.122788][ T9075] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 322.122802][ T9075] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 322.137991][ T9075] Memory cgroup stats for /syz3: [ 322.140290][ T9075] cache 102400 [ 322.148609][ T9075] rss 0 [ 322.151356][ T9075] shmem 0 [ 322.154377][ T9075] mapped_file 102400 [ 322.158243][ T9075] dirty 102400 [ 322.161644][ T9075] writeback 0 [ 322.164922][ T9075] workingset_refault_anon 133 [ 322.169569][ T9075] workingset_refault_file 780 [ 322.174229][ T9075] swap 385024 [ 322.177491][ T9075] swapcached 0 [ 322.180847][ T9075] pgpgin 363133 [ 322.184341][ T9075] pgpgout 363108 [ 322.187860][ T9075] pgfault 356966 [ 322.191453][ T9075] pgmajfault 71 [ 322.194976][ T9075] inactive_anon 0 [ 322.198595][ T9075] active_anon 0 [ 322.202090][ T9075] inactive_file 0 [ 322.205918][ T9075] active_file 102400 [ 322.209899][ T9075] unevictable 0 [ 322.213334][ T9075] hierarchical_memory_limit 314572800 [ 322.218744][ T9075] hierarchical_memsw_limit 9223372036854771712 [ 322.224923][ T9075] total_cache 102400 [ 322.228793][ T9075] total_rss 0 [ 322.232072][ T9075] total_shmem 0 [ 322.235522][ T9075] total_mapped_file 102400 [ 322.239950][ T9075] total_dirty 102400 [ 322.243870][ T9075] total_writeback 0 [ 322.247659][ T9075] total_workingset_refault_anon 133 [ 322.252853][ T9075] total_workingset_refault_file 780 [ 322.258050][ T9075] total_swap 385024 [ 322.261833][ T9075] total_swapcached 0 [ 322.265716][ T9075] total_pgpgin 363134 [ 322.269729][ T9075] total_pgpgout 363109 [ 322.273816][ T9075] total_pgfault 356983 [ 322.277888][ T9075] total_pgmajfault 71 [ 322.281841][ T9075] total_inactive_anon 0 [ 322.286063][ T9075] total_active_anon 0 [ 322.290018][ T9075] total_inactive_file 0 [ 322.294228][ T9075] total_active_file 102400 [ 322.298650][ T9075] total_unevictable 0 [ 322.302684][ T9075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2519,pid=12967,uid=0 [ 322.317642][ T9075] Memory cgroup out of memory: Killed process 12967 (syz.3.2519) total-vm:89116kB, anon-rss:568kB, file-rss:16184kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 324.924128][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 324.924205][ T29] audit: type=1400 audit(1725822694.463:21947): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 325.164133][ T29] audit: type=1400 audit(1725822694.703:21948): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.39 dest=33856 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 325.225780][ T29] audit: type=1400 audit(1725822694.763:21949): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=46952 daddr=10.128.1.39 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 325.405276][ T29] audit: type=1400 audit(1725822694.943:21950): avc: denied { egress } for pid=6479 comm="kworker/u8:47" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 326.047355][ T29] audit: type=1400 audit(1725822695.583:21951): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 326.071094][ T29] audit: type=1400 audit(1725822695.583:21952): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 328.614731][ T29] audit: type=1400 audit(1725822698.153:21953): avc: denied { recv } for pid=3337 comm="kworker/0:5" saddr=10.128.0.163 src=30030 daddr=10.128.1.39 dest=33856 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 328.837455][ T29] audit: type=1400 audit(1725822698.373:21954): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=46952 daddr=10.128.1.39 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 330.555701][ T29] audit: type=1400 audit(1725822700.093:21955): avc: denied { execmem } for pid=13018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 330.575415][ T29] audit: type=1400 audit(1725822700.093:21956): avc: denied { execmem } for pid=13019 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 330.594976][ T29] audit: type=1400 audit(1725822700.103:21957): avc: denied { execmem } for pid=13020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 330.888024][ T6479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.898369][ T6479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.956217][ T6479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.966525][ T6479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.981670][ T29] audit: type=1400 audit(1725822700.513:21958): avc: denied { execmem } for pid=13021 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 331.016331][ T6479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.026720][ T6479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.086703][ T6479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.096988][ T6479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.143548][ T6479] bridge_slave_1: left allmulticast mode [ 331.149216][ T6479] bridge_slave_1: left promiscuous mode [ 331.154877][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.162629][ T6479] bridge_slave_0: left allmulticast mode [ 331.168837][ T6479] bridge_slave_0: left promiscuous mode [ 331.174482][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.174682][ T29] audit: type=1400 audit(1725822700.703:21959): avc: denied { egress } for pid=3402 comm="kworker/1:6" saddr=fe80::1e daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 331.205415][ T29] audit: type=1400 audit(1725822700.703:21960): avc: denied { egress } for pid=3402 comm="kworker/1:6" saddr=fe80::1e daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 331.375901][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.386051][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.396314][ T6479] bond0 (unregistering): Released all slaves [ 331.488080][ T29] audit: type=1400 audit(1725822701.023:21961): avc: denied { execmem } for pid=13022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 331.517383][ T6479] veth1_macvtap: left promiscuous mode [ 331.523352][ T6479] veth0_macvtap: left promiscuous mode [ 331.528908][ T6479] veth1_vlan: left promiscuous mode [ 331.534194][ T6479] veth0_vlan: left promiscuous mode [ 331.597031][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 331.607206][ T6479] team0 (unregistering): Port device team_slave_0 removed