last executing test programs: 1m10.771721765s ago: executing program 4 (id=2599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.750445736s ago: executing program 4 (id=2602): socket(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca1, 0x1, @perf_config_ext={0x0, 0x6}, 0x108282, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000002200)=""/4109, 0x0, 0x100d, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f140000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1m10.679749948s ago: executing program 4 (id=2606): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 1m10.535875483s ago: executing program 4 (id=2612): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m10.509822564s ago: executing program 4 (id=2614): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m10.414946297s ago: executing program 4 (id=2620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x50, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x448c4}, 0x4000) 1m10.389327257s ago: executing program 32 (id=2620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x50, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x448c4}, 0x4000) 1m5.35278292s ago: executing program 0 (id=2802): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f80)={0x2c, 0x35, 0x1, 0x70bd25, 0x25dfdbfd, {0x7}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x92}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x44, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x8080) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x90d64aa1c188f344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) 1m5.312043541s ago: executing program 0 (id=2804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.252961204s ago: executing program 0 (id=2805): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.243988223s ago: executing program 0 (id=2806): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1m4.371236722s ago: executing program 0 (id=2841): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x8a1026, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m4.286474795s ago: executing program 0 (id=2845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x5d, &(0x7f0000000240)=""/93, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 58.113245954s ago: executing program 1 (id=3017): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xc, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x828, 0x0, 0x7, 0x0, 0x9, 0x800200, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 58.049076536s ago: executing program 1 (id=3018): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 57.975212748s ago: executing program 1 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 57.974940958s ago: executing program 1 (id=3020): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 57.92733544s ago: executing program 1 (id=3021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 57.842627912s ago: executing program 1 (id=3022): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/215, 0xd7}, 0x43) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x9, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001800010324bd70c6695752af41"], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) 57.818752233s ago: executing program 33 (id=3022): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/215, 0xd7}, 0x43) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x9, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001800010324bd70c6695752af41"], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) 49.253553239s ago: executing program 34 (id=2845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x5d, &(0x7f0000000240)=""/93, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.556559127s ago: executing program 3 (id=4620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x310f000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, 0x0, 0x0, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 2.555951987s ago: executing program 3 (id=4622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="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", 0x3e4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x2, 0x119e75c4067765af) 1.678479306s ago: executing program 3 (id=4646): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x4}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.652683546s ago: executing program 3 (id=4647): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.579934769s ago: executing program 5 (id=4648): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.566866399s ago: executing program 5 (id=4649): unshare(0x400) r0 = open(0x0, 0x60840, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) fcntl$setlease(r0, 0x400, 0x2) 1.503338851s ago: executing program 5 (id=4651): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdffffff00000000023f00", @ANYBLOB], 0x34}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socketpair(0x1, 0x100000005, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x8, 0xa}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x44010) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.502489681s ago: executing program 3 (id=4652): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 1.292501698s ago: executing program 5 (id=4656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="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", 0x3e4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x2, 0x119e75c4067765af) 1.073065655s ago: executing program 2 (id=4661): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, 0x0) 1.020110726s ago: executing program 2 (id=4662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) 1.019899286s ago: executing program 2 (id=4663): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) clock_adjtime(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x84, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000700000000fb800aeb000000000000000000001c00000000ffffffff00000000000080001000000000000000000000040000000000000000cc0000000000000000000000000000000229e1337b0dea5e00000000000000000000000000000000428163c0e01e63e19db600"/144]}, 0x108) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4a23, @broadcast}, 0xffffffffffffff50) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 690.540867ms ago: executing program 2 (id=4674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) io_setup(0x7ff, &(0x7f0000000000)=0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = eventfd2(0x4, 0x801) io_submit(r3, 0x2, &(0x7f0000001640)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0x67f9, r0, 0x0, 0x0, 0x7f, 0x0, 0x3, r4}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x6, 0xfff0, r0, &(0x7f0000001580)="f10bd1c72b9ae0dce9f0096fa59108f0d36492b455254a12b689bb750564584cb3c5aba03553e976beba882a07ace1dc594641b9e60475f072d3f8ee38f3693858e85fc10ba942885e10128e4e4de5cbfae8725d8eb50a81f280b12d7ec663a7f7605cc0925e9840c1151e808dd5f2e83c159bb8dcf6", 0x76, 0x7a7, 0x0, 0x0, r5}]) 650.465008ms ago: executing program 3 (id=4675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 526.211263ms ago: executing program 7 (id=4676): getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000}) 457.847765ms ago: executing program 7 (id=4677): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000080)) 457.580445ms ago: executing program 6 (id=4678): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001740)={&(0x7f0000000040)="c887cc1780d291cd51b30ea814d777d2623a2a477633c8ee7364a46721b4fd1f80ed5319ae9021e3cd05d1668c8827ab83f522652da6cd3fed93465e83bc65b0ed0f313251b7ec8388d4606b78c618a455edafb7eb602c4f0526d70c8662a283ef271da18d4eca68e1896e4f6f8200371864895c18ea8cdf32d3cb4d224b1b05faab92445185fd6460814eb6e2da5cc155fade3c84ca50113b9509aea9861a14d54b1216c67070f2b43191723ec9a8fea44fc205a7c2a1d2c68bf524eeff53921dbf21c18c598f4f5087df6b3c837b4105cfbcf28311ffef82cc2a0e929ed7732495a4b2f5750ce674", 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c01200100"/37], 0x0) 430.698286ms ago: executing program 5 (id=4679): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdffffff00000000023f00", @ANYBLOB], 0x34}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socketpair(0x1, 0x100000005, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x8, 0xa}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x44010) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 153.050495ms ago: executing program 5 (id=4680): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) clock_adjtime(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x84, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000700000000fb800aeb000000000000000000001c00000000ffffffff00000000000080001000000000000000000000040000000000000000cc0000000000000000000000000000000229e1337b0dea5e00000000000000000000000000000000428163c0e01e63e19db600"/144]}, 0x108) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4a23, @broadcast}, 0xffffffffffffff50) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x3}, {0x20, 0x7f, 0x2, 0xfffff024}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 58.129008ms ago: executing program 6 (id=4682): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0) 57.252968ms ago: executing program 6 (id=4683): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)}, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0x0, 0x18}, 0xc0000}], 0x1, 0x40010110, 0x0) 173.12µs ago: executing program 6 (id=4684): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r2, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)='|', 0x1}], 0x1}, 0x4) 0s ago: executing program 6 (id=4685): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) kernel console output (not intermixed with test programs): 192215.316:343): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='…ÙȾN?dzÄW`õµÔ*íÖ%…›pf>߬·MØÏö–3Ã-/F½|H¢+íB€ÎÒÄuJ8òä "¼í=òòg¤›ÞU¾ß¢¯=¦Òõn@´wW Kçl®Ï”%¨Ò”²¸irSÕ»ü2{ÿú•“®,Z`Ts¸nË®3ÅþÖ§ó|OtYëP8º–!ãÿo©ð$a»lúÈ´}àâ1'šN~IN' [ 121.572558][ T28] audit: type=1400 audit(1781192215.406:344): avc: denied { setopt } for pid=9949 comm="syz.3.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.642274][ T9957] tipc: Enabling of bearer rejected, failed to enable media [ 121.650951][ T9957] syzkaller0: entered promiscuous mode [ 121.656591][ T9957] syzkaller0: entered allmulticast mode [ 121.663352][ T9957] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 122.000807][ T9982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2598'. [ 122.174784][T10008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2609'. [ 122.261676][ T28] audit: type=1400 audit(1781192216.096:345): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.291512][T10016] syzkaller0: entered promiscuous mode [ 122.297279][T10016] syzkaller0: entered allmulticast mode [ 122.430549][T10033] syzkaller1: entered promiscuous mode [ 122.436540][T10033] syzkaller1: entered allmulticast mode [ 122.485846][T10037] syzkaller0: entered promiscuous mode [ 122.492501][T10037] syzkaller0: entered allmulticast mode [ 122.506323][T10040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10040 comm=syz.2.2623 [ 122.709804][T10038] gretap0 speed is unknown, defaulting to 1000 [ 122.724613][T10038] lo speed is unknown, defaulting to 1000 [ 122.835211][T10070] syzkaller0: entered promiscuous mode [ 122.841024][T10070] syzkaller0: entered allmulticast mode [ 123.018086][T10098] syzkaller0: entered promiscuous mode [ 123.023638][T10098] syzkaller0: entered allmulticast mode [ 123.092152][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.100747][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 123.109933][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.117882][T10038] bridge_slave_0: entered allmulticast mode [ 123.124512][T10038] bridge_slave_0: entered promiscuous mode [ 123.131331][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.138740][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.150407][T10038] bridge_slave_1: entered allmulticast mode [ 123.162218][T10038] bridge_slave_1: entered promiscuous mode [ 123.187205][T10107] bond3: entered promiscuous mode [ 123.192631][T10107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.210080][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.220722][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.230511][T10111] syzkaller0: entered promiscuous mode [ 123.236158][T10111] syzkaller0: entered allmulticast mode [ 123.264462][T10038] team0: Port device team_slave_0 added [ 123.273335][T10038] team0: Port device team_slave_1 added [ 123.305169][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.312158][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.338205][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.349487][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.356479][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.382509][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.411964][T10038] hsr_slave_0: entered promiscuous mode [ 123.418878][T10038] hsr_slave_1: entered promiscuous mode [ 123.425051][T10038] debugfs: 'hsr0' already exists in 'hsr' [ 123.436527][T10038] Cannot create hsr debugfs directory [ 123.554564][T10038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.627226][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.641317][T10038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.656631][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.686518][T10129] syzkaller0: entered promiscuous mode [ 123.692088][T10129] syzkaller0: entered allmulticast mode [ 123.701214][T10038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.710146][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.725283][T10038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.734151][T10038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.743005][T10135] syzkaller0: entered promiscuous mode [ 123.748627][T10135] syzkaller0: entered allmulticast mode [ 123.764308][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.771387][T10038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.778807][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.785926][T10038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.804572][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.812283][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.832946][T10038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.845803][T10038] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.855931][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.863069][ T9884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.877337][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.884458][ T9892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.922480][T10145] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2664'. [ 124.035622][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 124.069610][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.115948][T10178] syzkaller0: entered promiscuous mode [ 124.129158][T10178] syzkaller0: entered allmulticast mode [ 124.235603][T10038] veth0_vlan: entered promiscuous mode [ 124.245346][T10038] veth1_vlan: entered promiscuous mode [ 124.261401][T10038] veth0_macvtap: entered promiscuous mode [ 124.268988][T10038] veth1_macvtap: entered promiscuous mode [ 124.294496][T10038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.323111][T10038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.337316][ T9884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.361629][ T9884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.372302][ T9884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.398963][ T9884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.446903][T10218] validate_nla: 2 callbacks suppressed [ 124.446921][T10218] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 124.475032][T10218] netlink: 'syz.0.2688': attribute type 4 has an invalid length. [ 124.488812][T10218] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2688'. [ 124.509947][T10225] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2622'. [ 124.519687][T10225] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2622'. [ 124.529663][T10223] syzkaller0: entered promiscuous mode [ 124.535927][T10223] syzkaller0: entered allmulticast mode [ 124.644082][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2694'. [ 124.804942][T10259] syzkaller0: entered promiscuous mode [ 124.817146][T10259] syzkaller0: entered allmulticast mode [ 124.916096][ T28] audit: type=1400 audit(1781192218.756:346): avc: denied { create } for pid=10274 comm="syz.5.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 124.989264][T10282] team0: Port device vxlan0 added [ 124.994681][ T9888] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.005600][ T5504] IPVS: starting estimator thread 0... [ 125.005773][ T9888] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.030747][ T9888] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.047599][ T9888] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.114972][T10284] IPVS: using max 2352 ests per chain, 117600 per kthread [ 125.142837][T10298] ipvlan2: entered allmulticast mode [ 125.153453][T10298] syz_tun: entered allmulticast mode [ 125.257318][T10316] netlink: 'syz.5.2734': attribute type 17 has an invalid length. [ 125.423801][T10313] gretap0 speed is unknown, defaulting to 1000 [ 125.433351][T10313] lo speed is unknown, defaulting to 1000 [ 125.436886][T10342] ipvlan2: entered allmulticast mode [ 125.733506][T10375] siw: device registration error -23 [ 125.737059][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.754553][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.761888][T10313] bridge_slave_0: entered allmulticast mode [ 125.768971][T10313] bridge_slave_0: entered promiscuous mode [ 125.776565][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.783660][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.791013][T10313] bridge_slave_1: entered allmulticast mode [ 125.797740][T10313] bridge_slave_1: entered promiscuous mode [ 125.819166][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.830246][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.857589][T10313] team0: Port device team_slave_0 added [ 125.864229][T10313] team0: Port device team_slave_1 added [ 125.888551][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.901813][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.928167][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.960865][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.968844][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.995960][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.016871][T10385] ipvlan2: entered allmulticast mode [ 126.051625][T10313] hsr_slave_0: entered promiscuous mode [ 126.057922][T10313] hsr_slave_1: entered promiscuous mode [ 126.064281][T10313] debugfs: 'hsr0' already exists in 'hsr' [ 126.070146][T10313] Cannot create hsr debugfs directory [ 126.353210][T10313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.394483][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.405736][T10313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.417524][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.429509][T10313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.450686][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.463876][T10406] syzkaller0: entered promiscuous mode [ 126.482665][T10406] syzkaller0: entered allmulticast mode [ 126.508955][T10313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.520791][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.536993][T10406] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 126.591183][T10421] __nla_validate_parse: 9 callbacks suppressed [ 126.591220][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2774'. [ 126.611064][T10423] netlink: 'syz.0.2771': attribute type 1 has an invalid length. [ 126.623390][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.662659][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.676557][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.683704][ T9894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.695562][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2774'. [ 126.709916][T10436] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2776'. [ 126.726682][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.733782][ T9884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.845800][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.853036][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.897009][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.907309][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.973403][ T9894] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.984192][ T9894] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.013556][ T9894] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.022547][ T9894] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.037451][ T9894] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.047740][ T9894] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.057497][ T9894] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.066825][ T9894] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.079279][T10449] syzkaller0: entered promiscuous mode [ 127.085076][T10449] syzkaller0: entered allmulticast mode [ 127.155796][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 127.229713][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.293384][T10484] syzkaller0: entered promiscuous mode [ 127.310060][T10484] syzkaller0: entered allmulticast mode [ 127.368702][T10313] veth0_vlan: entered promiscuous mode [ 127.388512][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2799'. [ 127.391644][T10313] veth1_vlan: entered promiscuous mode [ 127.423244][T10313] veth0_macvtap: entered promiscuous mode [ 127.431182][T10313] veth1_macvtap: entered promiscuous mode [ 127.443740][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.457246][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.478251][ T9886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.488745][ T9886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.498651][ T9886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.508168][ T9886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.562713][T10516] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 127.615104][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 127.649424][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 127.676015][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.683222][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.718933][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.731870][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.771229][ T9894] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.780908][ T9894] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.789946][ T9894] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.805569][ T9894] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.817533][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2815'. [ 127.830125][T10536] ipvlan2: entered allmulticast mode [ 127.899194][T10545] syzkaller0: entered promiscuous mode [ 127.904946][T10545] syzkaller0: entered allmulticast mode [ 127.911803][T10545] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 128.017268][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 128.047400][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 128.057429][T10558] bond2: left promiscuous mode [ 128.074307][T10558] bond3: left promiscuous mode [ 128.127162][T10568] netlink: 'syz.1.2828': attribute type 64 has an invalid length. [ 128.308241][T10587] bond3: left promiscuous mode [ 128.318612][ T9892] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.337345][ T9892] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.346539][ T9892] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.355818][ T9892] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.425847][ T28] audit: type=1400 audit(1781192222.266:347): avc: denied { mounton } for pid=10597 comm="syz.0.2841" path="/544/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 128.454302][ T28] audit: type=1400 audit(1781192222.266:348): avc: denied { remount } for pid=10597 comm="syz.0.2841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.496935][ T28] audit: type=1400 audit(1781192222.326:349): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.529970][T10604] syzkaller0: entered promiscuous mode [ 128.544245][T10604] syzkaller0: entered allmulticast mode [ 128.688489][T10618] netlink: 'syz.1.2851': attribute type 11 has an invalid length. [ 129.087866][T10641] syzkaller0: entered promiscuous mode [ 129.093537][T10641] syzkaller0: entered allmulticast mode [ 129.454249][T10669] syzkaller0: entered promiscuous mode [ 129.459802][T10669] syzkaller0: entered allmulticast mode [ 129.757149][T10691] syzkaller0: entered promiscuous mode [ 129.762913][T10691] syzkaller0: entered allmulticast mode [ 130.184595][T10716] syzkaller0: entered promiscuous mode [ 130.190466][T10716] syzkaller0: entered allmulticast mode [ 130.527144][T10739] ipvlan2: entered allmulticast mode [ 130.550115][T10742] syzkaller0: entered promiscuous mode [ 130.562458][T10742] syzkaller0: entered allmulticast mode [ 130.640015][T10748] syzkaller1: entered promiscuous mode [ 130.647116][T10748] syzkaller1: entered allmulticast mode [ 130.812452][T10762] syzkaller0: entered promiscuous mode [ 130.824127][T10762] syzkaller0: entered allmulticast mode [ 130.895241][T10770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.924597][T10773] ipvlan2: entered allmulticast mode [ 131.081326][T10781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.335102][T10795] syzkaller0: entered promiscuous mode [ 131.340631][T10795] syzkaller0: entered allmulticast mode [ 131.347556][T10795] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 131.451937][T10797] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 131.509664][T10801] ipvlan2: entered allmulticast mode [ 131.645664][T10806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.690544][T10814] netlink: 'syz.5.2942': attribute type 1 has an invalid length. [ 131.698449][T10814] netlink: 'syz.5.2942': attribute type 2 has an invalid length. [ 131.745364][T10820] syzkaller0: entered promiscuous mode [ 131.751016][T10820] syzkaller0: entered allmulticast mode [ 131.758315][T10820] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 131.875375][T10828] __nla_validate_parse: 14 callbacks suppressed [ 131.875391][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 131.878141][T10825] syzkaller1: entered promiscuous mode [ 131.896330][T10825] syzkaller1: entered allmulticast mode [ 131.968191][ T28] audit: type=1400 audit(1781192225.806:350): avc: denied { attach_queue } for pid=10833 comm="syz.3.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.108647][T10843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.177038][T10849] syzkaller0: entered promiscuous mode [ 132.182620][T10849] syzkaller0: entered allmulticast mode [ 132.189762][T10849] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 132.269012][T10853] syz.3.2959: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 132.284599][T10853] CPU: 1 UID: 0 PID: 10853 Comm: syz.3.2959 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.284625][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.284641][T10853] Call Trace: [ 132.284653][T10853] [ 132.284663][T10853] __dump_stack+0x1d/0x30 [ 132.284771][T10853] dump_stack_lvl+0x95/0xd0 [ 132.284798][T10853] dump_stack+0x15/0x1b [ 132.284820][T10853] warn_alloc+0x145/0x1c0 [ 132.284849][T10853] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 132.284876][T10853] ? irqentry_exit+0x55c/0x5d0 [ 132.284950][T10853] ? ctx_sched_in+0x3e9/0x410 [ 132.284982][T10853] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 132.285053][T10853] ? __rcu_read_unlock+0x4e/0x70 [ 132.285078][T10853] ? avc_has_perm_noaudit+0xab/0x130 [ 132.285121][T10853] ? should_fail_ex+0x30/0x280 [ 132.285143][T10853] vmalloc_user_noprof+0x7d/0xb0 [ 132.285166][T10853] ? xskq_create+0x80/0xe0 [ 132.285208][T10853] xskq_create+0x80/0xe0 [ 132.285253][T10853] xsk_init_queue+0x70/0xb0 [ 132.285288][T10853] xsk_setsockopt+0x477/0x640 [ 132.285318][T10853] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.285368][T10853] __sys_setsockopt+0x184/0x200 [ 132.285394][T10853] __x64_sys_setsockopt+0x64/0x80 [ 132.285421][T10853] x64_sys_call+0x2327/0x3020 [ 132.285484][T10853] do_syscall_64+0x12c/0x3b0 [ 132.285568][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.285590][T10853] RIP: 0033:0x7efe1016ce59 [ 132.285611][T10853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.285713][T10853] RSP: 002b:00007efe0ebbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.285738][T10853] RAX: ffffffffffffffda RBX: 00007efe103e5fa0 RCX: 00007efe1016ce59 [ 132.285755][T10853] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 132.285772][T10853] RBP: 00007efe10202d6f R08: 0000000000000004 R09: 0000000000000000 [ 132.285786][T10853] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 132.285879][T10853] R13: 00007efe103e6038 R14: 00007efe103e5fa0 R15: 00007ffd015b6448 [ 132.285902][T10853] [ 132.286044][T10853] Mem-Info: [ 132.498991][T10853] active_anon:6067 inactive_anon:0 isolated_anon:0 [ 132.498991][T10853] active_file:20181 inactive_file:2333 isolated_file:0 [ 132.498991][T10853] unevictable:0 dirty:206 writeback:0 [ 132.498991][T10853] slab_reclaimable:3335 slab_unreclaimable:20913 [ 132.498991][T10853] mapped:29203 shmem:178 pagetables:1095 [ 132.498991][T10853] sec_pagetables:0 bounce:0 [ 132.498991][T10853] kernel_misc_reclaimable:0 [ 132.498991][T10853] free:1875126 free_pcp:12639 free_cma:0 [ 132.544945][T10853] Node 0 active_anon:24332kB inactive_anon:0kB active_file:80724kB inactive_file:9332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116840kB dirty:848kB writeback:0kB shmem:712kB kernel_stack:4560kB pagetables:4328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.575238][T10853] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.612200][T10853] lowmem_reserve[]: 0 2878 7857 7857 [ 132.618090][T10853] Node 0 DMA32 free:2944456kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 132.649798][T10853] lowmem_reserve[]: 0 0 4978 4978 [ 132.655557][T10853] Node 0 Normal free:4545768kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24308kB inactive_anon:0kB active_file:80724kB inactive_file:9332kB unevictable:0kB writepending:848kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:42192kB local_pcp:26060kB free_cma:0kB [ 132.689554][T10853] lowmem_reserve[]: 0 0 0 0 [ 132.694485][T10853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.711859][T10853] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944456kB [ 132.728964][T10853] Node 0 Normal: 1255*4kB (UM) 1054*8kB (UM) 83*16kB (UM) 86*32kB (UM) 125*64kB (UME) 155*128kB (UME) 101*256kB (UME) 70*512kB (UM) 63*1024kB (UM) 18*2048kB (UE) 1059*4096kB (M) = 4546108kB [ 132.751745][T10853] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 132.761968][T10853] 22688 total pagecache pages [ 132.769463][T10853] 0 pages in swap cache [ 132.804029][T10853] Free swap = 124996kB [ 132.825624][T10853] Total swap = 124996kB [ 132.844112][T10853] 2097051 pages RAM [ 132.853189][T10853] 0 pages HighMem/MovableOnly [ 132.864087][T10853] 81657 pages reserved [ 132.905820][T10870] syzkaller0: entered promiscuous mode [ 132.911400][T10870] syzkaller0: entered allmulticast mode [ 132.930381][T10874] syzkaller0: entered promiscuous mode [ 132.938424][T10874] syzkaller0: entered allmulticast mode [ 132.954046][T10870] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.081476][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 133.104440][T10886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.156404][T10890] syzkaller1: entered promiscuous mode [ 133.183488][T10896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2979'. [ 133.193104][T10890] syzkaller1: entered allmulticast mode [ 133.369207][T10901] gretap0 speed is unknown, defaulting to 1000 [ 133.378242][T10901] lo speed is unknown, defaulting to 1000 [ 133.411501][T10919] syzkaller0: entered promiscuous mode [ 133.417271][T10919] syzkaller0: entered allmulticast mode [ 133.429390][T10919] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.486202][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2988'. [ 133.518204][T10923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.527396][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'. [ 133.535487][ T28] audit: type=1400 audit(1781192227.366:351): avc: denied { create } for pid=10925 comm="syz.1.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.744337][T10901] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.751479][T10901] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.759244][T10901] bridge_slave_0: entered allmulticast mode [ 133.768946][T10901] bridge_slave_0: entered promiscuous mode [ 133.792738][T10901] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.799981][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.807392][T10901] bridge_slave_1: entered allmulticast mode [ 133.814236][T10901] bridge_slave_1: entered promiscuous mode [ 133.821303][T10950] syzkaller0: entered promiscuous mode [ 133.826914][T10950] syzkaller0: entered allmulticast mode [ 133.839768][T10950] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.858648][T10901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.869198][T10901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.928544][T10901] team0: Port device team_slave_0 added [ 133.940418][T10901] team0: Port device team_slave_1 added [ 133.968568][T10901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.979830][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.006228][T10901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.041305][T10901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.054747][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.101904][T10901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.143489][T10901] hsr_slave_0: entered promiscuous mode [ 134.154889][T10901] hsr_slave_1: entered promiscuous mode [ 134.163609][ T28] audit: type=1400 audit(1781192227.996:352): avc: denied { mounton } for pid=10964 comm="syz.3.3005" path="/29/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 134.186310][T10901] debugfs: 'hsr0' already exists in 'hsr' [ 134.197923][T10901] Cannot create hsr debugfs directory [ 134.212126][ T28] audit: type=1400 audit(1781192227.996:353): avc: denied { mounton } for pid=10964 comm="syz.3.3005" path="/29/file0" dev="bpf" ino=34316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 134.344400][T10981] tipc: Enabled bearer , priority 0 [ 134.355288][T10981] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 134.381332][T10981] tipc: Resetting bearer [ 134.382896][ T28] audit: type=1400 audit(1781192228.216:354): avc: denied { nlmsg_read } for pid=10982 comm="syz.5.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.409843][T10980] tipc: Disabling bearer [ 134.473065][ T28] audit: type=1400 audit(1781192228.306:355): avc: denied { create } for pid=10988 comm="syz.5.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.556242][T10991] syzkaller0: entered promiscuous mode [ 134.561951][T10991] syzkaller0: entered allmulticast mode [ 134.636725][T10901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.645714][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.653749][T10901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.668331][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.691888][T10901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.711138][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.727915][T10901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.748153][T10901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.808474][T10901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.822867][T10901] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.836664][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.843763][ T9884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.863197][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.870295][ T9884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.039141][T10901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.110533][T11027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3024'. [ 135.121984][T11027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3024'. [ 135.186528][T10901] veth0_vlan: entered promiscuous mode [ 135.210796][T10901] veth1_vlan: entered promiscuous mode [ 135.263807][T11038] syzkaller0: entered promiscuous mode [ 135.269525][T11038] syzkaller0: entered allmulticast mode [ 135.279565][T11018] gretap0 speed is unknown, defaulting to 1000 [ 135.291657][T11018] lo speed is unknown, defaulting to 1000 [ 135.302351][T10901] veth0_macvtap: entered promiscuous mode [ 135.328934][T10901] veth1_macvtap: entered promiscuous mode [ 135.346080][T10901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.357539][T10901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.390336][ T9884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.399914][ T9884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.426099][ T9884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.441672][ T9884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.568521][ T28] audit: type=1400 audit(1781192229.406:356): avc: denied { write } for pid=11053 comm="syz.3.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.592003][ T28] audit: type=1400 audit(1781192229.426:357): avc: denied { read } for pid=11053 comm="syz.3.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.790676][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.809629][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.816984][T11018] bridge_slave_0: entered allmulticast mode [ 135.824968][T11018] bridge_slave_0: entered promiscuous mode [ 135.838899][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.848288][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.871105][T11018] bridge_slave_1: entered allmulticast mode [ 135.884684][T11018] bridge_slave_1: entered promiscuous mode [ 135.932567][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.959463][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.021875][T11018] team0: Port device team_slave_0 added [ 136.034202][T11018] team0: Port device team_slave_1 added [ 136.074657][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.084638][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.114946][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.131093][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.139406][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.165688][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.183462][T11101] tipc: Started in network mode [ 136.188736][T11101] tipc: Node identity 12a7090bfd3a, cluster identity 4711 [ 136.196228][T11101] tipc: Enabled bearer , priority 0 [ 136.206009][T11092] syzkaller0: entered promiscuous mode [ 136.211533][T11092] syzkaller0: entered allmulticast mode [ 136.221289][T11092] tipc: Resetting bearer [ 136.228830][T11090] tipc: Resetting bearer [ 136.243886][T11090] tipc: Disabling bearer [ 136.260329][T11103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3051'. [ 136.286746][T11018] hsr_slave_0: entered promiscuous mode [ 136.305479][T11018] hsr_slave_1: entered promiscuous mode [ 136.317169][T11018] debugfs: 'hsr0' already exists in 'hsr' [ 136.325762][T11018] Cannot create hsr debugfs directory [ 136.339198][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3053'. [ 136.389483][T11112] team0: Port device vxlan0 added [ 136.397901][ T3370] IPVS: starting estimator thread 0... [ 136.409280][ T9884] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.421462][ T9884] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.468116][ T9884] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.486442][ T9884] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.504015][T11113] IPVS: using max 2352 ests per chain, 117600 per kthread [ 136.568143][T11119] syzkaller0: entered promiscuous mode [ 136.573769][T11119] syzkaller0: entered allmulticast mode [ 136.644332][T11018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.668612][T11018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.748504][T11018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 136.758074][T11018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.770927][T11018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 136.782044][T11018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.792801][T11018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.802163][T11018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.880854][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3060'. [ 136.898555][ T28] audit: type=1400 audit(1781192230.736:358): avc: denied { write } for pid=11127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.940475][T11143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.955496][ T28] audit: type=1400 audit(1781192230.786:359): avc: denied { write } for pid=11147 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.981833][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3060'. [ 137.008307][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.028290][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.044225][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.051323][ T9888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.086751][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.093890][ T9892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.146368][T11157] netlink: 'syz.5.3061': attribute type 1 has an invalid length. [ 137.203899][T11166] tipc: Started in network mode [ 137.215351][T11166] tipc: Node identity 36be6afc0897, cluster identity 4711 [ 137.229815][T11166] tipc: Enabled bearer , priority 0 [ 137.238379][ T28] audit: type=1400 audit(1781192231.066:360): avc: denied { write } for pid=11153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.277789][T11173] syzkaller0: entered promiscuous mode [ 137.286286][T11173] syzkaller0: entered allmulticast mode [ 137.317712][T11166] tipc: Resetting bearer [ 137.326294][T11165] tipc: Resetting bearer [ 137.333666][T11165] tipc: Disabling bearer [ 137.395691][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.445964][T11188] tipc: Enabling of bearer rejected, failed to enable media [ 137.460723][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 137.470417][T11188] syzkaller0: entered promiscuous mode [ 137.476765][T11188] syzkaller0: entered allmulticast mode [ 137.613267][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3070'. [ 137.627979][T11205] pimreg: tun_chr_ioctl cmd 1074025681 [ 137.633878][T11018] veth0_vlan: entered promiscuous mode [ 137.649846][T11208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.661588][T11018] veth1_vlan: entered promiscuous mode [ 137.667603][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3070'. [ 137.726166][T11018] veth0_macvtap: entered promiscuous mode [ 137.757948][T11018] veth1_macvtap: entered promiscuous mode [ 137.770354][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.784076][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.808275][ T9886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.826523][T11216] netlink: 'syz.3.3072': attribute type 1 has an invalid length. [ 137.836504][ T9886] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.857195][ T9886] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.881764][ T9886] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.050398][T11233] tipc: Enabling of bearer rejected, failed to enable media [ 138.064620][T11233] syzkaller0: entered promiscuous mode [ 138.074423][T11233] syzkaller0: entered allmulticast mode [ 138.090172][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3082'. [ 138.117649][T11239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.130227][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3082'. [ 138.371079][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3094'. [ 138.411465][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3095'. [ 138.421577][T11265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.478932][T11270] tipc: Enabling of bearer rejected, failed to enable media [ 138.493670][T11270] syzkaller0: entered promiscuous mode [ 138.501553][T11270] syzkaller0: entered allmulticast mode [ 138.516760][T11268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3095'. [ 138.738759][T11286] syzkaller0: entered promiscuous mode [ 138.756207][T11286] syzkaller0: entered allmulticast mode [ 138.776799][T11287] veth1_macvtap: left promiscuous mode [ 138.789055][T11287] macsec0: entered promiscuous mode [ 138.817555][T11291] veth1_macvtap: entered promiscuous mode [ 138.836503][T11291] macsec0: entered allmulticast mode [ 138.856518][T11291] veth1_macvtap: entered allmulticast mode [ 138.952081][T11282] gretap0 speed is unknown, defaulting to 1000 [ 138.974593][T11282] lo speed is unknown, defaulting to 1000 [ 139.786577][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3107'. [ 141.960667][T11307] tipc: Enabling of bearer rejected, failed to enable media [ 141.983683][T11307] syzkaller0: entered promiscuous mode [ 141.990390][T11307] syzkaller0: entered allmulticast mode [ 142.191340][T11322] syzkaller0: entered promiscuous mode [ 142.200077][T11322] syzkaller0: entered allmulticast mode [ 142.300708][T11327] netlink: 'syz.2.3119': attribute type 3 has an invalid length. [ 142.310061][T11327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3119'. [ 142.375533][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 142.375548][ T28] audit: type=1400 audit(1781192236.206:362): avc: denied { write } for pid=11326 comm="syz.2.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.518425][T11342] syzkaller0: entered promiscuous mode [ 142.530578][T11342] syzkaller0: entered allmulticast mode [ 142.801490][T11360] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3135'. [ 142.831487][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3135'. [ 142.854378][T11362] netlink: 'syz.2.3136': attribute type 10 has an invalid length. [ 142.881024][T11362] team0: Device wg2 is of different type [ 143.631834][T11391] team0: Port device vxlan0 added [ 143.659591][ T9886] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.668973][ T9886] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.688543][ T4909] IPVS: starting estimator thread 0... [ 143.704381][ T9886] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.738978][ T9886] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.794490][T11397] IPVS: using max 2304 ests per chain, 115200 per kthread [ 143.874785][T11392] gretap0 speed is unknown, defaulting to 1000 [ 143.895835][T11392] lo speed is unknown, defaulting to 1000 [ 144.378494][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.839310][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.846769][T11392] bridge_slave_0: entered allmulticast mode [ 144.853222][T11392] bridge_slave_0: entered promiscuous mode [ 144.860162][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.867494][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.874920][T11392] bridge_slave_1: entered allmulticast mode [ 144.881445][T11392] bridge_slave_1: entered promiscuous mode [ 144.888500][T11433] bridge0: entered allmulticast mode [ 144.898381][T11434] bridge0: entered promiscuous mode [ 144.934993][T11392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.948623][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 144.960584][T11392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.001995][T11392] team0: Port device team_slave_0 added [ 145.021879][T11392] team0: Port device team_slave_1 added [ 145.044280][T11392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.051566][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.138520][T11392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.149971][T11392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.157710][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.192803][T11392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.251978][T11456] warn_alloc: 1 callbacks suppressed [ 145.252016][T11456] syz.6.3170: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 145.278624][T11392] hsr_slave_0: entered promiscuous mode [ 145.285001][T11392] hsr_slave_1: entered promiscuous mode [ 145.287726][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.6.3170 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.287835][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.287849][T11456] Call Trace: [ 145.287920][T11456] [ 145.287929][T11456] __dump_stack+0x1d/0x30 [ 145.287957][T11456] dump_stack_lvl+0x95/0xd0 [ 145.287981][T11456] dump_stack+0x15/0x1b [ 145.288056][T11456] warn_alloc+0x145/0x1c0 [ 145.288092][T11456] ? perf_swevent_hrtimer+0x2e1/0x310 [ 145.288129][T11456] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 145.288158][T11456] ? __rcu_read_unlock+0x4e/0x70 [ 145.288180][T11456] ? avc_has_perm_noaudit+0xab/0x130 [ 145.288252][T11456] ? should_fail_ex+0x30/0x280 [ 145.288280][T11456] vmalloc_user_noprof+0x7d/0xb0 [ 145.288359][T11456] ? xskq_create+0x80/0xe0 [ 145.288455][T11456] xskq_create+0x80/0xe0 [ 145.288493][T11456] xsk_init_queue+0x70/0xb0 [ 145.288552][T11456] xsk_setsockopt+0x477/0x640 [ 145.288663][T11456] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.288697][T11456] __sys_setsockopt+0x184/0x200 [ 145.288746][T11456] __x64_sys_setsockopt+0x64/0x80 [ 145.288830][T11456] x64_sys_call+0x2327/0x3020 [ 145.288872][T11456] do_syscall_64+0x12c/0x3b0 [ 145.288908][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.288933][T11456] RIP: 0033:0x7faa6740ce59 [ 145.288952][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.288977][T11456] RSP: 002b:00007faa65e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.289000][T11456] RAX: ffffffffffffffda RBX: 00007faa67685fa0 RCX: 00007faa6740ce59 [ 145.289016][T11456] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 145.289058][T11456] RBP: 00007faa674a2d6f R08: 0000000000000004 R09: 0000000000000000 [ 145.289106][T11456] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 145.289122][T11456] R13: 00007faa67686038 R14: 00007faa67685fa0 R15: 00007ffca41c0638 [ 145.289143][T11456] [ 145.290717][T11456] Mem-Info: [ 145.302650][T11392] debugfs: 'hsr0' already exists in 'hsr' [ 145.316689][T11456] active_anon:10139 inactive_anon:0 isolated_anon:0 [ 145.316689][T11456] active_file:20311 inactive_file:2342 isolated_file:0 [ 145.316689][T11456] unevictable:0 dirty:274 writeback:0 [ 145.316689][T11456] slab_reclaimable:3516 slab_unreclaimable:24783 [ 145.316689][T11456] mapped:32075 shmem:3047 pagetables:1054 [ 145.316689][T11456] sec_pagetables:0 bounce:0 [ 145.316689][T11456] kernel_misc_reclaimable:0 [ 145.316689][T11456] free:1871855 free_pcp:7503 free_cma:0 [ 145.321635][T11392] Cannot create hsr debugfs directory [ 145.335830][T11456] Node 0 active_anon:40672kB inactive_anon:0kB active_file:81244kB inactive_file:9368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119368kB dirty:1096kB writeback:0kB shmem:12188kB kernel_stack:5008kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 145.347495][T11457] syzkaller0: entered promiscuous mode [ 145.375846][T11456] Node 0 [ 145.379068][T11457] syzkaller0: entered allmulticast mode [ 145.390251][T11456] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.459563][T11392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 145.487040][T11456] lowmem_reserve[]: 0 2878 7857 7857 [ 145.637500][T11392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.645177][T11456] Node 0 DMA32 free:2944456kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 145.648915][T11392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 145.677438][T11456] lowmem_reserve[]: 0 0 4978 4978 [ 145.688889][T11456] Node 0 Normal free:4526272kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24296kB inactive_anon:0kB active_file:81244kB inactive_file:9368kB unevictable:0kB writepending:1104kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:43156kB local_pcp:17388kB free_cma:0kB [ 145.725464][T11456] lowmem_reserve[]: 0 0 0 0 [ 145.725788][T11392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.730331][T11456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB [ 145.739298][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3171'. [ 145.739313][T11456] (M) 3*4096kB (M) = 15360kB [ 145.763532][T11456] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944456kB [ 145.781964][T11456] Node 0 Normal: 1052*4kB (UME) 939*8kB (UM) 87*16kB (UM) 118*32kB (UME) 81*64kB (M) 49*128kB (M) 124*256kB (UM) 85*512kB (UM) 75*1024kB (UME) 28*2048kB (UM) 1047*4096kB (M) = 4526264kB [ 145.803854][T11456] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 145.824393][T11456] 22858 total pagecache pages [ 145.829885][T11456] 0 pages in swap cache [ 145.834715][T11456] Free swap = 124996kB [ 145.835508][T11392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 145.839005][T11456] Total swap = 124996kB [ 145.850454][T11456] 2097051 pages RAM [ 145.856968][T11456] 0 pages HighMem/MovableOnly [ 145.865424][T11456] 81657 pages reserved [ 145.868281][T11392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.885099][T11392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 145.910461][T11392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.968905][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3178'. [ 146.007672][T11480] ipvlan2: entered allmulticast mode [ 146.013145][T11480] syz_tun: entered allmulticast mode [ 146.107644][T11482] syzkaller0: entered promiscuous mode [ 146.120823][T11482] syzkaller0: entered allmulticast mode [ 146.141356][T11392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.174834][T11392] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.191889][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.196084][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3181'. [ 146.199070][ T9894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.224090][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.231179][ T9892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.417350][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'. [ 146.489639][T11514] ipvlan2: entered allmulticast mode [ 146.521480][T11392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.595559][T11522] syzkaller0: entered promiscuous mode [ 146.601087][T11522] syzkaller0: entered allmulticast mode [ 146.843530][T11529] gretap0 speed is unknown, defaulting to 1000 [ 146.861344][T11529] lo speed is unknown, defaulting to 1000 [ 146.892892][T11392] veth0_vlan: entered promiscuous mode [ 146.914812][T11392] veth1_vlan: entered promiscuous mode [ 146.955904][T11392] veth0_macvtap: entered promiscuous mode [ 146.974272][T11392] veth1_macvtap: entered promiscuous mode [ 147.003448][T11392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.030030][T11392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.056765][ T9894] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.092370][ T9894] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.119048][ T9894] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.128294][ T28] audit: type=1400 audit(1781192240.966:363): avc: denied { setopt } for pid=11558 comm="syz.3.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.145976][ T9894] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.514972][T11561] gretap0 speed is unknown, defaulting to 1000 [ 147.537756][T11561] lo speed is unknown, defaulting to 1000 [ 148.028088][T11588] team0: Port device vxlan0 added [ 148.044943][ T9892] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.054319][ T5504] IPVS: starting estimator thread 0... [ 148.055847][ T9892] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.138116][ T9892] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.147139][T11589] IPVS: using max 2256 ests per chain, 112800 per kthread [ 148.157126][ T9892] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.360655][T11596] syzkaller0: entered promiscuous mode [ 148.366414][T11596] syzkaller0: entered allmulticast mode [ 148.408095][T11601] syzkaller0: entered promiscuous mode [ 148.413661][T11601] syzkaller0: entered allmulticast mode [ 148.642606][T11616] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 149.182776][T11646] syzkaller0: entered promiscuous mode [ 149.189090][T11646] syzkaller0: entered allmulticast mode [ 149.282275][T11669] tipc: Started in network mode [ 149.293026][T11669] tipc: Node identity 92909f13373d, cluster identity 4711 [ 149.324603][T11669] tipc: Enabled bearer , priority 0 [ 149.357446][T11669] syzkaller0: entered promiscuous mode [ 149.362979][T11669] syzkaller0: entered allmulticast mode [ 149.386937][T11669] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 149.434202][T11669] tipc: Resetting bearer [ 149.466652][T11668] tipc: Resetting bearer [ 149.497338][T11668] tipc: Disabling bearer [ 149.728817][ T28] audit: type=1400 audit(1781192243.566:364): avc: denied { write } for pid=11678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.798748][ T28] audit: type=1400 audit(1781192243.636:365): avc: denied { write } for pid=11704 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.924177][T11716] tipc: Enabled bearer , priority 0 [ 149.936670][T11716] syzkaller0: entered promiscuous mode [ 149.948156][T11716] syzkaller0: entered allmulticast mode [ 149.957508][T11716] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 149.975272][T11716] tipc: Resetting bearer [ 149.988709][T11715] tipc: Resetting bearer [ 149.996600][T11715] tipc: Disabling bearer [ 150.100011][T11722] syzkaller0: entered promiscuous mode [ 150.105665][T11722] syzkaller0: entered allmulticast mode [ 150.382394][T11741] syzkaller0: entered promiscuous mode [ 150.388594][T11741] syzkaller0: entered allmulticast mode [ 150.397128][T11745] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3277'. [ 150.849551][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3287'. [ 150.884456][T11768] ipvlan2: entered allmulticast mode [ 150.889935][T11768] syz_tun: entered allmulticast mode [ 151.394038][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3303'. [ 151.424687][T11802] ipvlan2: entered allmulticast mode [ 152.082515][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3317'. [ 152.094590][T11834] ipvlan2: entered allmulticast mode [ 152.334292][T11847] syzkaller0: entered promiscuous mode [ 152.340638][T11847] syzkaller0: entered allmulticast mode [ 152.387956][T11854] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 152.427250][T11851] syzkaller0: entered promiscuous mode [ 152.432830][T11851] syzkaller0: entered allmulticast mode [ 152.564325][T11859] gretap0 speed is unknown, defaulting to 1000 [ 152.573857][T11859] lo speed is unknown, defaulting to 1000 [ 152.813378][T11880] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 152.845232][T11865] gretap0 speed is unknown, defaulting to 1000 [ 152.855836][T11865] lo speed is unknown, defaulting to 1000 [ 152.967683][T11891] syzkaller0: entered promiscuous mode [ 152.987891][T11891] syzkaller0: entered allmulticast mode [ 153.094322][ T28] audit: type=1400 audit(1781192246.936:366): avc: denied { lock } for pid=11900 comm="syz.7.3345" path="socket:[38478]" dev="sockfs" ino=38478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 153.264903][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.279691][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.322822][T11899] bridge0: entered allmulticast mode [ 153.347700][ T28] audit: type=1400 audit(1781192247.186:367): avc: denied { read write } for pid=11911 comm="syz.7.3350" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.421583][ T28] audit: type=1400 audit(1781192247.186:368): avc: denied { open } for pid=11911 comm="syz.7.3350" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.477255][ T28] audit: type=1400 audit(1781192247.186:369): avc: denied { ioctl } for pid=11911 comm="syz.7.3350" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.529621][T11908] bridge_slave_1: left allmulticast mode [ 153.532167][ T28] audit: type=1400 audit(1781192247.296:370): avc: denied { mount } for pid=11918 comm="syz.2.3353" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.540263][T11908] bridge_slave_1: left promiscuous mode [ 153.563542][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.697994][T11908] bridge_slave_0: left allmulticast mode [ 153.703702][T11908] bridge_slave_0: left promiscuous mode [ 153.715584][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.903303][T11933] loop5: detected capacity change from 0 to 7 [ 153.926143][ T28] audit: type=1400 audit(1781192247.766:371): avc: denied { execute } for pid=11932 comm="syz.6.3359" path="/54/cgroup.controllers" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.961435][ T28] audit: type=1400 audit(1781192247.796:372): avc: denied { create } for pid=11932 comm="syz.6.3359" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.561448][T11955] syzkaller0: entered promiscuous mode [ 154.569530][T11955] syzkaller0: entered allmulticast mode [ 154.938408][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.955604][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.047787][T11985] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 155.068492][T11987] syzkaller0: entered promiscuous mode [ 155.074204][T11987] syzkaller0: entered allmulticast mode [ 155.212990][T11997] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 155.287077][T12001] syzkaller0: entered promiscuous mode [ 155.292555][T12001] syzkaller0: entered allmulticast mode [ 155.304407][T12003] syzkaller0: entered promiscuous mode [ 155.309999][T12003] syzkaller0: entered allmulticast mode [ 155.423638][T12005] tipc: Started in network mode [ 155.432898][T12005] tipc: Node identity fe71eb3d16ee, cluster identity 4711 [ 155.440460][T12005] tipc: Enabled bearer , priority 0 [ 155.448849][T12005] tipc: Resetting bearer [ 155.458768][T12004] tipc: Disabling bearer [ 155.513645][T12015] syzkaller0: entered promiscuous mode [ 155.519170][T12015] syzkaller0: entered allmulticast mode [ 155.635687][T12028] tipc: Enabled bearer , priority 0 [ 155.642859][T12028] syzkaller0: entered promiscuous mode [ 155.649339][T12028] syzkaller0: entered allmulticast mode [ 155.657205][T12028] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 155.671536][T12028] tipc: Resetting bearer [ 155.678338][T12027] tipc: Resetting bearer [ 155.685661][T12027] tipc: Disabling bearer [ 155.720194][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3407'. [ 155.758273][T12040] tipc: Enabled bearer , priority 0 [ 155.766328][T12040] tipc: Resetting bearer [ 155.772849][T12039] tipc: Disabling bearer [ 155.841401][ T28] audit: type=1400 audit(1781192249.676:373): avc: denied { read } for pid=12049 comm="syz.2.3413" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.865331][ T28] audit: type=1400 audit(1781192249.676:374): avc: denied { open } for pid=12049 comm="syz.2.3413" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.901716][ T28] audit: type=1400 audit(1781192249.706:375): avc: denied { ioctl } for pid=12049 comm="syz.2.3413" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.981299][T12054] syzkaller0: entered promiscuous mode [ 155.987131][T12054] syzkaller0: entered allmulticast mode [ 155.995553][T12063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 156.001088][T12061] tipc: Started in network mode [ 156.009635][T12061] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.016700][T12061] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.023725][T12061] tipc: Enabled bearer , priority 10 [ 156.154034][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.164846][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3427'. [ 156.211399][ T28] audit: type=1326 audit(1781192250.046:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12082 comm="syz.2.3429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd450d7ce59 code=0x0 [ 156.239266][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3430'. [ 156.294033][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.342466][ T28] audit: type=1400 audit(1781192250.176:377): avc: denied { connect } for pid=12100 comm="syz.5.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.391546][ T28] audit: type=1400 audit(1781192250.176:378): avc: denied { bind } for pid=12100 comm="syz.5.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.430939][T12098] syzkaller0: entered promiscuous mode [ 156.434003][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.436773][T12098] syzkaller0: entered allmulticast mode [ 156.478412][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3441'. [ 156.533267][T12120] siw: device registration error -23 [ 156.560115][T12124] loop5: detected capacity change from 0 to 7 [ 156.574041][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.676180][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'. [ 156.714054][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.831987][T12162] warn_alloc: 2 callbacks suppressed [ 156.832072][T12162] syz.3.3464: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 156.852492][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.3.3464 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.852513][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.852527][T12162] Call Trace: [ 156.852540][T12162] [ 156.852549][T12162] __dump_stack+0x1d/0x30 [ 156.852572][T12162] dump_stack_lvl+0x95/0xd0 [ 156.852594][T12162] dump_stack+0x15/0x1b [ 156.852664][T12162] warn_alloc+0x145/0x1c0 [ 156.852747][T12162] ? futex_unqueue+0xc5/0xf0 [ 156.852765][T12162] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 156.852780][T12162] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.852794][T12162] ? __rcu_read_unlock+0x4e/0x70 [ 156.852867][T12162] ? avc_has_perm_noaudit+0xab/0x130 [ 156.852902][T12162] ? should_fail_ex+0x30/0x280 [ 156.852925][T12162] vmalloc_user_noprof+0x7d/0xb0 [ 156.853036][T12162] ? xskq_create+0x80/0xe0 [ 156.853055][T12162] xskq_create+0x80/0xe0 [ 156.853073][T12162] xsk_init_queue+0x70/0xb0 [ 156.853091][T12162] xsk_setsockopt+0x477/0x640 [ 156.853171][T12162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.853188][T12162] __sys_setsockopt+0x184/0x200 [ 156.853277][T12162] __x64_sys_setsockopt+0x64/0x80 [ 156.853292][T12162] x64_sys_call+0x2327/0x3020 [ 156.853307][T12162] do_syscall_64+0x12c/0x3b0 [ 156.853385][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.853398][T12162] RIP: 0033:0x7efe1016ce59 [ 156.853411][T12162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.853486][T12162] RSP: 002b:00007efe0ebbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.853507][T12162] RAX: ffffffffffffffda RBX: 00007efe103e5fa0 RCX: 00007efe1016ce59 [ 156.853522][T12162] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 156.853535][T12162] RBP: 00007efe10202d6f R08: 0000000000000004 R09: 0000000000000000 [ 156.853551][T12162] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 156.853567][T12162] R13: 00007efe103e6038 R14: 00007efe103e5fa0 R15: 00007ffd015b6448 [ 156.853628][T12162] [ 156.853636][T12162] Mem-Info: [ 156.863392][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 157.005332][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 157.068854][ T28] audit: type=1400 audit(1781192250.906:379): avc: denied { mount } for pid=12163 comm="syz.2.3465" name="/" dev="ramfs" ino=39651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 157.076389][T12162] active_anon:9626 inactive_anon:0 isolated_anon:0 [ 157.076389][T12162] active_file:20311 inactive_file:2348 isolated_file:0 [ 157.076389][T12162] unevictable:0 dirty:180 writeback:0 [ 157.076389][T12162] slab_reclaimable:3607 slab_unreclaimable:25868 [ 157.076389][T12162] mapped:29245 shmem:233 pagetables:1164 [ 157.076389][T12162] sec_pagetables:0 bounce:0 [ 157.076389][T12162] kernel_misc_reclaimable:0 [ 157.076389][T12162] free:1868060 free_pcp:9404 free_cma:0 [ 157.144442][ T5505] tipc: Node number set to 2886997162 [ 157.144578][T12162] Node 0 active_anon:38504kB inactive_anon:0kB active_file:81244kB inactive_file:9392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116980kB dirty:720kB writeback:0kB shmem:932kB kernel_stack:5232kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 157.144730][T12162] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.144898][T12162] lowmem_reserve[]: 0 2878 7857 7857 [ 157.144932][T12162] Node 0 DMA32 free:2944456kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 157.145022][T12162] lowmem_reserve[]: 0 0 4978 4978 [ 157.145055][T12162] Node 0 Normal free:4512424kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38504kB inactive_anon:0kB active_file:81244kB inactive_file:9392kB unevictable:0kB writepending:720kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:34088kB local_pcp:29080kB free_cma:0kB [ 157.145182][T12162] lowmem_reserve[]: 0 0 0 0 [ 157.145212][T12162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.145417][T12162] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944456kB [ 157.151244][T12162] Node 0 Normal: 646*4kB (UME) 582*8kB (UM) 32*16kB (M) 170*32kB (UME) 162*64kB (UME) 73*128kB (UME) 106*256kB (UME) 84*512kB (UME) 74*1024kB (UM) 22*2048kB (UM) 1047*4096kB (M) = 4512392kB [ 157.151579][T12162] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 157.151661][T12162] 22888 total pagecache pages [ 157.151669][T12162] 0 pages in swap cache [ 157.151677][T12162] Free swap = 124996kB [ 157.151686][T12162] Total swap = 124996kB [ 157.151694][T12162] 2097051 pages RAM [ 157.151700][T12162] 0 pages HighMem/MovableOnly [ 157.151707][T12162] 81657 pages reserved [ 157.284030][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 157.516724][T12192] syzkaller0: entered promiscuous mode [ 157.516748][T12192] syzkaller0: entered allmulticast mode [ 157.561952][T12199] siw: device registration error -23 [ 157.567153][T12202] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 157.682320][T12217] netlink: 528 bytes leftover after parsing attributes in process `syz.2.3490'. [ 157.768513][T12225] tipc: Enabling of bearer rejected, already enabled [ 157.802686][T12230] gretap1: entered promiscuous mode [ 157.838295][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.846949][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.879445][ T28] audit: type=1326 audit(1781192251.716:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.5.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 157.906445][ T28] audit: type=1326 audit(1781192251.746:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.5.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 157.932076][ T28] audit: type=1326 audit(1781192251.746:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.5.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 158.960779][T12280] syzkaller0: entered promiscuous mode [ 158.973812][T12280] syzkaller0: entered allmulticast mode [ 159.054640][T12297] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.062151][T12297] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.079791][T12297] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 159.095071][ T5505] IPVS: starting estimator thread 0... [ 159.184463][T12302] IPVS: using max 2352 ests per chain, 117600 per kthread [ 159.336534][T12318] syzkaller0: entered promiscuous mode [ 159.342077][T12318] syzkaller0: entered allmulticast mode [ 159.469715][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3542'. [ 159.567867][T12353] xt_hashlimit: size too large, truncated to 1048576 [ 159.600042][T12355] netlink: 'syz.7.3550': attribute type 10 has an invalid length. [ 159.610458][T12355] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 159.630917][T12355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.657890][T12355] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 159.670158][T12361] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3552'. [ 159.782803][T12366] syzkaller0: entered promiscuous mode [ 159.805309][T12366] syzkaller0: entered allmulticast mode [ 159.867356][T12376] syzkaller0: entered promiscuous mode [ 159.873876][T12376] syzkaller0: entered allmulticast mode [ 160.145414][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.161882][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.212538][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3572'. [ 160.287261][T12417] tipc: Enabled bearer , priority 0 [ 160.294645][T12417] syzkaller0: entered promiscuous mode [ 160.300185][T12417] syzkaller0: entered allmulticast mode [ 160.319216][T12417] tipc: Resetting bearer [ 160.325895][T12416] tipc: Resetting bearer [ 160.333146][T12416] tipc: Disabling bearer [ 160.384948][T12425] tipc: Enabled bearer , priority 10 [ 160.669708][T12454] tipc: Enabling of bearer rejected, already enabled [ 160.905846][T12490] loop5: detected capacity change from 0 to 7 [ 160.921529][T12487] syzkaller0: entered promiscuous mode [ 160.934590][T12487] syzkaller0: entered allmulticast mode [ 160.950533][T12491] syzkaller1: entered promiscuous mode [ 160.956225][T12491] syzkaller1: entered allmulticast mode [ 161.020655][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 161.020671][ T28] audit: type=1400 audit(1781192254.856:390): avc: denied { name_bind } for pid=12502 comm="syz.6.3616" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 161.136585][T12516] siw: device registration error -23 [ 161.145543][ T28] audit: type=1400 audit(1781192254.986:391): avc: denied { shutdown } for pid=12517 comm="syz.6.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.235152][T12524] net_ratelimit: 4 callbacks suppressed [ 161.235169][T12524] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.247957][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.255121][T12524] tipc: Enabled bearer , priority 10 [ 161.276230][ T28] audit: type=1400 audit(1781192255.116:392): avc: denied { read write } for pid=12525 comm="syz.6.3627" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 161.300666][ T28] audit: type=1400 audit(1781192255.116:393): avc: denied { open } for pid=12525 comm="syz.6.3627" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 161.362271][T12528] syzkaller0: entered promiscuous mode [ 161.367856][T12528] syzkaller0: entered allmulticast mode [ 161.374049][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.397477][ T4909] tipc: Node number set to 4020046091 [ 161.514022][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.538234][T12536] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.545791][T12536] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.553193][T12536] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 161.654046][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.715209][T12546] tipc: Enabling of bearer rejected, already enabled [ 161.794031][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.811996][T12550] syzkaller0: entered promiscuous mode [ 161.823536][T12550] syzkaller0: entered allmulticast mode [ 161.914975][T12565] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 161.928993][T12565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.934046][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.019249][T12574] syzkaller0: entered promiscuous mode [ 162.028242][T12574] syzkaller0: entered allmulticast mode [ 162.074034][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.214013][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.221497][T12585] syzkaller0: entered promiscuous mode [ 162.231062][T12585] syzkaller0: entered allmulticast mode [ 162.239528][ T28] audit: type=1400 audit(1781192256.076:394): avc: denied { write } for pid=12601 comm="syz.3.3663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 162.263352][T12600] tipc: Enabling of bearer rejected, already enabled [ 162.356397][ T5505] tipc: Node number set to 2779619091 [ 162.472541][T12620] program syz.5.3671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.487557][T12622] syzkaller0: entered promiscuous mode [ 162.493301][T12622] syzkaller0: entered allmulticast mode [ 162.751493][T12642] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3674'. [ 163.262104][T12653] xt_hashlimit: size too large, truncated to 1048576 [ 163.366760][T12660] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.432888][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3689'. [ 163.442038][T12660] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.472152][T12660] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 163.701301][T12678] syzkaller0: entered promiscuous mode [ 163.707005][T12678] syzkaller0: entered allmulticast mode [ 163.727769][T12680] syzkaller0: entered promiscuous mode [ 163.734214][T12680] syzkaller0: entered allmulticast mode [ 163.904549][T12708] xt_hashlimit: size too large, truncated to 1048576 [ 163.949517][T12701] syzkaller0: entered promiscuous mode [ 163.963170][T12701] syzkaller0: entered allmulticast mode [ 164.138147][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3722'. [ 164.156602][T12730] syzkaller0: entered promiscuous mode [ 164.172631][T12730] syzkaller0: entered allmulticast mode [ 164.189399][T12742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.205809][T12742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.259342][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3728'. [ 164.370451][T12756] syzkaller0: entered promiscuous mode [ 164.376696][T12756] syzkaller0: entered allmulticast mode [ 164.391760][T12762] syz.3.3734 (12762) used obsolete PPPIOCDETACH ioctl [ 164.480918][T12766] tipc: Enabling of bearer rejected, already enabled [ 164.528704][T12770] netlink: 'syz.7.3737': attribute type 1 has an invalid length. [ 164.619425][T12786] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3744'. [ 164.641479][T12789] loop5: detected capacity change from 0 to 7 [ 164.673309][T12793] tipc: Enabled bearer , priority 10 [ 164.724706][T12801] bond_slave_0: entered allmulticast mode [ 164.769369][T12805] netlink: 'syz.2.3753': attribute type 1 has an invalid length. [ 164.818769][T12815] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3758'. [ 164.857624][ T28] audit: type=1400 audit(1781192258.696:395): avc: denied { setopt } for pid=12817 comm="syz.5.3760" lport=49812 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 164.893144][T12823] tipc: Enabling of bearer rejected, already enabled [ 164.963464][ T28] audit: type=1400 audit(1781192258.796:396): avc: denied { read write } for pid=12832 comm="syz.5.3768" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.988506][ T28] audit: type=1400 audit(1781192258.796:397): avc: denied { open } for pid=12832 comm="syz.5.3768" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.996141][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.026747][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.060327][T12844] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3771'. [ 165.100949][ T28] audit: type=1326 audit(1781192258.936:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.7.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd23dce59 code=0x7ffc0000 [ 165.101872][T12848] loop5: detected capacity change from 0 to 7 [ 165.132866][ T28] audit: type=1326 audit(1781192258.936:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.7.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddd23dce59 code=0x7ffc0000 [ 165.237908][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.255891][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.259006][T12856] netlink: 'syz.6.3775': attribute type 1 has an invalid length. [ 165.275731][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.284263][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.337212][T12858] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.344751][T12858] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.352080][T12858] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 165.546316][T12872] loop5: detected capacity change from 0 to 7 [ 165.593260][T12874] tipc: Enabling of bearer rejected, already enabled [ 165.640348][T12878] netlink: 'syz.6.3787': attribute type 1 has an invalid length. [ 165.784122][ T4916] tipc: Node number set to 3902794557 [ 165.825964][T12898] tipc: Enabling of bearer rejected, already enabled [ 165.921269][T12906] netlink: 'syz.7.3801': attribute type 1 has an invalid length. [ 166.080016][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 166.419428][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 166.419446][ T28] audit: type=1400 audit(1781192260.256:402): avc: denied { listen } for pid=12978 comm="syz.6.3819" lport=41583 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 166.444045][ C1] net_ratelimit: 20 callbacks suppressed [ 166.444064][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.462471][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.724007][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.168512][T13087] tipc: Enabled bearer , priority 0 [ 167.210974][T13087] tipc: Resetting bearer [ 167.220236][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3847'. [ 167.249538][T13096] usb usb7: usbfs: process 13096 (syz.2.3848) did not claim interface 0 before use [ 167.253636][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3847'. [ 167.328210][T13106] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 167.338469][T13108] tipc: Enabling of bearer rejected, already enabled [ 167.404430][T13118] tipc: Enabled bearer , priority 0 [ 167.411846][T13118] syzkaller0: entered promiscuous mode [ 167.417941][T13118] syzkaller0: entered allmulticast mode [ 167.426553][T13118] tipc: Resetting bearer [ 167.433864][T13117] tipc: Resetting bearer [ 167.441793][T13117] tipc: Disabling bearer [ 167.484039][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.491202][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.556817][T13124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.711265][T13138] netlink: 'syz.7.3867': attribute type 1 has an invalid length. [ 167.804038][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.905661][T13156] __nla_validate_parse: 2 callbacks suppressed [ 167.905680][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3875'. [ 167.921531][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3875'. [ 168.040778][ T28] audit: type=1400 audit(1781192261.876:403): avc: denied { bind } for pid=13169 comm="syz.2.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.125836][T13174] batman_adv: batadv0: Adding interface: macvlan2 [ 168.132309][T13174] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.158055][T13174] batman_adv: batadv0: Interface activated: macvlan2 [ 168.217300][T13182] xt_hashlimit: size too large, truncated to 1048576 [ 168.360712][T13193] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 168.443449][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3896'. [ 168.524035][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.531194][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.619437][ T28] audit: type=1400 audit(1781192262.456:404): avc: denied { kexec_image_load } for pid=13218 comm="syz.7.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 168.641208][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.650287][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.682461][T13223] gretap0 speed is unknown, defaulting to 1000 [ 168.689082][T13223] lo speed is unknown, defaulting to 1000 [ 168.788037][T13223] dvmrp8: entered allmulticast mode [ 168.844007][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.855130][ T9896] dvmrp8: left allmulticast mode [ 168.881804][T13228] tipc: Enabling of bearer rejected, already enabled [ 169.471310][T13290] netlink: 'syz.7.3933': attribute type 1 has an invalid length. [ 169.479212][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3933'. [ 169.564031][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 170.008025][T13323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.016731][T13323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.059272][ T28] audit: type=1326 audit(1781192263.896:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.6.3948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 170.117270][ T28] audit: type=1326 audit(1781192263.896:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.6.3948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 170.143014][ T28] audit: type=1326 audit(1781192263.896:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.6.3948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 170.184885][ T28] audit: type=1326 audit(1781192263.896:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.6.3948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 170.331419][T13349] tipc: Enabled bearer , priority 0 [ 170.338643][T13349] syzkaller0: entered promiscuous mode [ 170.344502][T13349] syzkaller0: entered allmulticast mode [ 170.352627][T13349] tipc: Resetting bearer [ 170.360482][T13347] tipc: Resetting bearer [ 170.370546][T13347] tipc: Disabling bearer [ 170.489925][T13357] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 170.707097][T13368] syzkaller0: entered promiscuous mode [ 170.719082][T13368] syzkaller0: entered allmulticast mode [ 170.784217][T13372] tipc: Enabled bearer , priority 0 [ 170.794247][T13372] syzkaller0: entered promiscuous mode [ 170.804313][T13372] syzkaller0: entered allmulticast mode [ 170.813561][T13372] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 170.836232][T13371] tipc: Resetting bearer [ 170.857783][T13371] tipc: Disabling bearer [ 170.941423][T13382] tipc: Enabled bearer , priority 0 [ 170.961713][T13382] syzkaller0: entered promiscuous mode [ 170.991537][T13382] syzkaller0: entered allmulticast mode [ 171.006011][T13385] netlink: 'syz.7.3973': attribute type 1 has an invalid length. [ 171.042606][T13382] tipc: Resetting bearer [ 171.060198][T13381] tipc: Resetting bearer [ 171.076786][T13381] tipc: Disabling bearer [ 171.364796][T13416] tipc: Enabled bearer , priority 0 [ 171.379425][T13418] syz_tun: entered allmulticast mode [ 171.385572][T13416] syzkaller0: entered promiscuous mode [ 171.391388][T13416] syzkaller0: entered allmulticast mode [ 171.399861][T13417] syz_tun: left allmulticast mode [ 171.421801][T13416] tipc: Resetting bearer [ 171.467880][T13415] tipc: Resetting bearer [ 171.474383][T13422] netlink: 'syz.7.3990': attribute type 1 has an invalid length. [ 171.504965][T13415] tipc: Disabling bearer [ 171.596912][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3998'. [ 171.616925][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3996'. [ 171.644424][ C1] net_ratelimit: 5 callbacks suppressed [ 171.644477][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 171.658307][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 171.860472][T13463] netlink: 'syz.5.4009': attribute type 1 has an invalid length. [ 171.964006][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.372835][T13520] tipc: Enabled bearer , priority 0 [ 172.386506][T13520] syzkaller0: entered promiscuous mode [ 172.392028][T13520] syzkaller0: entered allmulticast mode [ 172.400289][T13519] tipc: Resetting bearer [ 172.417581][T13519] tipc: Disabling bearer [ 172.684058][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.691223][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.897442][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4056'. [ 172.929769][T13587] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 173.004022][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.049761][T13602] warn_alloc: 4 callbacks suppressed [ 173.049785][T13602] syz.3.4070: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 173.094591][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.104371][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.3.4070 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.104411][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.104424][T13602] Call Trace: [ 173.104431][T13602] [ 173.104441][T13602] __dump_stack+0x1d/0x30 [ 173.104477][T13602] dump_stack_lvl+0x95/0xd0 [ 173.104499][T13602] dump_stack+0x15/0x1b [ 173.104517][T13602] warn_alloc+0x145/0x1c0 [ 173.104608][T13602] ? futex_unqueue+0xc5/0xf0 [ 173.104641][T13602] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 173.104667][T13602] ? ktime_get+0x212/0x240 [ 173.104752][T13602] ? lapic_next_event+0x11/0x20 [ 173.104772][T13602] ? clockevents_program_event+0x2fd/0x340 [ 173.104861][T13602] ? _raw_spin_unlock+0x9/0x30 [ 173.104885][T13602] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 173.104914][T13602] ? avc_has_perm_noaudit+0xab/0x130 [ 173.104961][T13602] ? should_fail_ex+0x30/0x280 [ 173.104992][T13602] vmalloc_user_noprof+0x7d/0xb0 [ 173.105014][T13602] ? xskq_create+0x80/0xe0 [ 173.105121][T13602] xskq_create+0x80/0xe0 [ 173.105151][T13602] xsk_init_queue+0x70/0xb0 [ 173.105286][T13602] xsk_setsockopt+0x477/0x640 [ 173.105318][T13602] ? __sys_setsockopt+0x157/0x200 [ 173.105419][T13602] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.105524][T13602] __sys_setsockopt+0x184/0x200 [ 173.105554][T13602] __x64_sys_setsockopt+0x64/0x80 [ 173.105582][T13602] x64_sys_call+0x2327/0x3020 [ 173.105608][T13602] do_syscall_64+0x12c/0x3b0 [ 173.105648][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.105707][T13602] RIP: 0033:0x7efe1016ce59 [ 173.105725][T13602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.105744][T13602] RSP: 002b:00007efe0ebbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.105799][T13602] RAX: ffffffffffffffda RBX: 00007efe103e5fa0 RCX: 00007efe1016ce59 [ 173.105876][T13602] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 173.105888][T13602] RBP: 00007efe10202d6f R08: 0000000000000004 R09: 0000000000000000 [ 173.105901][T13602] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 173.105915][T13602] R13: 00007efe103e6038 R14: 00007efe103e5fa0 R15: 00007ffd015b6448 [ 173.105936][T13602] [ 173.105965][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.106648][T13602] Mem-Info: [ 173.275822][ T28] audit: type=1326 audit(1781192267.106:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.2.4069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 173.286578][T13602] active_anon:30281 inactive_anon:0 isolated_anon:0 [ 173.286578][T13602] active_file:24279 inactive_file:2357 isolated_file:0 [ 173.286578][T13602] unevictable:0 dirty:325 writeback:0 [ 173.286578][T13602] slab_reclaimable:3672 slab_unreclaimable:26174 [ 173.286578][T13602] mapped:32268 shmem:20647 pagetables:1283 [ 173.286578][T13602] sec_pagetables:0 bounce:0 [ 173.286578][T13602] kernel_misc_reclaimable:0 [ 173.286578][T13602] free:1838902 free_pcp:13415 free_cma:0 [ 173.312585][ T28] audit: type=1326 audit(1781192267.126:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.2.4069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 173.329124][T13602] Node 0 active_anon:118224kB inactive_anon:0kB active_file:97116kB inactive_file:9428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130696kB dirty:1300kB writeback:0kB shmem:80152kB kernel_stack:5296kB pagetables:4900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.367928][ T28] audit: type=1326 audit(1781192267.126:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.2.4069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 173.471253][T13602] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.604123][T13602] lowmem_reserve[]: 0 2878 7857 7857 [ 173.609840][T13602] Node 0 DMA32 free:2944456kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 173.656837][ T28] audit: type=1326 audit(1781192267.126:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.2.4069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 173.669259][T13602] lowmem_reserve[]: [ 173.717093][T13624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.727694][T13602] 0 [ 173.731621][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.735889][T13602] 0 [ 173.741221][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.748854][T13602] 4978 4978 [ 173.793320][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4073'. [ 173.828461][T13602] Node 0 Normal free:4430792kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85840kB inactive_anon:0kB active_file:97116kB inactive_file:9428kB unevictable:0kB writepending:1300kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:50360kB local_pcp:20324kB free_cma:0kB [ 173.866330][T13602] lowmem_reserve[]: 0 0 0 0 [ 173.871529][T13602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.892057][T13602] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944456kB [ 173.914609][T13602] Node 0 Normal: 1402*4kB (UM) 1220*8kB (UM) 260*16kB (UM) 214*32kB (M) 186*64kB (UME) 118*128kB (UME) 97*256kB (UME) 95*512kB (UME) 87*1024kB (UM) 26*2048kB (UM) 1016*4096kB (UM) = 4430728kB [ 173.934870][T13602] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 173.947603][T13602] 40255 total pagecache pages [ 173.952362][T13602] 0 pages in swap cache [ 173.956911][T13602] Free swap = 124996kB [ 173.961221][T13602] Total swap = 124996kB [ 173.977845][T13602] 2097051 pages RAM [ 173.986442][T13602] 0 pages HighMem/MovableOnly [ 173.995517][T13602] 81657 pages reserved [ 174.044004][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.397646][ T28] audit: type=1400 audit(1781192268.236:413): avc: denied { getopt } for pid=13689 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.618224][T13713] gretap0 speed is unknown, defaulting to 1000 [ 174.635696][T13713] lo speed is unknown, defaulting to 1000 [ 174.764014][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.976623][T13742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.010473][T13748] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4122'. [ 175.058825][T13754] loop7: detected capacity change from 0 to 16384 [ 175.117534][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4125'. [ 175.127322][T13756] netlink: 'syz.5.4125': attribute type 9 has an invalid length. [ 175.341962][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4131'. [ 175.378111][T13776] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4133'. [ 175.466771][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4137'. [ 175.633817][T13796] gretap0 speed is unknown, defaulting to 1000 [ 175.640541][T13796] lo speed is unknown, defaulting to 1000 [ 175.776338][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4144'. [ 175.860214][T13811] netlink: 'syz.3.4148': attribute type 1 has an invalid length. [ 176.038265][T13833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.063463][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.072964][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.092134][T13835] process 'syz.7.4160' launched '/dev/fd/5' with NULL argv: empty string added [ 176.095004][ T28] audit: type=1400 audit(1781192269.926:414): avc: denied { execute } for pid=13834 comm="syz.7.4160" dev="hugetlbfs" ino=45679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.110369][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.153569][ T28] audit: type=1400 audit(1781192269.936:415): avc: denied { execute_no_trans } for pid=13834 comm="syz.7.4160" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=45679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.171211][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.297342][T13859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.351305][T13864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.367199][T13866] xt_hashlimit: size too large, truncated to 1048576 [ 176.374613][T13864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.649739][T13900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.650581][T13901] loop2: detected capacity change from 0 to 7 [ 176.660478][T13900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.731608][ T28] audit: type=1326 audit(1781192270.566:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.2.4188" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 176.775605][ T28] audit: type=1326 audit(1781192270.596:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.2.4188" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 176.797214][T13914] xt_hashlimit: size too large, truncated to 1048576 [ 176.807429][ T28] audit: type=1326 audit(1781192270.596:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.2.4188" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd450d7ce59 code=0x7ffc0000 [ 176.844016][ C1] net_ratelimit: 5 callbacks suppressed [ 176.844051][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 176.856700][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.067366][T13937] loop2: detected capacity change from 0 to 7 [ 177.164023][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.173030][T13944] gretap0 speed is unknown, defaulting to 1000 [ 177.185775][T13944] lo speed is unknown, defaulting to 1000 [ 177.200814][T13950] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 177.235247][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4207'. [ 177.288836][T13952] gretap0 speed is unknown, defaulting to 1000 [ 177.309368][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.325504][T13952] lo speed is unknown, defaulting to 1000 [ 177.344394][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.554231][T13944] dvmrp8: entered allmulticast mode [ 177.601667][ T9894] dvmrp8: left allmulticast mode [ 177.744138][T13966] loop2: detected capacity change from 0 to 7 [ 177.842473][T13972] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4216'. [ 177.884052][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.891186][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.093154][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.102262][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.204278][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.414911][T13989] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 178.509510][T13993] loop2: detected capacity change from 0 to 7 [ 178.646620][T14002] siw: device registration error -23 [ 178.924037][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.931116][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.107786][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4237'. [ 179.215229][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.223773][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.244016][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.270855][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 179.270873][ T28] audit: type=1326 audit(1781192273.106:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.3.4240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1016ce59 code=0x7ffc0000 [ 179.302769][ T28] audit: type=1326 audit(1781192273.106:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.3.4240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efe1016ce59 code=0x7ffc0000 [ 179.328750][ T28] audit: type=1326 audit(1781192273.106:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.3.4240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1016ce59 code=0x7ffc0000 [ 179.354498][ T28] audit: type=1326 audit(1781192273.106:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.3.4240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1016ce59 code=0x7ffc0000 [ 179.740090][T14065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.792014][T14069] netlink: 'syz.2.4252': attribute type 1 has an invalid length. [ 179.902338][T14081] siw: device registration error -23 [ 179.909043][T14082] syzkaller0: entered promiscuous mode [ 179.914634][T14082] syzkaller0: entered allmulticast mode [ 179.964036][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.216894][T14097] netlink: 'syz.2.4266': attribute type 1 has an invalid length. [ 180.301731][T14113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.312499][T14113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.356760][ T28] audit: type=1326 audit(1781192274.196:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.5.4269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 180.416474][ T28] audit: type=1326 audit(1781192274.196:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.5.4269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 180.470699][ T28] audit: type=1326 audit(1781192274.196:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.5.4269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 180.523877][ T28] audit: type=1326 audit(1781192274.196:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.5.4269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 180.555545][ T28] audit: type=1326 audit(1781192274.196:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.5.4269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d1aece59 code=0x7ffc0000 [ 180.588088][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4278'. [ 180.625328][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4278'. [ 180.749664][ T28] audit: type=1400 audit(1781192274.586:433): avc: denied { listen } for pid=14145 comm="syz.3.4288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.017351][T14167] siw: device registration error -23 [ 181.095679][T14173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.482899][ T3383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 181.491315][ T3383] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.828788][T14238] netlink: 'syz.7.4326': attribute type 1 has an invalid length. [ 182.023728][T14258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.044084][ C1] net_ratelimit: 6 callbacks suppressed [ 182.044107][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.056793][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.120432][T14271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.139055][T14274] siw: device registration error -23 [ 182.364075][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.387214][T14293] loop7: detected capacity change from 0 to 16384 [ 182.445407][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4350'. [ 182.657790][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4356'. [ 182.667000][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'. [ 183.056997][T14331] syzkaller0: entered promiscuous mode [ 183.070657][T14331] syzkaller0: entered allmulticast mode [ 183.084016][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.091289][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.242207][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4378'. [ 183.251238][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 183.258413][T14360] siw: device registration error -23 [ 183.320765][T14368] gretap0 speed is unknown, defaulting to 1000 [ 183.329626][T14368] lo speed is unknown, defaulting to 1000 [ 183.354732][T14372] xt_hashlimit: size too large, truncated to 1048576 [ 183.404021][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.575633][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 183.584682][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4390'. [ 183.675503][T14400] syzkaller0: entered promiscuous mode [ 183.680978][T14400] syzkaller0: entered allmulticast mode [ 184.124028][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.131208][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.187842][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 184.197012][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4402'. [ 184.259621][T14425] loop2: detected capacity change from 0 to 7 [ 184.444014][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.475221][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4413'. [ 184.484388][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4413'. [ 184.671210][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 184.671225][ T28] audit: type=1400 audit(1781192278.506:439): avc: denied { lock } for pid=14471 comm="syz.7.4422" path="socket:[48153]" dev="sockfs" ino=48153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 184.736569][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4424'. [ 184.745620][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4424'. [ 184.784366][ T28] audit: type=1400 audit(1781192278.626:440): avc: denied { execute } for pid=14476 comm="syz.6.4425" name="file1" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.785204][T14484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.815497][T14484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.846791][ T28] audit: type=1326 audit(1781192278.686:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.6.4425" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 184.872814][ T28] audit: type=1326 audit(1781192278.706:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.6.4425" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 184.912803][ T28] audit: type=1326 audit(1781192278.706:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.6.4425" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 184.940774][ T28] audit: type=1326 audit(1781192278.706:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14476 comm="syz.6.4425" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 185.164025][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 185.183311][T14499] xt_hashlimit: size too large, truncated to 1048576 [ 185.366248][T14508] syzkaller0: entered promiscuous mode [ 185.371947][T14508] syzkaller0: entered allmulticast mode [ 185.379534][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 185.389424][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4437'. [ 185.514045][T14522] syzkaller0: left promiscuous mode [ 185.519516][T14522] syzkaller0: left allmulticast mode [ 185.587473][T14535] xt_hashlimit: size too large, truncated to 1048576 [ 185.589975][T14529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.601867][T14534] loop2: detected capacity change from 0 to 7 [ 185.790886][T14548] syzkaller0: entered promiscuous mode [ 185.810302][T14548] syzkaller0: entered allmulticast mode [ 185.825588][T14554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.863843][T14554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.923342][ T28] audit: type=1400 audit(1781192279.756:445): avc: denied { bind } for pid=14558 comm="syz.7.4457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.005567][ T28] audit: type=1326 audit(1781192279.836:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.6.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 186.040854][ T28] audit: type=1326 audit(1781192279.836:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.6.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 186.069544][ T28] audit: type=1326 audit(1781192279.836:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.6.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6740ce59 code=0x7ffc0000 [ 186.142082][T14576] netlink: 'syz.7.4465': attribute type 3 has an invalid length. [ 186.221810][T14585] netlink: 'syz.3.4468': attribute type 1 has an invalid length. [ 186.238577][T14583] syzkaller0: entered promiscuous mode [ 186.247318][T14583] syzkaller0: entered allmulticast mode [ 186.666519][T14618] netlink: 'syz.3.4481': attribute type 1 has an invalid length. [ 186.834591][T14633] gretap0 speed is unknown, defaulting to 1000 [ 186.841328][T14633] lo speed is unknown, defaulting to 1000 [ 186.879636][T14640] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 186.904172][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 186.995880][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.004847][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.105384][T14660] netlink: 'syz.6.4498': attribute type 1 has an invalid length. [ 187.244021][ C1] net_ratelimit: 7 callbacks suppressed [ 187.244051][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.256763][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.561918][T14694] netlink: 'syz.5.4510': attribute type 1 has an invalid length. [ 187.564016][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.811101][T14718] gretap0 speed is unknown, defaulting to 1000 [ 187.821629][T14718] lo speed is unknown, defaulting to 1000 [ 187.850397][T14723] netlink: 'syz.6.4523': attribute type 1 has an invalid length. [ 188.017982][T14735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.087782][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4532'. [ 188.109550][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 188.267300][T14755] netlink: 'syz.6.4537': attribute type 1 has an invalid length. [ 188.284023][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.291148][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.315666][T14763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.345814][T14765] loop2: detected capacity change from 0 to 7 [ 188.597243][T14798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.607909][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.628688][T14800] netlink: 'syz.3.4555': attribute type 12 has an invalid length. [ 188.645893][T14800] netlink: 'syz.3.4555': attribute type 29 has an invalid length. [ 188.654331][T14800] netlink: 'syz.3.4555': attribute type 7 has an invalid length. [ 188.662318][T14800] netlink: 'syz.3.4555': attribute type 37 has an invalid length. [ 188.689540][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.722253][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.742215][T14815] gretap0 speed is unknown, defaulting to 1000 [ 188.749053][T14815] lo speed is unknown, defaulting to 1000 [ 188.941561][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.951311][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.101702][T14860] syz_tun: entered allmulticast mode [ 189.107922][T14860] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 189.116442][T14860] mroute: pending queue full, dropping entries [ 189.200718][T14873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.299545][ T3370] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 189.308910][ T3370] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.324025][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.331185][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.439017][T14893] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 189.447653][T14893] mroute: pending queue full, dropping entries [ 189.678426][T14903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.865958][T14928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.998093][T14945] gretap0 speed is unknown, defaulting to 1000 [ 190.004871][T14945] lo speed is unknown, defaulting to 1000 [ 190.072760][T14959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.232072][T14970] xt_hashlimit: size too large, truncated to 1048576 [ 190.345652][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 190.345668][ T28] audit: type=1400 audit(1781192284.186:458): avc: denied { write } for pid=14981 comm="syz.7.4625" name="event3" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.450229][ T4916] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.459702][ T4916] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.490726][T14994] __nla_validate_parse: 5 callbacks suppressed [ 190.490790][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4630'. [ 190.553765][T14996] loop7: detected capacity change from 0 to 16384 [ 190.856479][T15008] loop2: detected capacity change from 0 to 7 [ 190.877127][T15010] xt_hashlimit: size too large, truncated to 1048576 [ 191.127246][T15026] gretap0 speed is unknown, defaulting to 1000 [ 191.134562][T15026] lo speed is unknown, defaulting to 1000 [ 191.188749][T15036] loop2: detected capacity change from 0 to 7 [ 191.268119][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4651'. [ 191.616350][T15059] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 191.630101][T15063] loop2: detected capacity change from 0 to 7 [ 191.752487][T15071] loop7: detected capacity change from 0 to 16384 [ 191.807193][T15077] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4666'. [ 192.322026][T15109] xt_hashlimit: size too large, truncated to 1048576 [ 192.336051][T15107] gretap0 speed is unknown, defaulting to 1000 [ 192.368727][T15107] lo speed is unknown, defaulting to 1000 [ 192.380888][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4679'. [ 192.444021][ C1] net_ratelimit: 7 callbacks suppressed [ 192.444038][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.456751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.679981][T15116] loop7: detected capacity change from 0 to 16384 [ 192.764004][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.840312][T15115] ================================================================== [ 192.848438][T15115] BUG: KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch [ 192.857139][T15115] [ 192.859445][T15115] read-write to 0xffff888101cdd148 of 8 bytes by interrupt on cpu 1: [ 192.867485][T15115] percpu_counter_add_batch+0x105/0x130 [ 192.873021][T15115] __wb_writeout_add+0x42/0x1b0 [ 192.877851][T15115] __folio_end_writeback+0x14b/0x360 [ 192.883116][T15115] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 192.889353][T15115] folio_end_writeback+0x1c/0x70 [ 192.894282][T15115] end_buffer_async_write+0x156/0x1f0 [ 192.899635][T15115] end_bio_bh_io_sync+0x79/0xa0 [ 192.904480][T15115] bio_endio+0x35b/0x3f0 [ 192.908728][T15115] blk_update_request+0x338/0x710 [ 192.913733][T15115] blk_mq_end_request+0x26/0x50 [ 192.918582][T15115] lo_complete_rq+0x98/0x140 [ 192.923165][T15115] blk_done_softirq+0x77/0xb0 [ 192.927828][T15115] handle_softirqs+0xb9/0x280 [ 192.932488][T15115] __irq_exit_rcu+0x42/0xd0 [ 192.936973][T15115] sysvec_apic_timer_interrupt+0x74/0x80 [ 192.942589][T15115] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.948552][T15115] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 192.954169][T15115] folio_batch_move_lru+0x246/0x290 [ 192.959377][T15115] folio_add_lru+0x14f/0x1f0 [ 192.963955][T15115] shmem_get_folio_gfp+0x7b0/0xd60 [ 192.969062][T15115] shmem_write_begin+0xfc/0x1f0 [ 192.973894][T15115] generic_perform_write+0x183/0x490 [ 192.979164][T15115] shmem_file_write_iter+0xc5/0xf0 [ 192.984273][T15115] lo_rw_aio+0x67d/0x730 [ 192.988504][T15115] loop_process_work+0x56c/0xac0 [ 192.993429][T15115] loop_workfn+0x31/0x40 [ 192.997672][T15115] process_scheduled_works+0x4f0/0x9c0 [ 193.003130][T15115] worker_thread+0x58a/0x780 [ 193.007723][T15115] kthread+0x22a/0x280 [ 193.011781][T15115] ret_from_fork+0x146/0x330 [ 193.016368][T15115] ret_from_fork_asm+0x1a/0x30 [ 193.021132][T15115] [ 193.023448][T15115] read to 0xffff888101cdd148 of 8 bytes by task 15115 on cpu 0: [ 193.031064][T15115] __wb_update_bandwidth+0x98/0x5d0 [ 193.036261][T15115] do_writepages+0x2dd/0x310 [ 193.040843][T15115] filemap_write_and_wait_range+0x166/0x370 [ 193.046736][T15115] bdev_release+0xeb/0x3d0 [ 193.051153][T15115] blkdev_release+0x15/0x20 [ 193.055646][T15115] __fput+0x29b/0x630 [ 193.059622][T15115] ____fput+0x1c/0x30 [ 193.063598][T15115] task_work_run+0x130/0x1a0 [ 193.068179][T15115] exit_to_user_mode_loop+0x211/0x820 [ 193.073542][T15115] do_syscall_64+0x232/0x3b0 [ 193.078135][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.084020][T15115] [ 193.086327][T15115] value changed: 0x00000000000035b0 -> 0x00000000000035c0 [ 193.093419][T15115] [ 193.095730][T15115] Reported by Kernel Concurrency Sanitizer on: [ 193.101865][T15115] CPU: 0 UID: 0 PID: 15115 Comm: syz.5.4680 Not tainted syzkaller #0 PREEMPT(lazy) [ 193.111225][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.121268][T15115] ================================================================== [ 193.484027][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.491145][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.804010][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.524039][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.531137][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.844236][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.564035][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.644040][ C1] net_ratelimit: 5 callbacks suppressed [ 197.644056][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.656726][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.974028][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.684145][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.691289][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.004051][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.734015][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.741082][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.054025][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.774022][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available