last executing test programs: 41.679118942s ago: executing program 2 (id=3318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) 41.606936547s ago: executing program 2 (id=3319): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76", 0x54}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b6", 0xdb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 41.606601747s ago: executing program 2 (id=3320): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r0, 0x6}}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)='l', 0x1, 0x7ddfdbdfafa554cd, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r4], 0x9) 41.148147198s ago: executing program 2 (id=3326): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) 40.991864879s ago: executing program 2 (id=3327): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d58", 0xab}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f07694", 0x90}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7", 0x26}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 40.699580759s ago: executing program 2 (id=3333): r0 = socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom$inet6(r0, 0x0, 0x0, 0x40000020, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) 40.67600436s ago: executing program 32 (id=3333): r0 = socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom$inet6(r0, 0x0, 0x0, 0x40000020, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) 39.084102119s ago: executing program 4 (id=3352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, r0}, 0xc) 39.083899679s ago: executing program 4 (id=3353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x3, 0x4000, 0x200, &(0x7f0000ab8000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 38.074551569s ago: executing program 4 (id=3365): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x480c0) 37.548902505s ago: executing program 4 (id=3368): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x1, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14b48b00000000000800", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x7]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0xc, r0, 0x0, 0x0, 0x9, 0xfffffffffdffffff}) 37.210785608s ago: executing program 4 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 37.012693902s ago: executing program 4 (id=3376): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 36.939651987s ago: executing program 33 (id=3376): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 35.123251931s ago: executing program 1 (id=3398): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000009", @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) 34.944585023s ago: executing program 1 (id=3400): unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.871668308s ago: executing program 1 (id=3404): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 34.726801988s ago: executing program 1 (id=3408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) 34.565967859s ago: executing program 1 (id=3412): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="f9"}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 34.421838789s ago: executing program 1 (id=3416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 34.421727209s ago: executing program 34 (id=3416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 13.99606111s ago: executing program 5 (id=3874): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x5, 0x58, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0xf, 0x1, 0x9, 0x3, 0x1, 0x1, 0x5, 0x5}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x10, 0x3, 0x1, 0x0, 0x1, 0x2c}, 0x2, {0x2, 0xc, 0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}}}}}}}}, 0x0) 13.982586451s ago: executing program 5 (id=3875): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0xf5, 0x10, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x12}, 0x80, 0x0}, 0x24000059) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x1d, r1}, 0x18, &(0x7f0000000340)={&(0x7f0000000400)="5ea81cc8d4a412d67e65ce3b8f66", 0xe}}, 0x0) 13.952703023s ago: executing program 5 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x40) 13.893164167s ago: executing program 5 (id=3877): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) 13.610639696s ago: executing program 5 (id=3882): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2c0}, 0x313c, 0x0, 0x4000000, 0x8, 0x8, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 13.604737447s ago: executing program 7 (id=3885): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)=@delchain={0x438, 0x65, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0x4, 0xffff}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5c73, 0x0, 0x592, 0x40000000, 0x8bc, 0x2b, 0x2, 0x5, 0x7054, 0x5, 0x0, 0xffff1c40, 0x2d5, 0x0, 0x4, 0x81, 0x3, 0x2, 0x4d69, 0x1, 0x4, 0x0, 0x8, 0x1, 0x80000000, 0x9, 0x0, 0x6, 0x8, 0x4, 0x4, 0x5, 0x10001, 0x84, 0x6, 0x8, 0xf, 0x60000, 0x0, 0x10001, 0x0, 0xfbef, 0x5, 0x40, 0xfffffff9, 0x7, 0x7fffffff, 0xc01, 0x3, 0xfffffff9, 0x8, 0x8, 0x8, 0x5, 0xb0, 0xfffff001, 0x8, 0x7, 0x6, 0x8, 0x7, 0x5, 0xfffffffb, 0x4, 0x2, 0x81, 0x3ff, 0x8, 0x4, 0x1, 0xba19, 0x6, 0xe6, 0x9, 0x80, 0x1, 0x4, 0x0, 0x1, 0x9, 0x7ff, 0x3, 0x3, 0x6, 0x1, 0x5, 0x4, 0x3, 0x2, 0x9, 0x2, 0x48be, 0x3, 0xffff, 0xffff2c8a, 0x5, 0x8, 0x1, 0x8001, 0x5, 0x1, 0x1, 0x5, 0xb, 0x8, 0x3, 0x5, 0x8, 0xf55f, 0x4, 0x72d, 0xfffffff7, 0x4, 0x3, 0x2, 0x4, 0x0, 0x1, 0xe7a, 0x9b, 0x7, 0x2bb, 0x89, 0x3ff, 0x2, 0x4, 0xfffffc01, 0x10000, 0x3, 0xfff, 0x2, 0xffff, 0x9b, 0x5, 0x0, 0x9, 0x2, 0x8000, 0xa02, 0xfff, 0x7fffffff, 0x8001, 0x80, 0xcc, 0x7ff, 0x6, 0x2, 0x46, 0x80000000, 0xfffffffa, 0x97f, 0xd, 0x7fffffff, 0x7, 0x800, 0x0, 0x5, 0x8, 0xb, 0x8, 0x7, 0xfffffffb, 0x6, 0x6, 0x9, 0xfffffffb, 0x4, 0x0, 0x9, 0x0, 0xe, 0x2, 0xb, 0x4, 0x8, 0x400, 0x9, 0x9, 0x1, 0x9, 0x8, 0x3, 0x2, 0x1, 0x0, 0xfffffffa, 0x3, 0x1, 0x26f5, 0x20c, 0x4, 0x7, 0x0, 0x6d2f, 0x8, 0x8, 0xa8d7, 0x7, 0xa24, 0xb, 0x4, 0x6, 0x0, 0xd, 0x0, 0x7, 0x2750, 0x47a, 0x2, 0x35, 0x5, 0x289, 0x1130, 0x80000000, 0x4, 0x2, 0x0, 0x5, 0x2, 0x8, 0xd6d3, 0x7, 0x3ff, 0xc7d, 0x6, 0xe3, 0x8000, 0x0, 0xfffffffc, 0x6, 0x8, 0xdc, 0xc, 0x4, 0xffff, 0x7fffffff, 0x5, 0x4, 0x1, 0xc65c, 0x0, 0x7, 0x0, 0x0, 0x3, 0xffffffff, 0x7, 0x33db, 0xe, 0xffffbffd, 0x4, 0x2f7, 0x80000001, 0x80, 0x10000]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x20040090}, 0x4c0d4) signalfd4(r0, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800) 13.233772952s ago: executing program 7 (id=3890): memfd_create(&(0x7f0000000000), 0x4) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) setrlimit(0x40000000000008, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) 13.189743576s ago: executing program 7 (id=3893): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x5, 0x4, 0xe, 0x5}, 0x5, 0x3, [{0xfffff2ea, 0x26, 0x80000000, 0x1, 0xa, 0x1000}]}, [{0x8000, 0x8, 0x3, 0x101, 0x9}, {0x9, 0x0, 0xa, 0xfffffff8, 0xffffffc0, 0x7}, {0x1, 0xe0, 0x4, 0x227, 0x7, 0x7}, {0x8, 0x7e72b319, 0x2, 0x3, 0xf, 0xb}, {0x1, 0x1, 0x80, 0x8, 0x3ff, 0x6}, {0x5, 0xa, 0xd, 0x8, 0x2, 0x4e36}, {0x80, 0xc889, 0x5, 0x7fff, 0x8, 0xb485}, {0xc, 0x74d, 0xc6, 0x5, 0x0, 0x7ff}, {0x82a, 0x10001, 0x0, 0x7, 0x4, 0x6c3}, {0x6, 0x8, 0x8, 0x2, 0x6, 0x80000001}, {0x1, 0xd, 0x5, 0x8, 0x2, 0x6}, {0x0, 0xffffffff, 0x3, 0xa767, 0x5, 0x6709}, {0xfffffff8, 0x0, 0x5, 0x0, 0x4, 0x7f}, {0xfffeffff, 0xc, 0xfffffff1, 0x3, 0x7ff, 0x5}, {0xf8, 0x4, 0x7, 0x2, 0x6, 0x9019}, {0x8000, 0x2, 0xfffffffc, 0x53da, 0xf000000, 0x3}, {0xff, 0xffffffff, 0x7, 0x1, 0x4, 0x9}, {0x5, 0x3, 0x4, 0x7, 0x4, 0x5}, {0x3, 0xe, 0xfffffff9, 0xc46, 0xe9a0, 0x101}, {0x7fff, 0x9, 0xb, 0x1, 0x3, 0x2}, {0x6, 0x6, 0x5, 0xe, 0x7, 0xffff}, {0x694, 0x700, 0x7e2daa4a, 0x9, 0xfffffff7, 0x1396000}, {0x1000, 0x8, 0x17, 0x7, 0xfffffffe, 0x79a5}, {0x3, 0x8, 0x2, 0x5, 0x0, 0x3}, {0x3, 0x4, 0x3de2, 0xfffffff7, 0xfffffffe, 0x9}, {0xd, 0xafa, 0x6, 0xe, 0x6, 0x89a}, {0xffffffff, 0x0, 0x10001, 0x2, 0x1, 0x3}, {0x400, 0x2, 0x10000, 0x7fff, 0x9}, {0x30b6, 0x6, 0x1, 0x9, 0x6, 0x6}, {0xedd, 0xda, 0x4100, 0x3, 0x7fffffff, 0x3}, {0x0, 0x1, 0x3, 0x1, 0x0, 0xbc93}, {0x9, 0x8, 0x0, 0x0, 0x40, 0x7ff}, {0x4, 0x5, 0x1, 0x6, 0x10001, 0xfffff800}, {0x1ff, 0x5, 0x6, 0x9, 0x0, 0x81}, {0x8, 0x5, 0xcad, 0x0, 0x2, 0x8}, {0x9, 0x401, 0x2, 0x44, 0xa, 0x8}, {0x1, 0x87a, 0x7, 0x800, 0x0, 0x8}, {0x0, 0x0, 0x7fffffff, 0xfa50, 0x8}, {0x3, 0x0, 0x2, 0x10001, 0x8}, {0x65, 0x3, 0x7, 0x80000000, 0x1, 0x2}, {0x8, 0x7, 0x4, 0x1, 0x7ff, 0x7}, {0x0, 0x9, 0xfffffffe, 0xc20, 0xff, 0x6}, {0x5, 0x8, 0xc7e, 0x7, 0x1, 0x6}, {0x782c, 0x8, 0x7, 0x80000001, 0x40, 0x8}, {0xd, 0x2, 0x6, 0x8, 0x3, 0x40}, {0x6, 0x3, 0x5000000, 0x8, 0xfaf, 0xbe}, {0xb, 0xf0, 0x9, 0x3, 0x9, 0x1000}, {0x5, 0x3, 0x7, 0xfff, 0x0, 0x2}, {0x80000000, 0x5, 0x9, 0x1000, 0x2, 0x4}, {0x4, 0x91, 0x7, 0x9, 0x9}, {0x6, 0xed, 0x8, 0xe, 0x0, 0x7}, {0xa5, 0x7, 0x5, 0x7fff, 0x5, 0xf248}, {0x9, 0x8, 0x3, 0xe, 0x80000000, 0x4}, {0x4, 0x120000, 0x1ff, 0x5, 0x1, 0xab3d}, {0xfffffe00, 0xf46a, 0x99c, 0xa, 0x2977, 0x10001}, {0x5, 0x7f, 0xb, 0x80000001, 0x6, 0x2}, {0x9, 0x10000, 0xfffffffc, 0x650, 0xfffffffa, 0x2}, {0x8, 0x7, 0x9, 0x7, 0x30c0, 0x3}, {0x5, 0xc, 0x9, 0x5889, 0x3, 0x6}, {0x6, 0x7fffffff, 0x7fffffff, 0x80000000, 0x6, 0x3}, {0x10001, 0x6, 0x3, 0x10000, 0x6, 0xf7}, {0x8000, 0x4, 0x964c, 0x800, 0x1ff, 0x2}, {0xfffffff8, 0xcd8e, 0x81, 0x2, 0xd4, 0x8}, {0x5, 0xce13, 0xfffffffa, 0x0, 0x6d4, 0x6}, {0x7, 0x6, 0x4000, 0x8, 0x5c, 0x9}, {0xc0000000, 0x101, 0x400, 0xfae, 0xffffffff, 0x3}, {0x6, 0x3, 0x64, 0x4, 0x5, 0x9}, {0x5, 0x0, 0x0, 0x3, 0x9, 0x800000}, {0x8, 0x2, 0x0, 0x5, 0xa04, 0x9d9}, {0xff, 0x7a, 0x766, 0x6, 0x7, 0xdb}, {0x0, 0x9, 0x1000, 0x36a8, 0x0, 0xe}, {0x1, 0x10, 0xdb13, 0x5, 0x3, 0x7}, {0x9, 0x4, 0x0, 0x7fffffff, 0xffffffff, 0x800000}, {0x1, 0x7, 0x40, 0x8000, 0x6, 0x9}, {0x9, 0x7, 0x6, 0x0, 0x9, 0xff}, {0xb54f, 0x18951d45, 0x1, 0x80, 0x6, 0x9}, {0x100, 0x0, 0x36, 0xa, 0x2, 0x2}, {0x297f, 0x8, 0xe9d, 0xb01a, 0x6, 0x8}, {0x9, 0x8, 0x5, 0x2148, 0x5, 0x4}, {0xe2, 0x5b1811b1, 0x9, 0x4, 0x1}, {0x1000, 0x4e, 0x4, 0x7e, 0x4, 0xf7}, {0x1, 0xb0, 0x5, 0x6, 0xbcf, 0x2}, {0x2b91, 0x39d3fc76, 0x4, 0x0, 0xf40, 0x5}, {0xffffffff, 0x80000001, 0x9, 0x9, 0x5, 0x3}, {0xda60, 0xfffffffa, 0x2d5e, 0x6, 0xb3, 0xfffffffe}, {0x7, 0x1, 0x4, 0x9, 0x7, 0xae}, {0x2, 0x8, 0xffffff34, 0x7f, 0x800, 0x3}, {0xe, 0x1, 0x827, 0x1, 0x6, 0x5}, {0x9, 0x0, 0x4, 0x7, 0x1ff, 0xc}, {0x4, 0x4, 0x5a0, 0x6, 0x9, 0x7}, {0x2, 0x10001, 0x8000, 0xfffffffe, 0x7, 0xfa29}, {0x8, 0xd, 0x80, 0x100, 0x5, 0x9}, {0x1000, 0xfffffffc, 0x8001, 0x6, 0x1, 0x6}, {0x2, 0x48ed, 0xa4b, 0x1, 0xe06f, 0x18000}, {0x6, 0x1, 0x7, 0x1, 0x400, 0x5}, {0x8, 0xfffffff0, 0x100, 0x1, 0xff, 0xfffffffd}, {0x7, 0xd61, 0x7fffffff, 0xb87, 0x4, 0x3}, {0x2, 0x9, 0x5, 0x4, 0x0, 0x1ff}, {0x9, 0x800, 0x9, 0x1, 0x8, 0x8}, {0x5, 0x2c00, 0x401, 0x4, 0x400, 0x4}, {0x9, 0x479, 0x5, 0x5, 0x8, 0x3}, {0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x7ff}, {0x2, 0x7fff, 0x4bf, 0x860, 0x4, 0x6}, {0xa, 0x0, 0x0, 0x6, 0x0, 0x1800}, {0x5, 0x2, 0x9, 0xb, 0x3, 0x4}, {0xffffffff, 0x5, 0x6, 0x1, 0x81, 0x5}, {0x0, 0x400000, 0x8476, 0x8, 0x7fff, 0x2}, {0x6, 0x7fff, 0x6, 0x5, 0x7fffffff, 0x5}, {0x1ff, 0x5, 0xf, 0x9, 0x7, 0xbf}, {0x9, 0x0, 0xcdd, 0x7, 0x4, 0x8}, {0x0, 0x200, 0x800, 0xffff, 0x1000, 0x400}, {0x80, 0x5, 0x1, 0x7, 0x478efc2a, 0x400}, {0x6342800, 0xa2, 0xa6, 0x4, 0x9f, 0x81}, {0xbe, 0x8000, 0x3, 0x4, 0x5, 0x2}, {0x8, 0xffffffff, 0x0, 0x9, 0xc756, 0x3}, {0x5, 0x1, 0xc, 0x5, 0x10000, 0x100}, {0x7, 0x3, 0x8, 0x7, 0x7fffffff, 0x2}, {0x8, 0x8, 0xffffffff, 0x1, 0xa, 0xfffff3b0}, {0x7fffffff, 0x3, 0x5, 0x2, 0x0, 0x3}, {0xee25, 0x10, 0x7, 0x6, 0x0, 0x1}, {0x100, 0x401, 0x7, 0xb, 0xfff}, {0x7, 0x1ff, 0x1, 0x1444, 0x741, 0x8}, {0x1, 0x3, 0x40, 0x40, 0xfffff70c, 0x400}, {0x8001, 0x8, 0x9, 0x4, 0xf8000000, 0x6}, {0x72, 0x3, 0xa, 0x3, 0xf, 0x9}, {0x5, 0x80, 0x5, 0x9, 0x2, 0x3}, {0x6, 0x0, 0x3, 0xb, 0x4, 0x4000}, {0x2, 0x96a, 0x4, 0xfffffff7, 0x0, 0xcdac}], [{0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {}, {0xf}, {0x2}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x1}, {0x2}, {0x5}, {0x4}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4}, {0xf}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.085240543s ago: executing program 7 (id=3894): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) 13.010492567s ago: executing program 5 (id=3896): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000540)={0x200103000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.956795651s ago: executing program 35 (id=3896): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000540)={0x200103000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.920882223s ago: executing program 7 (id=3899): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x5, 0x58, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0xf, 0x1, 0x9, 0x3, 0x1, 0x1, 0x5, 0x5}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x10, 0x3, 0x1, 0x0, 0x1, 0x2c}, 0x2, {0x2, 0xc, 0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}}}}}}}}, 0x0) 12.164084156s ago: executing program 7 (id=3907): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x8, 0xffffffff) 12.053217843s ago: executing program 36 (id=3907): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x8, 0xffffffff) 7.217829154s ago: executing program 6 (id=3950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf252e00000005002b00010000000c0005000200aaaaaaaaaaaa05002e00030000000a0001007770616e33000000060006000300090005002b0003000000060004000000000008000200", @ANYRES32, @ANYBLOB="0c002d000203aaaaaaaaaaaa0a0001007770616e31"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x100) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 5.485772814s ago: executing program 6 (id=3970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 4.043253752s ago: executing program 6 (id=3982): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) 2.827620966s ago: executing program 0 (id=3987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018100008", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f3a367845c67d52e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.771546699s ago: executing program 0 (id=3988): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76", 0x54}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b6", 0xdb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 2.310250681s ago: executing program 0 (id=3991): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) 2.258806105s ago: executing program 0 (id=3992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.144106353s ago: executing program 6 (id=3996): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000480, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000005c0)=r0, 0x12) 2.122921424s ago: executing program 6 (id=3999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.949948386s ago: executing program 6 (id=4002): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 1.696012123s ago: executing program 9 (id=4007): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_uring_setup(0x19ce, &(0x7f0000002180)={0x0, 0xceff, 0x1000, 0x0, 0x241}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1, 0x40000100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.695742854s ago: executing program 9 (id=4008): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 1.682843144s ago: executing program 9 (id=4009): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000480, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000005c0)=r0, 0x12) 1.653713946s ago: executing program 9 (id=4010): socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 1.464559519s ago: executing program 3 (id=4011): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 1.367595276s ago: executing program 3 (id=4012): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1}) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x1d, r1}, 0x18, 0x0}, 0x0) 1.367416476s ago: executing program 0 (id=4013): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76", 0x54}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b6", 0xdb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 1.360363686s ago: executing program 3 (id=4014): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0xd6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x2, "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"}, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1}, 0x0, 0x0, 0x1, 0x7, 0xd0e, 0x58e, 0xffff, 0x3, 0x9}) 1.332899329s ago: executing program 3 (id=4015): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a", 0xe5}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7", 0x26}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x179}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.31063823s ago: executing program 3 (id=4016): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x8, "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", 0x6, 0x3, 0x7, 0x5, 0x5, 0x8, 0x3, 0x1}}}, 0x128) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x2400c8c0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 1.299545921s ago: executing program 0 (id=4017): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda41089119308000001020301090224000200000000090468", @ANYRES16], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) poll(0x0, 0x0, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps_rollup\x00') ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000000)={0xffffffffffffffff, 0x7}) readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.274862702s ago: executing program 3 (id=4018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x101, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f1"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, 0x0, 0x0) close(r5) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810326aa8afcf1db3f38d3e50c85323643ae9c436b14b308b1f218cba9d1e037fa404b76e06dd3612991cba971aa73e2d66c451aa2dff6b222760c4cfbd2f0af58c3e98d507c6914761526b89014745f100fe05862458a8de81de532cd594c6e794b876e0000000000000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006150083000000002a90a08538b3c83e25038a39b52bb09ea549b3"], 0x0}, 0x0) 1.196041428s ago: executing program 9 (id=4019): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) ftruncate(r0, 0x2007ffa) sendfile(r1, r0, 0x0, 0x80000000a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.02329815s ago: executing program 8 (id=4021): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4f20, 0x710, @mcast1, 0x206}, {0xa, 0x4e20, 0x8080001, @mcast2, 0x10005}, r2, 0x7fff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r4, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r4, 0x5}}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 203.157955ms ago: executing program 8 (id=4022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 187.028837ms ago: executing program 8 (id=4023): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) 144.14583ms ago: executing program 8 (id=4024): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1}) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x1d, r1}, 0x18, 0x0}, 0x0) 143.90818ms ago: executing program 8 (id=4025): fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0xd6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x2, "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"}, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1}, 0x0, 0x0, 0x1, 0x7, 0xd0e, 0x58e, 0xffff, 0x3, 0x9}) 143.78344ms ago: executing program 8 (id=4026): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 9 (id=4027): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) kernel console output (not intermixed with test programs): 0428] netlink: 'syz.3.2406': attribute type 10 has an invalid length. [ 241.443040][T10428] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 241.955966][T10440] program syz.1.2412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.996583][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 242.162241][T10453] syzkaller0: entered promiscuous mode [ 242.167945][T10453] syzkaller0: entered allmulticast mode [ 242.245673][T10460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.312182][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'. [ 242.443343][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 242.834113][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 243.344545][T10499] program syz.0.2437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.444037][T10516] 9p: Bad value for 'wfdno' [ 243.530374][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2448'. [ 243.553213][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2448'. [ 243.566806][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2448'. [ 244.177162][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 244.197588][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 244.374299][T10564] program syz.1.2464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.438414][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 245.513931][T10579] syz.1.2471 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 245.590959][T10579] CPU: 1 UID: 0 PID: 10579 Comm: syz.1.2471 Not tainted syzkaller #0 PREEMPT(full) [ 245.590989][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.591009][T10579] Call Trace: [ 245.591017][T10579] [ 245.591026][T10579] __dump_stack+0x1d/0x30 [ 245.591103][T10579] dump_stack_lvl+0x95/0xd0 [ 245.591128][T10579] dump_stack+0x15/0x1b [ 245.591146][T10579] dump_header+0x80/0x240 [ 245.591166][T10579] oom_kill_process+0x295/0x350 [ 245.591237][T10579] out_of_memory+0x97d/0xb80 [ 245.591262][T10579] try_charge_memcg+0x62e/0xa10 [ 245.591346][T10579] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 245.591452][T10579] __swap_cache_prepare_and_add+0x67/0x460 [ 245.591479][T10579] ? alloc_pages_mpol+0x217/0x260 [ 245.591533][T10579] swap_cache_alloc_folio+0xa2/0x120 [ 245.591558][T10579] swap_cluster_readahead+0x26e/0x3d0 [ 245.591587][T10579] swapin_readahead+0xde/0x840 [ 245.591655][T10579] ? _raw_spin_unlock+0x9/0x30 [ 245.591684][T10579] ? swap_put_entries_cluster+0x385/0x3a0 [ 245.591722][T10579] ? swap_put_entries_cluster+0x141/0x3a0 [ 245.591837][T10579] ? __rcu_read_unlock+0x4e/0x70 [ 245.591856][T10579] ? swap_cache_get_folio+0x26f/0x280 [ 245.591880][T10579] do_swap_page+0x2fe/0x21e0 [ 245.591908][T10579] ? css_rstat_updated+0xbb/0x280 [ 245.592059][T10579] ? __rcu_read_lock+0x36/0x50 [ 245.592079][T10579] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 245.592163][T10579] handle_mm_fault+0xb46/0x3020 [ 245.592196][T10579] ? vma_start_read+0x1c7/0x2c0 [ 245.592227][T10579] do_user_addr_fault+0x62f/0x1050 [ 245.592277][T10579] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 245.592317][T10579] ? trace_page_fault_user+0x1f/0xe0 [ 245.592423][T10579] exc_page_fault+0x62/0xa0 [ 245.592443][T10579] asm_exc_page_fault+0x26/0x30 [ 245.592467][T10579] RIP: 0033:0x7f0ee1c80e50 [ 245.592483][T10579] Code: d5 00 49 39 54 24 28 0f 82 5e 03 00 00 40 0f b6 fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 <48> 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d 41 6f 3a 00 [ 245.592578][T10579] RSP: 002b:00007ffe8cdac550 EFLAGS: 00010293 [ 245.592596][T10579] RAX: 000000110c274000 RBX: ffffffff816418aa RCX: 0000000000000005 [ 245.592655][T10579] RDX: 00000000000018aa RSI: 0000000000001062 RDI: 0000000000000020 [ 245.592666][T10579] RBP: 0000000000000000 R08: 00007f0ee2010000 R09: 00007f0ee2012000 [ 245.592705][T10579] R10: 00000000816418ae R11: 0000000000000001 R12: 00007f0ee2026038 [ 245.592790][T10579] R13: 0000000000000001 R14: ffffffff816411c0 R15: 00007f0ee2b55720 [ 245.592806][T10579] ? __x64_sys_bpf+0x10/0x50 [ 245.592878][T10579] ? bpf_kallsyms_lookup_name+0xda/0x120 [ 245.592972][T10579] [ 245.850696][T10579] memory: usage 290756kB, limit 307200kB, failcnt 2714 [ 245.918178][T10579] memory+swap: usage 290944kB, limit 9007199254740988kB, failcnt 0 [ 245.926217][T10579] kmem: usage 290648kB, limit 9007199254740988kB, failcnt 0 [ 245.933498][T10579] Memory cgroup stats for /syz1: [ 245.933736][T10579] cache 4096 [ 245.941883][T10579] rss 28672 [ 245.945024][T10579] shmem 0 [ 245.947962][T10579] mapped_file 4096 [ 245.951675][T10579] dirty 0 [ 245.954678][T10579] writeback 4096 [ 245.958243][T10579] workingset_refault_anon 29 [ 245.962901][T10579] workingset_refault_file 0 [ 245.975273][T10579] swap 192512 [ 245.978680][T10579] swapcached 438272 [ 245.982506][T10579] pgpgin 289495 [ 245.995235][T10579] pgpgout 289481 [ 245.998843][T10579] pgfault 278242 [ 246.002373][T10579] pgmajfault 15 [ 246.015359][T10579] inactive_anon 4096 [ 246.025298][T10579] active_anon 49152 [ 246.029255][T10579] inactive_file 0 [ 246.032884][T10579] active_file 4096 [ 246.045287][T10579] unevictable 0 [ 246.048772][T10579] hierarchical_memory_limit 314572800 [ 246.054141][T10579] hierarchical_memsw_limit 9223372036854771712 [ 246.076476][T10579] total_cache 4096 [ 246.085261][T10579] total_rss 28672 [ 246.095264][T10579] total_shmem 0 [ 246.098805][T10579] total_mapped_file 4096 [ 246.103135][T10579] total_dirty 0 [ 246.125245][T10579] total_writeback 4096 [ 246.129361][T10579] total_workingset_refault_anon 29 [ 246.134709][T10579] total_workingset_refault_file 0 [ 246.145290][T10579] total_swap 192512 [ 246.155278][T10579] total_swapcached 438272 [ 246.159705][T10579] total_pgpgin 289495 [ 246.163705][T10579] total_pgpgout 289481 [ 246.185248][T10579] total_pgfault 278242 [ 246.189395][T10579] total_pgmajfault 15 [ 246.193373][T10579] total_inactive_anon 4096 [ 246.205285][T10579] total_active_anon 49152 [ 246.215279][T10579] total_inactive_file 0 [ 246.225317][T10579] total_active_file 4096 [ 246.229773][T10579] total_unevictable 0 [ 246.239972][T10579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2471,pid=10579,uid=0 [ 246.275128][T10579] Memory cgroup out of memory: Killed process 10579 (syz.1.2471) total-vm:94032kB, anon-rss:1248kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 247.431821][T10634] __nla_validate_parse: 3 callbacks suppressed [ 247.431837][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 247.456989][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2491'. [ 247.471646][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 247.489838][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2491'. [ 247.570290][T10650] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2498'. [ 247.599210][T10650] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2498'. [ 247.696166][T10650] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2498'. [ 249.016833][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 249.125533][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2507'. [ 249.135172][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2507'. [ 249.375685][T10695] netlink: 'syz.1.2511': attribute type 3 has an invalid length. [ 249.993729][T10718] program syz.4.2524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.982190][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 250.982205][ T28] audit: type=1400 audit(1775948003.914:6517): avc: denied { setopt } for pid=10783 comm="syz.0.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.439467][T10804] 9pnet_fd: Insufficient options for proto=fd [ 251.505772][T10810] syzkaller0: entered promiscuous mode [ 251.564193][T10810] syzkaller0: entered allmulticast mode [ 251.592222][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.602743][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.612342][T10815] tipc: Started in network mode [ 251.617571][T10815] tipc: Node identity 7, cluster identity 4711 [ 251.623825][T10815] tipc: Enabling of bearer rejected, failed to enable media [ 251.757781][T10830] program syz.2.2573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.827005][T10839] 9pnet_fd: Insufficient options for proto=fd [ 251.883183][T10846] syzkaller0: entered promiscuous mode [ 251.888921][T10846] syzkaller0: entered allmulticast mode [ 252.456032][T10881] syz.4.2594 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 253.061517][T10887] syzkaller0: entered promiscuous mode [ 253.127895][T10887] syzkaller0: entered allmulticast mode [ 253.169547][T10892] tipc: Started in network mode [ 253.174566][T10892] tipc: Node identity 96fecd3d1535, cluster identity 4711 [ 253.182507][T10892] tipc: Enabled bearer , priority 0 [ 253.217421][T10892] syzkaller0: entered promiscuous mode [ 253.227335][T10892] syzkaller0: entered allmulticast mode [ 253.244462][T10892] tipc: Resetting bearer [ 253.264972][T10892] tipc: Resetting bearer [ 253.314972][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.325881][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.334254][ T28] audit: type=1326 audit(1775948006.264:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10913 comm="syz.3.2607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f711606c819 code=0x0 [ 253.334384][T10892] tipc: Disabling bearer [ 254.421859][T10938] __nla_validate_parse: 3 callbacks suppressed [ 254.421875][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 255.016748][ T28] audit: type=1326 audit(1775948007.954:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.4.2626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbbb23c819 code=0x0 [ 255.860851][T10992] syzkaller0: entered promiscuous mode [ 255.866414][T10992] syzkaller0: entered allmulticast mode [ 256.122990][T11005] program syz.0.2642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.986606][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.006967][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.045971][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.063199][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.331428][T11038] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 257.359668][T11038] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 257.405914][T11038] tmpfs: Unknown parameter 'quota' [ 257.790577][T11044] program syz.2.2656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.824836][T11048] syzkaller0: entered promiscuous mode [ 257.830443][T11048] syzkaller0: entered allmulticast mode [ 258.013785][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.022697][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.425255][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.466522][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.639995][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.654767][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.196874][T11096] bridge0: port 3(syz_tun) entered blocking state [ 259.203631][T11096] bridge0: port 3(syz_tun) entered disabled state [ 259.210929][T11096] syz_tun: entered allmulticast mode [ 259.217822][T11096] syz_tun: entered promiscuous mode [ 259.224258][T11096] bridge0: port 3(syz_tun) entered blocking state [ 259.230820][T11096] bridge0: port 3(syz_tun) entered forwarding state [ 259.240572][T11096] tmpfs: Unknown parameter 'quota' [ 262.074981][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'. [ 262.084772][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'. [ 262.245538][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 263.061540][ T28] audit: type=1400 audit(1775948015.994:6520): avc: denied { mount } for pid=11217 comm="syz.0.2724" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 263.372840][ T28] audit: type=1400 audit(1775948016.304:6521): avc: denied { create } for pid=11229 comm="syz.1.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 263.393191][ T28] audit: type=1400 audit(1775948016.314:6522): avc: denied { write } for pid=11229 comm="syz.1.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 263.622699][ T28] audit: type=1400 audit(1775948016.554:6523): avc: denied { sys_module } for pid=11239 comm="syz.0.2733" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 263.788538][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.806535][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.819999][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 264.352939][T11284] lo speed is unknown, defaulting to 1000 [ 264.594375][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.602756][T11311] 9p: Could not find request transport: fd0x0000000000000005 [ 264.614020][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.642432][T11316] lo speed is unknown, defaulting to 1000 [ 264.798696][T11343] 9p: Could not find request transport: fd0x0000000000000005 [ 264.864513][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 265.845676][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.866717][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.954299][T11372] 9pnet_fd: Insufficient options for proto=fd [ 265.998101][ T28] audit: type=1400 audit(1775948018.934:6524): avc: denied { bind } for pid=11376 comm="syz.0.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.174927][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.194064][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.278558][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2813'. [ 266.289137][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2813'. [ 266.356058][T11433] program syz.2.2817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.454503][T11443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.499716][T11443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.659769][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.668629][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.800219][ T28] audit: type=1400 audit(1775948019.734:6525): avc: denied { create } for pid=11481 comm="syz.4.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.820600][ T28] audit: type=1400 audit(1775948019.734:6526): avc: denied { connect } for pid=11481 comm="syz.4.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.855539][ T28] audit: type=1400 audit(1775948019.754:6527): avc: denied { write } for pid=11481 comm="syz.4.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.906151][T11475] lo speed is unknown, defaulting to 1000 [ 266.992019][T11475] chnl_net:caif_netlink_parms(): no params data found [ 267.037852][T11475] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.045063][T11475] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.053502][T11475] bridge_slave_0: entered allmulticast mode [ 267.061556][T11475] bridge_slave_0: entered promiscuous mode [ 267.069686][T11475] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.078421][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.086289][T11475] bridge_slave_1: entered allmulticast mode [ 267.093340][T11475] bridge_slave_1: entered promiscuous mode [ 267.123682][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.136550][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.241009][T11475] team0: Port device team_slave_0 added [ 267.381876][T11475] team0: Port device team_slave_1 added [ 267.468765][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.485438][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.488926][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.501570][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.528312][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.548099][ T3314] bridge0: port 3(syz_tun) entered disabled state [ 267.557945][ T3314] syz_tun (unregistering): left allmulticast mode [ 267.564433][ T3314] syz_tun (unregistering): left promiscuous mode [ 267.570913][ T3314] bridge0: port 3(syz_tun) entered disabled state [ 267.579286][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.586356][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.612792][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.630259][ T2067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.652216][T11475] hsr_slave_0: entered promiscuous mode [ 267.658366][T11475] hsr_slave_1: entered promiscuous mode [ 267.664267][T11475] debugfs: 'hsr0' already exists in 'hsr' [ 267.670043][T11475] Cannot create hsr debugfs directory [ 267.676798][ T2067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.748818][ T2067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.806864][ T2067] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.831083][T11520] program syz.4.2850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.888508][ T2067] bridge_slave_1: left allmulticast mode [ 267.894943][ T2067] bridge_slave_1: left promiscuous mode [ 267.900760][ T2067] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.908598][ T2067] bridge_slave_0: left allmulticast mode [ 267.914405][ T2067] bridge_slave_0: left promiscuous mode [ 267.920265][ T2067] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.942513][ T2067] veth0_to_bond: left allmulticast mode [ 267.948323][ T2067] veth0_to_bond: left promiscuous mode [ 267.954017][ T2067] bridge14: port 1(veth0_to_bond) entered disabled state [ 268.316763][ T28] audit: type=1400 audit(1775948021.254:6528): avc: denied { lock } for pid=11532 comm="syz.1.2856" path="socket:[34354]" dev="sockfs" ino=34354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 268.395009][T11541] program syz.1.2860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.410110][T11543] 9pnet_fd: Insufficient options for proto=fd [ 268.463016][T11550] 9p: Bad value for 'rfdno' [ 268.627151][ T2067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.638551][ T2067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.647642][ T2067] bond0 (unregistering): Released all slaves [ 268.676701][T11568] 9pnet_fd: Insufficient options for proto=fd [ 268.773521][ T2067] hsr_slave_0: left promiscuous mode [ 268.791727][ T2067] hsr_slave_1: left promiscuous mode [ 268.803624][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.812573][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.882071][ T2067] team0 (unregistering): Port device macvlan1 removed [ 268.914433][ T2067] team0 (unregistering): Port device team_slave_1 removed [ 268.925155][ T2067] team0 (unregistering): Port device team_slave_0 removed [ 268.936890][T11602] 9pnet_fd: Insufficient options for proto=fd [ 268.994960][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2881'. [ 269.039103][ T2067] team0 (unregistering): Port device dummy0 removed [ 269.233265][T11612] program syz.4.2885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.361172][T11475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.460736][T11475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.554898][T11634] tmpfs: Unknown parameter 'usrquota' [ 269.584284][T11475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.608289][ T2067] IPVS: stop unused estimator thread 0... [ 269.615826][T11475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.767350][T11475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.787102][T11475] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.798870][ T2067] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.806018][ T2067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.840585][ T2067] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.847704][ T2067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.982879][T11475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.142750][T11475] veth0_vlan: entered promiscuous mode [ 270.154545][T11475] veth1_vlan: entered promiscuous mode [ 270.183583][T11475] veth0_macvtap: entered promiscuous mode [ 270.193292][T11475] veth1_macvtap: entered promiscuous mode [ 270.215112][T11475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.237638][T11475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.262145][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.282102][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.325165][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.340086][ T28] audit: type=1400 audit(1775948023.274:6529): avc: denied { mounton } for pid=11475 comm="syz-executor" path="/root/syzkaller.f3QTll/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 270.354705][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.376532][ T28] audit: type=1400 audit(1775948023.274:6530): avc: denied { mount } for pid=11475 comm="syz-executor" name="/" dev="gadgetfs" ino=4672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 271.097433][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 271.144532][ T28] audit: type=1400 audit(1775948024.074:6531): avc: denied { read } for pid=11698 comm="syz.2.2908" path="socket:[34841]" dev="sockfs" ino=34841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.459369][ T28] audit: type=1400 audit(1775948024.384:6532): avc: denied { setopt } for pid=11710 comm="syz.1.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.740242][T11735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 272.258033][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2925'. [ 272.268355][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 272.277567][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 272.505852][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 272.638728][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2928'. [ 272.691097][T11752] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2928'. [ 273.019039][T11771] ip6erspan0: entered promiscuous mode [ 273.025148][T11772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2937'. [ 273.076004][T11779] 9p: Bad value for 'wfdno' [ 273.076070][ T28] audit: type=1400 audit(1775948026.014:6533): avc: denied { connect } for pid=11778 comm="syz.1.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.232593][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.244017][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.280231][ T28] audit: type=1400 audit(1775948026.214:6534): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 273.534235][T11815] 9p: Bad value for 'wfdno' [ 273.675333][T11821] program syz.4.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.316664][ T3395] hid-generic 0006:0003:00D9.0002: item fetching failed at offset 1/3 [ 274.352916][ T3395] hid-generic 0006:0003:00D9.0002: probe with driver hid-generic failed with error -22 [ 274.474112][T11859] __nla_validate_parse: 9 callbacks suppressed [ 274.474128][T11859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2973'. [ 274.489661][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2973'. [ 274.498781][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2973'. [ 275.204357][T11884] program syz.2.2984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.457884][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.466740][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.476176][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.484717][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.496354][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 275.764919][ T28] audit: type=1400 audit(1775948028.694:6535): avc: denied { ioctl } for pid=11912 comm="syz.4.2997" path="socket:[35252]" dev="sockfs" ino=35252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.789770][ T28] audit: type=1400 audit(1775948028.714:6536): avc: denied { bind } for pid=11912 comm="syz.4.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.820344][T11919] program syz.4.2999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.856419][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3001'. [ 275.865583][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3001'. [ 275.874540][T11923] netlink: 'syz.4.3001': attribute type 6 has an invalid length. [ 276.033055][T11939] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3008'. [ 276.365795][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 276.609769][ T28] audit: type=1400 audit(1775948029.544:6537): avc: denied { getopt } for pid=12010 comm="syz.3.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 276.703862][T11996] lo speed is unknown, defaulting to 1000 [ 276.864073][T11996] chnl_net:caif_netlink_parms(): no params data found [ 277.064520][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3055'. [ 277.080181][ T3311] syz_tun (unregistering): left allmulticast mode [ 277.225879][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.240697][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.244521][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.267553][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.276576][T11996] bridge_slave_0: entered allmulticast mode [ 277.284073][T11996] bridge_slave_0: entered promiscuous mode [ 277.718471][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.725601][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.732787][T11996] bridge_slave_1: entered allmulticast mode [ 277.747427][T11996] bridge_slave_1: entered promiscuous mode [ 277.789998][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.816330][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.874975][T11996] team0: Port device team_slave_0 added [ 277.895922][T11996] team0: Port device team_slave_1 added [ 277.935746][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.935759][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.935781][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.937085][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.937155][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.937183][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.056513][T12082] kernel profiling enabled (shift: 9) [ 278.061615][ T56] bridge_slave_1: left allmulticast mode [ 278.061716][ T56] bridge_slave_1: left promiscuous mode [ 278.062096][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.063282][ T56] bridge_slave_0: left allmulticast mode [ 278.063295][ T56] bridge_slave_0: left promiscuous mode [ 278.063573][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.230967][ T56] bond2 (unregistering): (slave gretap1): Releasing active interface [ 278.248529][ T56] bond1 (unregistering): (slave geneve2): Releasing active interface [ 278.248571][ T56] geneve2 (unregistering): left allmulticast mode [ 278.366313][ T28] audit: type=1400 audit(1775948031.304:6538): avc: denied { accept } for pid=12087 comm="syz.1.3067" laddr=fe80::20f5:8dff:fe14:575c lport=53765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.993384][ T28] audit: type=1400 audit(1775948031.924:6539): avc: denied { connect } for pid=12099 comm="syz.2.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.321608][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.334025][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.477282][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.486626][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.495763][ T56] bond0 (unregistering): Released all slaves [ 279.504644][ T56] bond1 (unregistering): Released all slaves [ 279.513087][ T56] bond2 (unregistering): Released all slaves [ 279.531754][T12112] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3075'. [ 279.540882][T12112] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 279.567675][T11996] hsr_slave_0: entered promiscuous mode [ 279.574236][T11996] hsr_slave_1: entered promiscuous mode [ 279.580166][T11996] debugfs: 'hsr0' already exists in 'hsr' [ 279.585948][T11996] Cannot create hsr debugfs directory [ 279.599484][ T56] tipc: Left network mode [ 279.608304][ T56] hsr_slave_0: left promiscuous mode [ 279.614126][ T56] hsr_slave_1: left promiscuous mode [ 279.620270][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.628856][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.667747][ T56] team0 (unregistering): Port device macvlan1 removed [ 279.695232][ T56] team0 (unregistering): Port device team_slave_1 removed [ 279.705131][ T56] team0 (unregistering): Port device team_slave_0 removed [ 279.766979][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 280.155971][ T3395] lo speed is unknown, defaulting to 1000 [ 280.337637][ T3395] infiniband syz2: ib_query_port failed (-19) [ 281.239487][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 281.294239][T11996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.318532][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3112'. [ 281.331068][T11996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.371275][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3112'. [ 281.380589][T11996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.381576][ T28] audit: type=1400 audit(1775948034.314:6540): avc: denied { connect } for pid=12227 comm="syz.3.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.390390][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3112'. [ 281.419152][T11996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.513082][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 281.524703][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.535592][T12252] netlink: 'syz.2.3121': attribute type 63 has an invalid length. [ 281.547328][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.567479][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.574571][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.624261][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.631355][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.690226][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3128'. [ 281.722360][T11996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.741780][T11996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.745525][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3128'. [ 281.765809][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3128'. [ 281.914280][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.380717][T11996] veth0_vlan: entered promiscuous mode [ 282.409966][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.420935][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.432064][T11996] veth1_vlan: entered promiscuous mode [ 282.449590][T11996] veth0_macvtap: entered promiscuous mode [ 282.457128][T11996] veth1_macvtap: entered promiscuous mode [ 282.467987][T11996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.531830][T11996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.545859][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.568935][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.581936][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.615369][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.491681][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.501529][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.679875][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.691439][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.853444][T12354] chnl_net:caif_netlink_parms(): no params data found [ 285.922352][T12354] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.929899][T12354] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.937896][T12354] bridge_slave_0: entered allmulticast mode [ 285.949384][T12354] bridge_slave_0: entered promiscuous mode [ 285.956351][T12354] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.963631][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.971095][T12354] bridge_slave_1: entered allmulticast mode [ 285.978239][T12354] bridge_slave_1: entered promiscuous mode [ 285.995288][T12354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.005655][T12354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.025104][T12354] team0: Port device team_slave_0 added [ 286.031771][T12354] team0: Port device team_slave_1 added [ 286.033907][T12387] program syz.3.3149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.047464][T12354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.054401][T12354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.080417][T12354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.091612][T12354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.097869][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.098642][T12354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.108362][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.133002][T12354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.164034][T12354] hsr_slave_0: entered promiscuous mode [ 286.170044][T12354] hsr_slave_1: entered promiscuous mode [ 286.316890][T12404] __nla_validate_parse: 1 callbacks suppressed [ 286.316904][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3157'. [ 286.371109][T12410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3160'. [ 288.463544][T12554] usb usb7: usbfs: process 12554 (syz.4.3180) did not claim interface 0 before use [ 288.759393][ T28] audit: type=1400 audit(1775948041.694:6541): avc: denied { read } for pid=12561 comm="syz.4.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.448145][T12424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.458355][T12354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.471552][T12354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.490443][T12354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.511944][T12354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.537402][ T28] audit: type=1400 audit(1775948042.474:6542): avc: denied { mounton } for pid=12571 comm="syz.2.3188" path="/proc/153/cgroup" dev="proc" ino=37282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 289.574125][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 289.604485][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3190'. [ 289.614645][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3192'. [ 289.626690][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3190'. [ 289.673113][T12354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.750027][T12354] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.762533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.769694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.798049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.805360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.883773][T12354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.944652][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3204'. [ 289.964033][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3204'. [ 290.007887][T12354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.248470][T12354] veth0_vlan: entered promiscuous mode [ 290.260390][T12354] veth1_vlan: entered promiscuous mode [ 290.294566][T12354] veth0_macvtap: entered promiscuous mode [ 290.311180][T12354] veth1_macvtap: entered promiscuous mode [ 290.333726][T12354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.354131][T12354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.375091][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.394014][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.414461][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.442085][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.019508][T12652] chnl_net:caif_netlink_parms(): no params data found [ 291.147646][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.154852][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.162132][T12652] bridge_slave_0: entered allmulticast mode [ 291.168678][T12652] bridge_slave_0: entered promiscuous mode [ 291.195608][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.204924][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.219724][T12652] bridge_slave_1: entered allmulticast mode [ 291.235980][T12652] bridge_slave_1: entered promiscuous mode [ 291.254300][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.268039][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.289097][T12652] team0: Port device team_slave_0 added [ 291.295734][T12652] team0: Port device team_slave_1 added [ 291.325869][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.333094][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.359436][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.370992][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.387377][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.413638][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.441474][T12652] hsr_slave_0: entered promiscuous mode [ 291.447704][T12652] hsr_slave_1: entered promiscuous mode [ 291.453537][T12652] debugfs: 'hsr0' already exists in 'hsr' [ 291.459523][T12652] Cannot create hsr debugfs directory [ 291.521635][ T28] audit: type=1326 audit(1775948044.454:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.545575][ T28] audit: type=1326 audit(1775948044.484:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.580422][ T28] audit: type=1326 audit(1775948044.484:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.604565][ T28] audit: type=1326 audit(1775948044.484:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.635100][ T261] bridge_slave_1: left allmulticast mode [ 291.663032][ T28] audit: type=1326 audit(1775948044.494:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.687018][ T28] audit: type=1326 audit(1775948044.494:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.711100][ T28] audit: type=1326 audit(1775948044.504:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.735017][ T28] audit: type=1326 audit(1775948044.504:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f711606c819 code=0x7ffc0000 [ 291.755270][ T261] bridge_slave_1: left promiscuous mode [ 291.764185][ T261] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.772138][ T261] bridge_slave_0: left allmulticast mode [ 291.778069][ T261] bridge_slave_0: left promiscuous mode [ 291.783742][ T261] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.874945][T12712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3230'. [ 292.647584][ T261]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.656479][ T261]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.665069][ T261]  (unregistering): Released all slaves [ 292.671937][ T261] bond1 (unregistering): Released all slaves [ 292.738097][ T261] tipc: Left network mode [ 292.826700][T12740] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3244'. [ 292.852417][ T261] hsr_slave_0: left promiscuous mode [ 292.865919][ T261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.911085][ T261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.027882][ T261] team0 (unregistering): Port device macvlan1 removed [ 293.058340][ T261] team0 (unregistering): Port device team_slave_1 removed [ 293.068687][ T261] team0 (unregistering): Port device team_slave_0 removed [ 293.244110][T12652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.262267][T12652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.279412][T12652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.291501][T12652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.332413][T12652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.345131][T12652] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.355728][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.362879][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.390431][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.397587][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.470116][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.478863][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.488372][T12802] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 293.490885][ T261] IPVS: stop unused estimator thread 0... [ 293.540819][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.680102][T12652] veth0_vlan: entered promiscuous mode [ 293.687955][T12652] veth1_vlan: entered promiscuous mode [ 293.703641][T12652] veth0_macvtap: entered promiscuous mode [ 293.710778][T12652] veth1_macvtap: entered promiscuous mode [ 293.721479][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.736190][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.747729][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.757210][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.766661][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.790571][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.879646][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3215'. [ 293.889226][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3215'. [ 294.302450][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3276'. [ 294.311725][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3276'. [ 295.122571][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.219197][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.264074][T12872] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 295.456832][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3289'. [ 295.485861][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3289'. [ 295.998424][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 295.998477][ T28] audit: type=1400 audit(1775948048.934:6552): avc: denied { mounton } for pid=12911 comm="syz.4.3296" path="/proc/12/task" dev="proc" ino=40005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 296.089951][ T28] audit: type=1400 audit(1775948049.024:6553): avc: denied { setopt } for pid=12925 comm="syz.4.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.153560][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.162209][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.202610][T12936] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 296.257512][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3304'. [ 296.266925][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3304'. [ 296.725703][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.736092][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.976976][T13084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3316'. [ 296.986199][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3316'. [ 296.995165][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3316'. [ 297.107570][ T28] audit: type=1326 audit(1775948049.994:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.1.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b8fc819 code=0x7fc00000 [ 297.533613][T13121] loop2: detected capacity change from 0 to 1024 [ 297.543970][T13121] EXT4-fs: Ignoring removed bh option [ 297.579660][T13121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 297.595858][ T28] audit: type=1400 audit(1775948050.534:6555): avc: denied { mounton } for pid=13120 comm="syz.2.3326" path="/100/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 297.645292][T13121] loop2: detected capacity change from 1024 to 64 [ 297.661724][ T28] audit: type=1400 audit(1775948050.594:6556): avc: denied { setattr } for pid=13120 comm="syz.2.3326" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.794653][ T28] audit: type=1400 audit(1775948050.724:6557): avc: denied { read } for pid=13154 comm="syz.4.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.896886][T11475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 297.909818][ T2067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.967651][T13129] kmmpd-loop2: attempt to access beyond end of device [ 297.967651][T13129] loop2: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 297.981552][T13129] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 297.983097][ T2067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.085997][ T2067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.128583][ T2067] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.172609][T13197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3335'. [ 298.187705][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3335'. [ 298.381778][ T2067] bridge_slave_1: left allmulticast mode [ 298.396499][ T2067] bridge_slave_1: left promiscuous mode [ 298.415709][ T2067] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.475377][ T2067] bridge_slave_0: left allmulticast mode [ 298.481113][ T2067] bridge_slave_0: left promiscuous mode [ 298.499181][ T2067] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.624544][ T28] audit: type=1400 audit(1775948051.554:6558): avc: denied { create } for pid=13249 comm="syz.4.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 298.669095][ T2067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.687211][ T2067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.706553][ T2067] bond0 (unregistering): Released all slaves [ 298.751023][T13184] chnl_net:caif_netlink_parms(): no params data found [ 298.764112][ T2067] hsr_slave_0: left promiscuous mode [ 298.770877][ T2067] hsr_slave_1: left promiscuous mode [ 298.777860][ T2067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.785413][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.793055][ T2067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.800923][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.836967][ T2067] veth1_macvtap: left promiscuous mode [ 298.842613][ T2067] veth0_macvtap: left promiscuous mode [ 298.848497][ T2067] veth1_vlan: left promiscuous mode [ 298.853806][ T2067] veth0_vlan: left promiscuous mode [ 298.942736][ T2067] team0 (unregistering): Port device team_slave_1 removed [ 298.953174][ T2067] team0 (unregistering): Port device team_slave_0 removed [ 299.038579][T13265] syzkaller0: entered promiscuous mode [ 299.044216][T13265] syzkaller0: entered allmulticast mode [ 299.082575][T13184] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.089819][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.097021][T13184] bridge_slave_0: entered allmulticast mode [ 299.103439][T13184] bridge_slave_0: entered promiscuous mode [ 299.110486][T13184] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.121847][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.135852][T13184] bridge_slave_1: entered allmulticast mode [ 299.145377][T13184] bridge_slave_1: entered promiscuous mode [ 299.163455][T13184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.173913][T13184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.195939][T13184] team0: Port device team_slave_0 added [ 299.202633][T13184] team0: Port device team_slave_1 added [ 299.219010][T13184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.227252][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.253570][T13184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.270728][T13184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.277745][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.304509][T13184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.346156][T13184] hsr_slave_0: entered promiscuous mode [ 299.355149][T13184] hsr_slave_1: entered promiscuous mode [ 299.361489][T13184] debugfs: 'hsr0' already exists in 'hsr' [ 299.370317][T13184] Cannot create hsr debugfs directory [ 300.242264][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 300.276188][T13303] syzkaller0: entered promiscuous mode [ 300.281751][T13303] syzkaller0: entered allmulticast mode [ 300.369855][T13297] Set syz1 is full, maxelem 65536 reached [ 300.419944][ T28] audit: type=1400 audit(1775948053.354:6559): avc: denied { write } for pid=13310 comm="syz.0.3361" path="socket:[39924]" dev="sockfs" ino=39924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.513073][T13112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.525749][T13184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.546718][T13184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.575504][T13184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.590143][T13184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 300.618781][T13330] netlink: 'syz.3.3364': attribute type 4 has an invalid length. [ 300.647081][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'. [ 300.682779][T13184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.859972][T13184] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.890273][T13184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.929356][ T28] audit: type=1400 audit(1775948053.854:6560): avc: denied { open } for pid=13339 comm="syz.3.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 300.954427][T13184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.026935][ T2067] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.034116][ T2067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.060611][ T28] audit: type=1400 audit(1775948053.854:6561): avc: denied { kernel } for pid=13339 comm="syz.3.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 301.106185][ T2067] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.113425][ T2067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.166369][T13351] loop4: detected capacity change from 0 to 512 [ 301.195661][T13351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.221949][T13357] program syz.0.3369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.249090][T13351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.269080][T13184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.295465][T13351] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.309045][ T28] audit: type=1400 audit(1775948054.244:6562): avc: denied { read append } for pid=13350 comm="syz.4.3368" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.369300][ T28] audit: type=1400 audit(1775948054.244:6563): avc: denied { open } for pid=13350 comm="syz.4.3368" path="/26/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.394875][T13351] support for the xor transformation has been removed. [ 301.404210][ T28] audit: type=1400 audit(1775948054.264:6564): avc: denied { write } for pid=13350 comm="syz.4.3368" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.429489][ T28] audit: type=1400 audit(1775948054.364:6565): avc: denied { ioctl } for pid=13350 comm="syz.4.3368" path="/26/bus/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.481221][T12652] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 301.509377][T12652] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 301.536875][ T28] audit: type=1400 audit(1775948054.414:6566): avc: denied { rmdir } for pid=12652 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.538318][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.601145][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.648572][T12652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.649124][ T2067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.711434][ T28] audit: type=1400 audit(1775948054.644:6567): avc: denied { listen } for pid=13343 comm="syz.3.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.758468][ T2067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.832131][T13184] veth0_vlan: entered promiscuous mode [ 301.848722][ T2067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.885885][T13184] veth1_vlan: entered promiscuous mode [ 301.936408][T13184] veth0_macvtap: entered promiscuous mode [ 301.945796][ T2067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.966522][T13184] veth1_macvtap: entered promiscuous mode [ 301.995030][T13184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.020027][T13184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.067783][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.099531][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.115342][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.137912][ T2067] bridge_slave_1: left allmulticast mode [ 302.143566][ T2067] bridge_slave_1: left promiscuous mode [ 302.169565][ T2067] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.183504][ T28] audit: type=1400 audit(1775948055.114:6568): avc: denied { bind } for pid=13440 comm="syz.0.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.205184][ T2067] bridge_slave_0: left allmulticast mode [ 302.210908][ T2067] bridge_slave_0: left promiscuous mode [ 302.217088][ T2067] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.367454][ T2067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.393737][ T2067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.405088][ T2067] bond0 (unregistering): Released all slaves [ 302.414601][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.506988][ T2067] hsr_slave_0: left promiscuous mode [ 302.522305][ T2067] hsr_slave_1: left promiscuous mode [ 302.538990][ T2067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.554605][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.568952][ T2067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.583184][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.604036][ T2067] veth1_macvtap: left promiscuous mode [ 302.611302][ T2067] veth0_macvtap: left promiscuous mode [ 302.620187][ T2067] veth1_vlan: left promiscuous mode [ 302.630942][ T2067] veth0_vlan: left promiscuous mode [ 302.750440][ T28] audit: type=1400 audit(1775948055.684:6569): avc: denied { connect } for pid=13457 comm="syz.0.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 302.779854][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.787032][T13462] 9p: Bad value for 'rfdno' [ 302.808289][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.832767][ T2067] team0 (unregistering): Port device team_slave_1 removed [ 302.844428][ T2067] team0 (unregistering): Port device team_slave_0 removed [ 302.905583][T13460] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 303.054119][T13413] chnl_net:caif_netlink_parms(): no params data found [ 303.098051][T13488] loop0: detected capacity change from 0 to 1024 [ 303.117974][T13488] EXT4-fs: Ignoring removed orlov option [ 303.173419][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.181123][T13488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.211915][T13413] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.219746][ T28] audit: type=1400 audit(1775948056.154:6570): avc: denied { map } for pid=13487 comm="syz.0.3392" path="/67/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 303.222619][T13488] ext4: Unknown parameter '01777777777777777777777 Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 303.257383][T13413] bridge_slave_0: entered allmulticast mode [ 303.263831][T13413] bridge_slave_0: entered promiscuous mode [ 303.270711][T13413] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.278132][T13413] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.285493][T13413] bridge_slave_1: entered allmulticast mode [ 303.292147][T13413] bridge_slave_1: entered promiscuous mode [ 303.349550][T13413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.362161][T11996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.410061][T13413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.440908][T13510] 9p: Bad value for 'rfdno' [ 303.464403][T13413] team0: Port device team_slave_0 added [ 303.473929][T13413] team0: Port device team_slave_1 added [ 303.490496][T13413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.507705][T13413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.551254][T13517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3396'. [ 303.589947][T13413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.602848][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3396'. [ 303.613253][T13413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.631481][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3396'. [ 303.640994][T13413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.719602][T13413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.792106][T13413] hsr_slave_0: entered promiscuous mode [ 303.822838][T13413] hsr_slave_1: entered promiscuous mode [ 303.833658][T13413] debugfs: 'hsr0' already exists in 'hsr' [ 303.840526][T13413] Cannot create hsr debugfs directory [ 303.857292][T13546] 9p: Bad value for 'rfdno' [ 303.889922][T13541] syzkaller0: entered promiscuous mode [ 303.896873][T13541] syzkaller0: entered allmulticast mode [ 303.995508][T13556] netlink: 'syz.0.3407': attribute type 4 has an invalid length. [ 304.030744][T13562] loop1: detected capacity change from 0 to 1024 [ 304.056461][T13562] EXT4-fs: Ignoring removed bh option [ 304.097965][T13562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 304.158987][T13413] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.185860][T13413] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.217557][T12354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 304.231193][T13413] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.253655][T13583] 9p: Bad value for 'rfdno' [ 304.259043][ T2067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.278922][T13413] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.303018][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 304.333012][ T2067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.402453][ T2067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.424742][T13413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.441845][ T2067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.467157][T13413] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.479390][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.486479][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.516096][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.523156][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.562167][ T2067] bridge_slave_1: left allmulticast mode [ 304.571513][ T2067] bridge_slave_1: left promiscuous mode [ 304.579404][ T2067] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.592565][ T2067] bridge_slave_0: left allmulticast mode [ 304.596141][T13625] netlink: 'syz.5.3421': attribute type 4 has an invalid length. [ 304.598460][ T2067] bridge_slave_0: left promiscuous mode [ 304.611664][ T2067] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.687650][ T2067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.697513][ T2067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.707140][ T2067] bond0 (unregistering): Released all slaves [ 304.724017][T13413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.760382][ T2067] hsr_slave_0: left promiscuous mode [ 304.773680][ T2067] hsr_slave_1: left promiscuous mode [ 304.785339][ T2067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.796356][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.804190][ T2067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.811700][ T2067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.823401][ T2067] veth1_macvtap: left promiscuous mode [ 304.829303][ T2067] veth0_macvtap: left promiscuous mode [ 304.834979][ T2067] veth1_vlan: left promiscuous mode [ 304.841138][ T2067] veth0_vlan: left promiscuous mode [ 304.928801][ T2067] team0 (unregistering): Port device team_slave_1 removed [ 304.939025][ T2067] team0 (unregistering): Port device team_slave_0 removed [ 305.016772][T13656] syzkaller0: entered promiscuous mode [ 305.022299][T13656] syzkaller0: entered allmulticast mode [ 305.041960][T13413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.079658][T13662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3425'. [ 305.104608][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 305.118388][T13603] chnl_net:caif_netlink_parms(): no params data found [ 305.143171][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 305.181939][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.199406][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.215418][T13603] bridge_slave_0: entered allmulticast mode [ 305.221818][T13603] bridge_slave_0: entered promiscuous mode [ 305.228745][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.235977][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.243094][T13603] bridge_slave_1: entered allmulticast mode [ 305.250217][T13603] bridge_slave_1: entered promiscuous mode [ 305.285581][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.300176][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.374420][T13603] team0: Port device team_slave_0 added [ 305.393937][T13603] team0: Port device team_slave_1 added [ 305.454356][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.467382][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.494188][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.514590][T13413] veth0_vlan: entered promiscuous mode [ 305.532253][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.541101][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.570496][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.585841][T13413] veth1_vlan: entered promiscuous mode [ 305.648254][T13603] hsr_slave_0: entered promiscuous mode [ 305.654636][T13603] hsr_slave_1: entered promiscuous mode [ 305.662026][T13413] veth0_macvtap: entered promiscuous mode [ 305.679038][T13413] veth1_macvtap: entered promiscuous mode [ 305.696213][T13413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.719587][T13413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.754162][ T1893] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.773004][ T1893] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.807378][ T1893] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.827970][ T1893] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.879640][T13603] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 305.895010][T13603] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 305.920328][T13603] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 305.939636][T13603] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 306.042266][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.060632][T13603] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.068368][T13743] bridge0: port 4(syz_tun) entered blocking state [ 306.074951][T13743] bridge0: port 4(syz_tun) entered disabled state [ 306.081937][T13743] syz_tun: entered allmulticast mode [ 306.089518][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'. [ 306.108390][T13743] syz_tun: entered promiscuous mode [ 306.133977][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.141121][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.179097][T13218] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.186182][T13218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.233637][T13769] loop3: detected capacity change from 0 to 512 [ 306.237009][T13603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.253952][T13769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.267827][T13769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.282459][T13769] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.307469][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.387690][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.635763][T13603] veth0_vlan: entered promiscuous mode [ 306.659415][T13603] veth1_vlan: entered promiscuous mode [ 306.684908][T13603] veth0_macvtap: entered promiscuous mode [ 306.696930][T13603] veth1_macvtap: entered promiscuous mode [ 306.731702][T13603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.751926][T13603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.769422][ T1893] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.779284][T13824] netlink: 'syz.0.3451': attribute type 4 has an invalid length. [ 306.789321][ T1893] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.798498][ T1893] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.809305][ T1893] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.932262][T13836] netlink: 'syz.0.3455': attribute type 12 has an invalid length. [ 307.432638][T13836] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3455'. [ 307.441999][T13840] bridge0: port 3(syz_tun) entered blocking state [ 307.448485][T13840] bridge0: port 3(syz_tun) entered disabled state [ 307.454994][T13840] syz_tun: entered allmulticast mode [ 307.461084][T13840] syz_tun: entered promiscuous mode [ 307.466674][T13840] bridge0: port 3(syz_tun) entered blocking state [ 307.473118][T13840] bridge0: port 3(syz_tun) entered forwarding state [ 307.484483][T13838] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 307.555476][T13850] syzkaller0: entered promiscuous mode [ 307.573357][T13850] syzkaller0: entered allmulticast mode [ 307.608650][T13856] netlink: 'syz.6.3461': attribute type 4 has an invalid length. [ 307.717435][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3463'. [ 307.871049][T13886] netlink: 'syz.0.3474': attribute type 4 has an invalid length. [ 309.073475][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3499'. [ 309.132161][T13972] loop5: detected capacity change from 0 to 1024 [ 309.156595][T13972] EXT4-fs: Ignoring removed bh option [ 309.192780][T13972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 309.264706][T13184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 309.335343][T13997] bridge0: port 3(syz_tun) entered blocking state [ 309.362606][T13997] bridge0: port 3(syz_tun) entered disabled state [ 309.434438][T13997] syz_tun: entered allmulticast mode [ 309.449148][T13997] syz_tun: entered promiscuous mode [ 309.464733][T13997] bridge0: port 3(syz_tun) entered blocking state [ 309.471209][T13997] bridge0: port 3(syz_tun) entered forwarding state [ 309.655900][T14036] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 309.742338][T14046] 9pnet_virtio: no channels available for device syz [ 309.968684][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 309.990939][T14078] syz_tun: left allmulticast mode [ 309.996636][T14078] syz_tun: left promiscuous mode [ 310.007184][T14078] bridge0: port 3(syz_tun) entered disabled state [ 310.034166][T14078] bridge_slave_1: left allmulticast mode [ 310.044250][T14078] bridge_slave_1: left promiscuous mode [ 310.057267][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.077328][T14078] bridge_slave_0: left allmulticast mode [ 310.090876][T14078] bridge_slave_0: left promiscuous mode [ 310.102416][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.327715][T14129] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 310.729711][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 310.729771][ T28] audit: type=1400 audit(1775948063.664:6572): avc: denied { tracepoint } for pid=14190 comm="syz.5.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 310.805290][ T28] audit: type=1400 audit(1775948063.734:6573): avc: denied { read } for pid=14190 comm="syz.5.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 311.040270][T14209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.048751][T14209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.049453][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.065832][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.073491][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.081363][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.089574][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.097003][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.104450][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.111881][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.120052][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.127530][T10084] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 311.135806][T10084] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 311.156924][T14212] fido_id[14212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 311.546990][T14224] syzkaller0: entered promiscuous mode [ 311.552545][T14224] syzkaller0: entered allmulticast mode [ 311.565981][T14224] netlink: 1028 bytes leftover after parsing attributes in process `syz.7.3565'. [ 311.568533][T10094] IPVS: starting estimator thread 0... [ 311.685371][T14228] IPVS: using max 2304 ests per chain, 115200 per kthread [ 311.698406][ T28] audit: type=1400 audit(1775948064.634:6574): avc: denied { create } for pid=14241 comm="syz.3.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.911682][T14266] program syz.7.3581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.940606][T10095] IPVS: starting estimator thread 0... [ 311.968057][T14273] syzkaller0: entered promiscuous mode [ 311.981322][T14273] syzkaller0: entered allmulticast mode [ 312.045380][T14269] IPVS: using max 2400 ests per chain, 120000 per kthread [ 312.074773][T14289] rdma_rxe: rxe_newlink: failed to add syz_tun [ 312.700061][T14345] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3611'. [ 312.711051][ T28] audit: type=1400 audit(1775948065.644:6575): avc: denied { unmount } for pid=13603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 313.505544][T14377] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3624'. [ 315.107337][T14291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.163561][T14423] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3637'. [ 315.271182][ T28] audit: type=1400 audit(1775948068.184:6576): avc: denied { read } for pid=14437 comm="syz.6.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 315.469424][T14452] netlink: 'syz.0.3650': attribute type 13 has an invalid length. [ 315.522876][T14452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.713915][T14468] bridge_slave_0: left allmulticast mode [ 315.737709][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.747817][T14468] bridge_slave_0: left promiscuous mode [ 315.753795][T14468] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.762600][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.778439][T14468] bridge_slave_1: left allmulticast mode [ 315.786930][T14468] bridge_slave_1: left promiscuous mode [ 315.792795][T14468] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.804075][T14468] bond0: (slave bond_slave_0): Releasing backup interface [ 315.817376][T14475] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3654'. [ 315.828741][T14468] bond0: (slave bond_slave_1): Releasing backup interface [ 315.844687][T14468] team0: Port device team_slave_0 removed [ 315.855303][T14468] team0: Port device team_slave_1 removed [ 315.864712][T14468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.872698][T14468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.883892][T14468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.892022][T14468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.901871][T14468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.020772][T14515] rdma_rxe: rxe_newlink: failed to add syz_tun [ 316.183239][T14521] syzkaller0: entered promiscuous mode [ 316.189128][T14521] syzkaller0: entered allmulticast mode [ 316.197138][T14521] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.3668'. [ 316.380193][T14537] loop3: detected capacity change from 0 to 1024 [ 316.387093][T14537] EXT4-fs: Ignoring removed bh option [ 316.403093][T14537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 316.431146][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 316.472628][ T28] audit: type=1400 audit(1775948069.404:6577): avc: denied { listen } for pid=14545 comm="syz.0.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.640529][T10226] syz_tun (unregistering): left allmulticast mode [ 316.647256][T10226] syz_tun (unregistering): left promiscuous mode [ 316.653605][T10226] bridge0: port 4(syz_tun) entered disabled state [ 316.778594][T14598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3690'. [ 316.840327][T14608] loop0: detected capacity change from 0 to 512 [ 316.858763][T14608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.933340][T14608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.953063][T14608] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.981836][T14577] chnl_net:caif_netlink_parms(): no params data found [ 317.005403][T11996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.067536][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.078151][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.085427][T14577] bridge_slave_0: entered allmulticast mode [ 317.092021][T14577] bridge_slave_0: entered promiscuous mode [ 317.106388][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.115620][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.122834][T14577] bridge_slave_1: entered allmulticast mode [ 317.129796][T14577] bridge_slave_1: entered promiscuous mode [ 317.179890][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.192550][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.266190][T14577] team0: Port device team_slave_0 added [ 317.282791][T14577] team0: Port device team_slave_1 added [ 317.328695][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.353149][T14667] loop7: detected capacity change from 0 to 512 [ 317.363676][T14668] loop0: detected capacity change from 0 to 1024 [ 317.370310][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.396118][T14668] EXT4-fs: Ignoring removed bh option [ 317.407699][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.426052][T14667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.437924][T14668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 317.461209][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.471241][T14667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.481497][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.510409][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.520308][T11996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 317.535412][T14667] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.550049][T14577] hsr_slave_0: entered promiscuous mode [ 317.556654][T14577] hsr_slave_1: entered promiscuous mode [ 317.562554][T14577] debugfs: 'hsr0' already exists in 'hsr' [ 317.569950][T14577] Cannot create hsr debugfs directory [ 317.584192][T10084] IPVS: starting estimator thread 0... [ 317.676170][T13603] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.705301][T14686] IPVS: using max 2208 ests per chain, 110400 per kthread [ 317.767415][T14577] team0: Port device netdevsim1 removed [ 317.814252][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3717'. [ 317.826290][T14723] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3717'. [ 317.838663][T14577] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 317.849528][T14577] bridge0: port 3(netdevsim0) entered disabled state [ 317.897277][T14736] loop5: detected capacity change from 0 to 512 [ 317.910155][T14736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.948601][T14736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.982098][T14577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.989857][T14736] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.014134][T14577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.045593][T14577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.066542][T14577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.081017][T13184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.149197][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.175101][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.196848][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3727'. [ 318.216736][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.223874][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.235916][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.243089][T13222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.251171][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3727'. [ 318.265111][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3727'. [ 318.272528][T14577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.301501][T14790] syzkaller0: entered promiscuous mode [ 318.327504][T14790] syzkaller0: entered allmulticast mode [ 318.342469][T14790] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.3728'. [ 318.379451][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.380387][T14803] loop6: detected capacity change from 0 to 1024 [ 318.399666][T14803] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 318.418189][T14803] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 318.441666][T14803] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 318.459994][T14803] EXT4-fs error (device loop6): ext4_get_journal_inode:5888: inode #5: comm syz.6.3731: unexpected bad inode w/o EXT4_IGET_BAD [ 318.484380][T14803] loop6: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 318.484835][T14803] EXT4-fs (loop6): no journal found [ 318.485225][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 318.505919][ C0] EXT4-fs (loop6): initial error at time 1775948071: ext4_get_journal_inode:5888: inode 5 [ 318.515860][ C0] EXT4-fs (loop6): last error at time 1775948071: ext4_get_journal_inode:5888: inode 5 [ 318.527778][T14803] EXT4-fs (loop6): can't get journal size [ 318.531522][T14577] veth0_vlan: entered promiscuous mode [ 318.542783][T14803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.566340][T14577] veth1_vlan: entered promiscuous mode [ 318.586639][T14577] veth0_macvtap: entered promiscuous mode [ 318.604566][T14577] veth1_macvtap: entered promiscuous mode [ 318.623450][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.642111][T13413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.673593][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.711266][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.721392][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.744872][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.779490][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.968177][T14849] loop5: detected capacity change from 0 to 1024 [ 318.987034][T14849] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 319.002538][T14849] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 319.019121][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.045027][T14849] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 319.056569][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.068802][T14849] EXT4-fs error (device loop5): ext4_get_journal_inode:5888: inode #5: comm syz.5.3746: unexpected bad inode w/o EXT4_IGET_BAD [ 319.088889][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.100072][T14849] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 319.100217][T14849] EXT4-fs (loop5): no journal found [ 319.109257][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 319.109272][ C0] EXT4-fs (loop5): initial error at time 1775948072: ext4_get_journal_inode:5888: inode 5 [ 319.109316][ C0] EXT4-fs (loop5): last error at time 1775948072: ext4_get_journal_inode:5888: inode 5 [ 319.143560][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.155897][T14849] EXT4-fs (loop5): can't get journal size [ 319.156597][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.162323][T14849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.184981][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.195628][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.206900][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.218971][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.235965][T14847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 319.282927][T13184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.378637][T14874] 9pnet_fd: Insufficient options for proto=fd [ 319.604894][T14897] loop6: detected capacity change from 0 to 1024 [ 319.625177][T14897] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 319.654423][T14897] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 319.687786][T14897] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 319.709562][T14897] EXT4-fs error (device loop6): ext4_get_journal_inode:5888: inode #5: comm syz.6.3761: unexpected bad inode w/o EXT4_IGET_BAD [ 319.736142][T14897] loop6: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 319.736329][T14897] EXT4-fs (loop6): no journal found [ 319.745411][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 319.745434][ C1] EXT4-fs (loop6): initial error at time 1775948072: ext4_get_journal_inode:5888: inode 5 [ 319.745461][ C1] EXT4-fs (loop6): last error at time 1775948072: ext4_get_journal_inode:5888: inode 5 [ 319.813102][T14897] EXT4-fs (loop6): can't get journal size [ 319.869503][T14897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.888130][T14908] 9pnet_fd: Insufficient options for proto=fd [ 319.975680][T13413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.060790][T14929] rdma_rxe: rxe_newlink: failed to add syz_tun [ 320.236945][T14937] 9pnet_fd: Insufficient options for proto=fd [ 320.463317][T14953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.483015][T14953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.508410][T14953] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 320.542024][T14957] __nla_validate_parse: 4 callbacks suppressed [ 320.542151][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3785'. [ 320.626940][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3790'. [ 320.651816][T14966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3790'. [ 320.668152][T14966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3790'. [ 320.819986][T14986] rdma_rxe: rxe_newlink: failed to add syz_tun [ 321.141447][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3804'. [ 321.168215][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3804'. [ 321.187971][T15006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3804'. [ 321.216353][ T1893] bridge_slave_1: left allmulticast mode [ 321.233311][ T1893] bridge_slave_1: left promiscuous mode [ 321.250930][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.259083][ T1893] bridge_slave_0: left allmulticast mode [ 321.264745][ T1893] bridge_slave_0: left promiscuous mode [ 321.271074][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.334095][ T1893] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 321.796622][ T1893] bond1 (unregistering): (slave bridge11): Releasing backup interface [ 321.876791][ T1893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.887137][ T1893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.896392][ T1893] bond0 (unregistering): Released all slaves [ 321.903826][ T1893] bond1 (unregistering): Released all slaves [ 321.949966][ T1893] IPVS: stopping master sync thread 5484 ... [ 321.961892][ T1893] hsr_slave_0: left promiscuous mode [ 321.968920][ T1893] hsr_slave_1: left promiscuous mode [ 321.974934][ T1893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.982666][ T1893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.990665][ T1893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.039748][T15033] 9pnet_fd: Insufficient options for proto=fd [ 322.063510][ T1893] team0 (unregistering): Port device macvlan1 removed [ 322.072230][T15035] rdma_rxe: rxe_newlink: failed to add syz_tun [ 322.119540][ T1893] team0 (unregistering): Port device team_slave_1 removed [ 322.135894][ T1893] team0 (unregistering): Port device team_slave_0 removed [ 323.150071][T15075] loop7: detected capacity change from 0 to 1024 [ 323.159323][T15075] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 323.169705][T15075] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 323.191728][T15075] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 323.207890][T15075] EXT4-fs error (device loop7): ext4_get_journal_inode:5888: inode #5: comm syz.7.3829: unexpected bad inode w/o EXT4_IGET_BAD [ 323.226702][T15075] loop7: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 323.226871][T15075] EXT4-fs (loop7): no journal found [ 323.235973][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 323.235992][ C0] EXT4-fs (loop7): initial error at time 1775948076: ext4_get_journal_inode:5888: inode 5 [ 323.236027][ C0] EXT4-fs (loop7): last error at time 1775948076: ext4_get_journal_inode:5888: inode 5 [ 323.267719][T15075] EXT4-fs (loop7): can't get journal size [ 323.274091][T15075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.295030][T13603] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.570915][T15113] syzkaller0: entered promiscuous mode [ 323.576512][T15113] syzkaller0: entered allmulticast mode [ 323.584782][T15113] netlink: 1028 bytes leftover after parsing attributes in process `syz.7.3846'. [ 324.109981][T15001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.166105][T15143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.683980][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3872'. [ 324.833150][T15186] loop5: detected capacity change from 0 to 1024 [ 324.852460][T15186] EXT4-fs: Ignoring removed bh option [ 324.899786][T15186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 325.212695][T14079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 325.434621][T14079] bridge0: port 3(syz_tun) entered disabled state [ 325.453139][T14079] syz_tun (unregistering): left allmulticast mode [ 325.459660][T14079] syz_tun (unregistering): left promiscuous mode [ 325.466191][T14079] bridge0: port 3(syz_tun) entered disabled state [ 325.516408][T15221] loop3: detected capacity change from 0 to 1024 [ 325.526116][T15221] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 325.546269][T15221] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 325.557103][T15221] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 325.567609][T15221] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: inode #5: comm syz.3.3892: unexpected bad inode w/o EXT4_IGET_BAD [ 325.581067][T15221] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 325.581186][T15221] EXT4-fs (loop3): no journal found [ 325.590335][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 325.590349][ C1] EXT4-fs (loop3): initial error at time 1775948078: ext4_get_journal_inode:5888: inode 5 [ 325.590366][ C1] EXT4-fs (loop3): last error at time 1775948078: ext4_get_journal_inode:5888: inode 5 [ 325.621749][T15221] EXT4-fs (loop3): can't get journal size [ 325.631224][T15229] loop7: detected capacity change from 0 to 1024 [ 325.633387][T15221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.654432][T15229] EXT4-fs: Ignoring removed bh option [ 325.660819][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.713468][T15229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 325.726822][T14577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.739538][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.799853][T14750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 325.879366][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.039434][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.360180][ T30] bridge_slave_1: left allmulticast mode [ 326.371494][ T30] bridge_slave_1: left promiscuous mode [ 326.377748][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.389453][ T30] bridge_slave_0: left allmulticast mode [ 326.399511][ T30] bridge_slave_0: left promiscuous mode [ 326.405604][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.512638][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.530425][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.718329][ T30] bond0 (unregistering): Released all slaves [ 327.059969][ T30] hsr_slave_0: left promiscuous mode [ 327.071505][T15299] rdma_rxe: rxe_newlink: failed to add syz_tun [ 327.079831][ T30] hsr_slave_1: left promiscuous mode [ 327.094136][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.101824][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.109772][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.117498][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.151467][ T30] veth1_macvtap: left promiscuous mode [ 327.157430][ T30] veth0_macvtap: left promiscuous mode [ 327.163024][ T30] veth1_vlan: left promiscuous mode [ 327.168586][ T30] veth0_vlan: left promiscuous mode [ 327.250021][ T30] team0 (unregistering): Port device team_slave_1 removed [ 327.270533][ T30] team0 (unregistering): Port device team_slave_0 removed [ 327.493367][T15239] chnl_net:caif_netlink_parms(): no params data found [ 327.585529][T15285] chnl_net:caif_netlink_parms(): no params data found [ 327.595142][T15239] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.604952][T15239] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.612129][T15239] bridge_slave_0: entered allmulticast mode [ 327.618576][T15239] bridge_slave_0: entered promiscuous mode [ 327.629651][T15239] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.636776][T15239] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.644168][T15239] bridge_slave_1: entered allmulticast mode [ 327.651379][T15239] bridge_slave_1: entered promiscuous mode [ 327.674324][T15239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.686116][T15239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.715444][T15239] team0: Port device team_slave_0 added [ 327.722936][T15239] team0: Port device team_slave_1 added [ 327.745739][T15239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.752784][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.778954][T15239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.791663][T15239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.798719][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.824832][T15239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.863967][T15239] hsr_slave_0: entered promiscuous mode [ 327.870823][T15239] hsr_slave_1: entered promiscuous mode [ 327.877013][T15239] debugfs: 'hsr0' already exists in 'hsr' [ 327.882807][T15239] Cannot create hsr debugfs directory [ 327.911497][ T30] IPVS: stop unused estimator thread 0... [ 327.954725][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.962082][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.969417][T15285] bridge_slave_0: entered allmulticast mode [ 328.007100][T15285] bridge_slave_0: entered promiscuous mode [ 328.015719][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.027431][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.034712][T15285] bridge_slave_1: entered allmulticast mode [ 328.041401][T15285] bridge_slave_1: entered promiscuous mode [ 328.060133][ T30] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.079162][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.107061][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.108480][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'. [ 328.163701][T15285] team0: Port device team_slave_0 added [ 328.179505][ T30] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.193205][T15285] team0: Port device team_slave_1 added [ 328.225018][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.242267][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.345267][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.420629][ T30] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.465771][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.493009][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.600066][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.642796][ T30] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.755722][T15285] hsr_slave_0: entered promiscuous mode [ 328.765876][T15285] hsr_slave_1: entered promiscuous mode [ 328.773757][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 328.784901][T15285] Cannot create hsr debugfs directory [ 328.870703][ T30] bridge_slave_1: left allmulticast mode [ 328.887434][ T30] bridge_slave_1: left promiscuous mode [ 328.917045][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.935541][ T30] bridge_slave_0: left allmulticast mode [ 328.955257][ T30] bridge_slave_0: left promiscuous mode [ 328.967510][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.130428][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.140951][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.150924][ T30] bond0 (unregistering): Released all slaves [ 329.158828][T15239] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.221448][T15239] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.271046][ T30] hsr_slave_0: left promiscuous mode [ 329.283622][ T30] hsr_slave_1: left promiscuous mode [ 329.290188][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.299087][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.307538][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.315056][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.335957][ T30] veth1_macvtap: left promiscuous mode [ 329.341553][ T30] veth0_macvtap: left promiscuous mode [ 329.349171][ T30] veth1_vlan: left promiscuous mode [ 329.354543][ T30] veth0_vlan: left promiscuous mode [ 329.427665][ T30] team0 (unregistering): Port device team_slave_1 removed [ 329.437057][ T30] team0 (unregistering): Port device team_slave_0 removed [ 329.468950][T15239] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.483250][T15239] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 329.569939][T15285] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 329.597935][T15285] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 329.615874][T15285] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 329.625326][T15285] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 329.654622][T15239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.683297][T15239] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.705982][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.713124][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.741174][ T2067] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.748344][ T2067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.763074][ T30] IPVS: stop unused estimator thread 0... [ 329.780999][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.814315][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.830733][ T2067] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.837916][ T2067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.862329][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.869502][T13222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.912898][T15285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.964859][T15239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.047048][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.353018][T15239] veth0_vlan: entered promiscuous mode [ 330.382219][T15239] veth1_vlan: entered promiscuous mode [ 330.420967][T15239] veth0_macvtap: entered promiscuous mode [ 330.447926][T15239] veth1_macvtap: entered promiscuous mode [ 330.476490][T15239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.509291][T15239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.525383][T15285] veth0_vlan: entered promiscuous mode [ 330.547770][ T1893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.565353][ T1893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.587559][ T1893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.605650][ T1893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.629371][T15285] veth1_vlan: entered promiscuous mode [ 330.685307][T15285] veth0_macvtap: entered promiscuous mode [ 330.712790][T15285] veth1_macvtap: entered promiscuous mode [ 330.750698][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.779026][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.807470][T13218] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.829447][T13218] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.863344][T13218] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.877031][T13218] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.343341][T15572] sctp_transport_update_pmtu: 47 callbacks suppressed [ 331.343358][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.406478][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.446980][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.470490][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.503915][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.517297][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.527658][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.538518][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.548813][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.559188][T15572] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 331.639384][T15596] tc_dump_action: action bad kind [ 332.091818][T15622] sg_write: data in/out 2875/14 bytes for SCSI command 0x0-- guessing data in; [ 332.091818][T15622] program syz.8.3961 not setting count and/or reply_len properly [ 332.343597][T15618] bridge_slave_0: left allmulticast mode [ 332.400281][T15618] bridge_slave_0: left promiscuous mode [ 332.417797][T15618] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.474891][T15618] bridge_slave_1: left allmulticast mode [ 332.510956][T15618] bridge_slave_1: left promiscuous mode [ 332.537144][T15618] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.597969][T15618] bond0: (slave bond_slave_0): Releasing backup interface [ 332.639244][T15618] bond0: (slave bond_slave_1): Releasing backup interface [ 332.689007][T15618] team0: Port device team_slave_0 removed [ 332.735953][T15618] team0: Port device team_slave_1 removed [ 332.762870][T15618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.799616][T15618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.831429][T15618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.875286][T15618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.888496][T15618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.953515][T15636] tc_dump_action: action bad kind [ 333.348720][T15655] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3969'. [ 334.078055][T15668] syzkaller0: entered promiscuous mode [ 334.095259][T15668] syzkaller0: entered allmulticast mode [ 334.279969][T15677] tc_dump_action: action bad kind [ 334.698175][T15687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.995659][T15687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.003794][ T28] audit: type=1400 audit(1775948087.934:6578): avc: denied { bind } for pid=15689 comm="syz.0.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 335.566697][T15691] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 335.566809][T15691] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 335.593330][T15691] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 335.625037][T15691] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 335.819350][T15696] bridge_slave_0: left allmulticast mode [ 335.916453][T15696] bridge_slave_0: left promiscuous mode [ 335.962733][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.975508][ T28] audit: type=1400 audit(1775948088.454:6579): avc: denied { read } for pid=15689 comm="syz.0.3983" path="socket:[49474]" dev="sockfs" ino=49474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.006937][T15696] bridge_slave_1: left allmulticast mode [ 336.042565][T15696] bridge_slave_1: left promiscuous mode [ 336.075458][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.109368][T15696] bond0: (slave bond_slave_0): Releasing backup interface [ 336.165330][T15696] bond0: (slave bond_slave_1): Releasing backup interface [ 336.191926][T15696] team0: Port device team_slave_0 removed [ 336.210196][T15696] team0: Port device team_slave_1 removed [ 336.226750][T15696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.240632][T15696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.272358][T15696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.298945][T15696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.324289][T15696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.417682][T15718] tc_dump_action: action bad kind [ 336.773404][T15743] vlan0: entered promiscuous mode [ 336.786093][T13222] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.795066][T13222] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.827267][T13222] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.847686][T15753] rdma_rxe: rxe_newlink: failed to add syz_tun [ 336.855272][T13222] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.054640][T15755] bridge_slave_0: left allmulticast mode [ 337.065190][T15755] bridge_slave_0: left promiscuous mode [ 337.077171][T15755] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.096672][T15755] bridge_slave_1: left allmulticast mode [ 337.106889][T15755] bridge_slave_1: left promiscuous mode [ 337.118207][T15755] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.158577][T15755] bond0: (slave bond_slave_0): Releasing backup interface [ 337.177860][T15755] bond0: (slave bond_slave_1): Releasing backup interface [ 337.200930][T15755] team0: Port device team_slave_0 removed [ 337.215723][T15755] team0: Port device team_slave_1 removed [ 337.226892][T15755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.248812][T15755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.277134][T15755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.286260][T15755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.322032][T15755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.415132][T15787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.435493][T15787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.602364][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.610851][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.108008][T15798] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4017'. [ 338.130146][T15801] rdma_rxe: rxe_newlink: failed to add syz_tun [ 338.902232][T15831] ================================================================== [ 338.910335][T15831] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 338.917352][T15831] [ 338.919651][T15831] read-write to 0xffff888237c2a8a4 of 4 bytes by task 10091 on cpu 0: [ 338.927777][T15831] wq_worker_running+0x9b/0x120 [ 338.932630][T15831] synchronize_rcu_expedited+0x5f8/0x770 [ 338.938247][T15831] synchronize_rcu+0x35/0x2e0 [ 338.942920][T15831] xfrm_state_gc_task+0x98/0x650 [ 338.947929][T15831] process_scheduled_works+0x513/0xa10 [ 338.953370][T15831] worker_thread+0x58a/0x780 [ 338.957970][T15831] kthread+0x22a/0x280 [ 338.962019][T15831] ret_from_fork+0x150/0x360 [ 338.966592][T15831] ret_from_fork_asm+0x1a/0x30 [ 338.971337][T15831] [ 338.973639][T15831] read to 0xffff888237c2a8a4 of 4 bytes by task 15831 on cpu 1: [ 338.981242][T15831] kick_pool+0x49/0x2d0 [ 338.985381][T15831] __queue_work+0x896/0xaf0 [ 338.989864][T15831] queue_work_on+0xa9/0x140 [ 338.994347][T15831] xfrm_state_find+0x1cc4/0x3270 [ 338.999261][T15831] xfrm_resolve_and_create_bundle+0x592/0x1f50 [ 339.005394][T15831] xfrm_lookup_with_ifid+0x443/0x1590 [ 339.010749][T15831] xfrm_lookup_route+0x3a/0x110 [ 339.015579][T15831] ip_route_output_flow+0xdb/0x110 [ 339.020673][T15831] udp_sendmsg+0x1383/0x1590 [ 339.025238][T15831] inet_sendmsg+0xac/0xd0 [ 339.029546][T15831] ____sys_sendmsg+0x519/0x5b0 [ 339.034383][T15831] ___sys_sendmsg+0x195/0x1e0 [ 339.039036][T15831] __sys_sendmmsg+0x185/0x320 [ 339.043688][T15831] __x64_sys_sendmmsg+0x57/0x70 [ 339.048520][T15831] x64_sys_call+0x27aa/0x3020 [ 339.053186][T15831] do_syscall_64+0x12c/0x370 [ 339.057772][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.063642][T15831] [ 339.065950][T15831] value changed: 0x00000000 -> 0x00000001 [ 339.071639][T15831] [ 339.073938][T15831] Reported by Kernel Concurrency Sanitizer on: [ 339.080064][T15831] CPU: 1 UID: 0 PID: 15831 Comm: syz.9.4027 Not tainted syzkaller #0 PREEMPT(full) [ 339.089409][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.099452][T15831] ==================================================================