last executing test programs: 3m4.516808323s ago: executing program 4 (id=13): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121000, 0x0) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x1, 0x80000000f}, 0x0, 0x5, 0x1}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$kcm(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) 3m2.480020085s ago: executing program 4 (id=16): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_emit_ethernet(0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00fc1000fe8000000000000000000000000000bbfe80004e2280119078030000000000000060f353319590da076d8329cfbf2a90e254fd7549ae4ce061067e5b1885e315cf4597c30c25af1c2b540237b1af6b82022107ef02e8aaa2b4d837f3ff22f05b59619431b620824c90bdd48548bb0f4b8efafde7f0a1692816fcf73627fd2d4e99ac7c76b5a868e3aaa057fcda6f321d510cb3ac62e57bc7091be0e5545d57dcb4b0ea8aa1ff86ce4b104ec6bc520d4f76b05342d2c1d4162f8157aa68237a4b10ebc8b230fd6ec0bcacea3150724313f250"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000580)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000005c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xd, 0x0, 0x10001}, 0x10, 0xffffffffffffffff, r4, 0x7, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x2, 0x3}, {0x1, 0x3, 0x4, 0x8}, {0x5, 0x2, 0x10}, {0x3, 0x4, 0xd, 0xa}, {0x3, 0x5, 0x4, 0x4}, {0x4, 0x2, 0xf, 0x6}, {0x1, 0x3, 0x4, 0xa}], 0x10, 0x7f}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x174, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@multicast1, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x174}}, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x480000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4020}, 0xc814) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="02000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000fedbdf25140000004400038008000200090000000800030005000000080001000500000008000100060000000800010007000000080003007f00000008000300cce0000008000100070000001800048014000780080002000000000008000400060000000c00038008000200070000002c0003800800010007000000080003000c0000000800010010000000080003001a050000080002000e000000100004800900010073797a3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x30000890}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r9, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000540)=0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) socket$kcm(0xa, 0x922000000003, 0x11) 2m59.501822708s ago: executing program 4 (id=20): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x2b000000, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 2m59.387107323s ago: executing program 4 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000004840d001c002b8004000800", @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo\x00') getdents64(r2, 0xfffffffffffffffe, 0x64) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10008a2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, 0x1412, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x804) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@fallback=r1, 0x2f, 0x1, 0xc, &(0x7f0000000f80)=[0x0], 0x1, 0x0, &(0x7f0000000fc0)=[0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001140)={0x6def, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB="0400000020000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYRES64=r3], 0x20) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) 2m58.03742888s ago: executing program 4 (id=25): r0 = msgget$private(0x0, 0x1f3) msgrcv(r0, 0x0, 0x0, 0xfffffffffffffff9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003000000040004"], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002640)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x158, 0x100}, 0x0, 0x0, 0x9, 0x100, 0x6df2, 0x6fc2, 0x101, 0xff, 0x67f, 0x7}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/47) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x7ffffffff000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', '', [{}, {}, {0x20, ':^%--'}, {0x20, '/\xc9]{(#^'}, {0x20, '#&['}, {0x20, '-:-'}], 0xa, "3e188d151dcbae5ea505c7dd9430a2d9e100871087ca762baf28540f3d4305a55bd4abf79dcc435616a79ff6482ce39c627a35fe9b7e87376be2ce8621c63459738b9a7cdfc2f544e168d7c93f0a486a75ed04d5ac4e9c9e2d3bccdaba7cc5bb71f4a8f725ea3593f4ea8188"}, 0x88) 2m54.322476369s ago: executing program 4 (id=34): creat(0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000440)=[0x2, 0x1, 0x1], 0x0, 0x1, 0x1, r7}}, 0x40) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r11, 0x541c, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000400)='net/connector\x00') preadv(r12, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0x9) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r10, @ANYRESDEC=r0], 0x64}}, 0x800) 2m54.255492881s ago: executing program 32 (id=34): creat(0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000440)=[0x2, 0x1, 0x1], 0x0, 0x1, 0x1, r7}}, 0x40) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r11, 0x541c, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000400)='net/connector\x00') preadv(r12, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0x9) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r10, @ANYRESDEC=r0], 0x64}}, 0x800) 10.231122193s ago: executing program 2 (id=3139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x3c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.053739799s ago: executing program 2 (id=3147): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.087725323s ago: executing program 2 (id=3153): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000080)=0x2) 9.062695693s ago: executing program 2 (id=3155): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.166273284s ago: executing program 3 (id=3238): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000280)={0x4, 0xefd, 0x3, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mknod(&(0x7f0000000340)='./bus\x00', 0xc000, 0x2000008) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)='./file1\x00') 1.498082847s ago: executing program 3 (id=3242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) 1.250698066s ago: executing program 0 (id=3243): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000080)=0x2) 1.197028068s ago: executing program 0 (id=3245): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 1.196627218s ago: executing program 1 (id=3246): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200001, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(0x0, 0x0) 1.118638631s ago: executing program 0 (id=3247): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 1.097027491s ago: executing program 1 (id=3248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001e80)={r0, &(0x7f0000001e00), 0x0, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 1.043943034s ago: executing program 1 (id=3249): syz_open_dev$loop(0x0, 0x9, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 918.885187ms ago: executing program 0 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) 890.551598ms ago: executing program 5 (id=3252): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 877.553199ms ago: executing program 0 (id=3253): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x257) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010010400000000000000000000800000", @ANYRES32=0x0, @ANYBLOB="937b0100000000001c0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x9, 0x8) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r5, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r6}) 583.572539ms ago: executing program 2 (id=3168): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000080)=0x2) 540.659691ms ago: executing program 2 (id=3254): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) sendfile(r0, 0xffffffffffffffff, 0x0, 0xbc44) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xe3aa6e6) 435.508425ms ago: executing program 5 (id=3255): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) msgctl$IPC_RMID(0x0, 0x0) 384.131056ms ago: executing program 0 (id=3256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a0000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000)="01e817652b9e95f0cfc98dcb55dfe75c2288ee", 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000000100)=""/218}, 0x20) 288.52861ms ago: executing program 5 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 235.131652ms ago: executing program 3 (id=3258): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x67) 216.763962ms ago: executing program 5 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001e80)={r0, &(0x7f0000001e00), &(0x7f0000001e40)=@udp=r1, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 176.849493ms ago: executing program 5 (id=3260): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 156.891764ms ago: executing program 1 (id=3261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 79.073927ms ago: executing program 3 (id=3262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) shutdown(r0, 0x1) 78.858537ms ago: executing program 1 (id=3263): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x3fffff}, 0x0, 0x0, 0x0) 78.617727ms ago: executing program 3 (id=3264): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080)=0x2) 45.686108ms ago: executing program 1 (id=3265): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 10.766709ms ago: executing program 3 (id=3266): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 0s ago: executing program 5 (id=3267): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x257) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010010400000000000000000000800000", @ANYRES32=0x0, @ANYBLOB="937b0100000000001c0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x8) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r7}) kernel console output (not intermixed with test programs): 00 audit(1775100286.271:406): avc: denied { create } for pid=5560 comm="syz.0.742" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.464395][ T28] audit: type=1326 audit(1775100287.051:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674cafc819 code=0x7ffc0000 [ 99.513954][ T28] audit: type=1326 audit(1775100287.051:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674cafc819 code=0x7ffc0000 [ 99.563293][ T28] audit: type=1326 audit(1775100287.051:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f674cafc819 code=0x7ffc0000 [ 99.605186][ T28] audit: type=1326 audit(1775100287.051:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.5.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674cafc819 code=0x7ffc0000 [ 99.718217][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 99.728998][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 99.742173][ T5602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.757'. [ 99.928699][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 99.937795][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 99.956933][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 100.148626][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 101.686113][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 101.686130][ T28] audit: type=1400 audit(1775100289.271:425): avc: denied { read } for pid=5782 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.727512][ T28] audit: type=1400 audit(1775100289.321:426): avc: denied { read append } for pid=5790 comm="syz.5.844" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 101.809808][ T28] audit: type=1400 audit(1775100289.321:427): avc: denied { open } for pid=5790 comm="syz.5.844" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 101.873693][ T28] audit: type=1400 audit(1775100289.321:428): avc: denied { ioctl } for pid=5790 comm="syz.5.844" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.038764][ T5824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.104817][ T28] audit: type=1400 audit(1775100289.341:429): avc: denied { write } for pid=5782 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.192680][ T5839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5839 comm=syz.0.866 [ 102.436217][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.492320][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.572574][ T5862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.585155][ T5862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.839107][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.850100][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.864083][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.874556][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.237682][ T5874] __nla_validate_parse: 6 callbacks suppressed [ 103.237758][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 103.270371][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 103.270546][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 103.700522][ T43] Bluetooth: hci0: sending frame failed (-49) [ 103.708216][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 104.401281][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.890'. [ 104.503276][ T5928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.895'. [ 104.535192][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 104.547259][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 104.719740][ T28] audit: type=1400 audit(1775100292.312:430): avc: denied { ioctl } for pid=5952 comm="syz.5.907" path="socket:[13162]" dev="sockfs" ino=13162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.914499][ T5964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.910'. [ 105.053554][ T5950] syz.1.906 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 105.609788][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.1.906 Not tainted syzkaller #0 PREEMPT(full) [ 105.609840][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.609862][ T5950] Call Trace: [ 105.609869][ T5950] [ 105.609878][ T5950] __dump_stack+0x1d/0x30 [ 105.609944][ T5950] dump_stack_lvl+0x95/0xd0 [ 105.610006][ T5950] dump_stack+0x15/0x1b [ 105.610031][ T5950] dump_header+0x80/0x240 [ 105.610059][ T5950] oom_kill_process+0x295/0x350 [ 105.610094][ T5950] out_of_memory+0x97d/0xb80 [ 105.610115][ T5950] try_charge_memcg+0x62e/0xa10 [ 105.610168][ T5950] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 105.610314][ T5950] __swap_cache_prepare_and_add+0x67/0x460 [ 105.610344][ T5950] ? alloc_pages_mpol+0x217/0x260 [ 105.610407][ T5950] swap_cache_alloc_folio+0xa2/0x120 [ 105.610499][ T5950] swap_cluster_readahead+0x36b/0x3d0 [ 105.610588][ T5950] swapin_readahead+0xde/0x840 [ 105.610620][ T5950] ? _raw_spin_unlock+0x9/0x30 [ 105.610699][ T5950] ? swap_put_entries_cluster+0x385/0x3a0 [ 105.610728][ T5950] ? swap_put_entries_cluster+0x101/0x3a0 [ 105.610775][ T5950] ? __rcu_read_unlock+0x4e/0x70 [ 105.610799][ T5950] ? swap_cache_get_folio+0x26f/0x280 [ 105.610842][ T5950] do_swap_page+0x2fe/0x21e0 [ 105.610917][ T5950] ? css_rstat_updated+0xbb/0x280 [ 105.610981][ T5950] ? __rcu_read_lock+0x36/0x50 [ 105.611004][ T5950] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 105.611075][ T5950] handle_mm_fault+0xb46/0x3020 [ 105.611107][ T5950] ? vma_start_read+0x1c7/0x2c0 [ 105.611138][ T5950] do_user_addr_fault+0x62f/0x1050 [ 105.611179][ T5950] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 105.611264][ T5950] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 105.611319][ T5950] ? trace_page_fault_user+0x1f/0xe0 [ 105.611363][ T5950] exc_page_fault+0x62/0xa0 [ 105.611386][ T5950] asm_exc_page_fault+0x26/0x30 [ 105.611482][ T5950] RIP: 0033:0x7fd522acd336 [ 105.611501][ T5950] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 105.611577][ T5950] RSP: 002b:00007ffe705b6f50 EFLAGS: 00010246 [ 105.611594][ T5950] RAX: 0000000000019a19 RBX: 00007fd522d45fa0 RCX: 0000000000019640 [ 105.611664][ T5950] RDX: 00000000000003d9 RSI: 0000000000000000 RDI: 00000000000003e8 [ 105.611675][ T5950] RBP: 00007fd522d47da0 R08: 000000003abc40d4 R09: 7fffffffffffffff [ 105.611686][ T5950] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000019c2d [ 105.611699][ T5950] R13: 00007fd522d4609c R14: 0000000000019954 R15: 00007fd522d46090 [ 105.611720][ T5950] [ 105.611766][ T5950] memory: usage 288212kB, limit 307200kB, failcnt 585 [ 105.985949][ T5950] memory+swap: usage 18704kB, limit 9007199254740988kB, failcnt 0 [ 105.997581][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 106.008529][ T5950] kmem: usage 17884kB, limit 9007199254740988kB, failcnt 0 [ 106.015856][ T5950] Memory cgroup stats for /syz1: [ 106.159210][ T5950] cache 524288 [ 106.169503][ T5950] rss 28672 [ 106.172745][ T5950] shmem 0 [ 106.176270][ T5950] mapped_file 65536 [ 106.181250][ T5950] dirty 0 [ 106.184223][ T5950] writeback 0 [ 106.200567][ T5950] workingset_refault_anon 24 [ 106.205224][ T5950] workingset_refault_file 129 [ 106.210736][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.228688][ T5950] swap 122880 [ 106.232226][ T5950] swapcached 282624 [ 106.246194][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.254029][ T5950] pgpgin 65530 [ 106.258447][ T5950] pgpgout 65387 [ 106.261951][ T5950] pgfault 89729 [ 106.265418][ T5950] pgmajfault 20 [ 106.282049][ T5950] inactive_anon 4096 [ 106.295940][ T5950] active_anon 57344 [ 106.299769][ T5950] inactive_file 0 [ 106.303479][ T5950] active_file 524288 [ 106.311498][ T5950] unevictable 0 [ 106.315044][ T5950] hierarchical_memory_limit 314572800 [ 106.320787][ T5950] hierarchical_memsw_limit 9223372036854771712 [ 106.327037][ T5950] total_cache 524288 [ 106.331041][ T5950] total_rss 28672 [ 106.335743][ T5950] total_shmem 0 [ 106.342640][ T5950] total_mapped_file 65536 [ 106.348765][ T5950] total_dirty 0 [ 106.352435][ T5950] total_writeback 0 [ 106.356351][ T5950] total_workingset_refault_anon 24 [ 106.361523][ T5950] total_workingset_refault_file 129 [ 106.367653][ T5950] total_swap 122880 [ 106.371533][ T5950] total_swapcached 282624 [ 106.375923][ T5950] total_pgpgin 65530 [ 106.380131][ T5950] total_pgpgout 65387 [ 106.384127][ T5950] total_pgfault 89729 [ 106.388241][ T5950] total_pgmajfault 20 [ 106.392317][ T5950] total_inactive_anon 4096 [ 106.407007][ T5950] total_active_anon 57344 [ 106.411508][ T5950] total_inactive_file 0 [ 106.415808][ T5950] total_active_file 524288 [ 106.435358][ T5950] total_unevictable 0 [ 106.439580][ T5950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.906,pid=5950,uid=0 [ 106.454431][ T5950] Memory cgroup out of memory: Killed process 5950 (syz.1.906) total-vm:94164kB, anon-rss:1256kB, file-rss:22020kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 106.506611][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 106.518085][ T5999] xfrm1: entered promiscuous mode [ 106.523160][ T5999] xfrm1: entered allmulticast mode [ 106.850178][ T28] audit: type=1400 audit(1775100294.442:431): avc: denied { setopt } for pid=6033 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.948990][ T28] audit: type=1400 audit(1775100294.542:432): avc: denied { append } for pid=6044 comm="syz.1.943" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.704036][ T6062] Set syz1 is full, maxelem 65536 reached [ 108.955228][ T6094] __nla_validate_parse: 4 callbacks suppressed [ 108.955246][ T6094] netlink: 52 bytes leftover after parsing attributes in process `syz.2.963'. [ 108.983547][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.964'. [ 109.408946][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.420492][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.004638][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 110.013785][ T6160] netlink: 76 bytes leftover after parsing attributes in process `syz.1.992'. [ 110.126000][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.134980][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.187281][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 110.196391][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 110.282861][ T28] audit: type=1400 audit(1775100297.862:433): avc: denied { setopt } for pid=6190 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.842458][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 110.985943][ T28] audit: type=1400 audit(1775100298.562:434): avc: denied { ioctl } for pid=6215 comm="syz.5.1018" path="socket:[13853]" dev="sockfs" ino=13853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.095859][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.121103][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.178124][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 111.187382][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1025'. [ 111.320690][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.329471][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.337698][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.346840][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.618295][ T6248] syz.3.1033 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 111.636117][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.3.1033 Not tainted syzkaller #0 PREEMPT(full) [ 111.636144][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.636155][ T6248] Call Trace: [ 111.636163][ T6248] [ 111.636171][ T6248] __dump_stack+0x1d/0x30 [ 111.636266][ T6248] dump_stack_lvl+0x95/0xd0 [ 111.636286][ T6248] dump_stack+0x15/0x1b [ 111.636304][ T6248] dump_header+0x80/0x240 [ 111.636323][ T6248] oom_kill_process+0x295/0x350 [ 111.636470][ T6248] out_of_memory+0x97d/0xb80 [ 111.636535][ T6248] try_charge_memcg+0x62e/0xa10 [ 111.636586][ T6248] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 111.636628][ T6248] __swap_cache_prepare_and_add+0x67/0x460 [ 111.636666][ T6248] ? alloc_pages_mpol+0x217/0x260 [ 111.636706][ T6248] swap_cache_alloc_folio+0xa2/0x120 [ 111.636792][ T6248] swap_cluster_readahead+0x36b/0x3d0 [ 111.636860][ T6248] swapin_readahead+0xde/0x840 [ 111.636891][ T6248] ? _raw_spin_unlock+0x9/0x30 [ 111.637067][ T6248] ? swap_put_entries_cluster+0x385/0x3a0 [ 111.637202][ T6248] ? swap_put_entries_cluster+0x101/0x3a0 [ 111.637229][ T6248] ? __rcu_read_unlock+0x4e/0x70 [ 111.637307][ T6248] ? swap_cache_get_folio+0x26f/0x280 [ 111.637331][ T6248] do_swap_page+0x2fe/0x21e0 [ 111.637383][ T6248] ? css_rstat_updated+0xbb/0x280 [ 111.637399][ T6248] ? __rcu_read_lock+0x36/0x50 [ 111.637416][ T6248] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 111.637448][ T6248] handle_mm_fault+0xb46/0x3020 [ 111.637477][ T6248] ? vma_start_read+0x1c7/0x2c0 [ 111.637506][ T6248] do_user_addr_fault+0x62f/0x1050 [ 111.637533][ T6248] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 111.637617][ T6248] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 111.637637][ T6248] ? trace_page_fault_user+0x1f/0xe0 [ 111.637668][ T6248] exc_page_fault+0x62/0xa0 [ 111.637688][ T6248] asm_exc_page_fault+0x26/0x30 [ 111.637710][ T6248] RIP: 0033:0x7ff105f8d020 [ 111.637770][ T6248] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 111.637789][ T6248] RSP: 002b:00007ffd18f63b68 EFLAGS: 00010246 [ 111.637806][ T6248] RAX: 0000000000000000 RBX: 0000555561665500 RCX: 0000000000000000 [ 111.637880][ T6248] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 0000555561665808 [ 111.637891][ T6248] RBP: 00007ff106247da0 R08: 00007ffd18f63bc0 R09: 0000000000000000 [ 111.637901][ T6248] R10: 0000000000000000 R11: 0000555561665808 R12: 000000000001b650 [ 111.637912][ T6248] R13: 00007ff10624609c R14: 000000000001b376 R15: 00007ff106246090 [ 111.637938][ T6248] [ 111.638000][ T6248] memory: usage 298100kB, limit 307200kB, failcnt 10205 [ 111.916096][ T6248] memory+swap: usage 192952kB, limit 9007199254740988kB, failcnt 0 [ 111.924272][ T6248] kmem: usage 192632kB, limit 9007199254740988kB, failcnt 0 [ 111.931691][ T6248] Memory cgroup stats for /syz3: [ 111.936418][ T6248] cache 4096 [ 111.956908][ T6248] rss 28672 [ 111.960646][ T6248] shmem 0 [ 111.970995][ T6248] mapped_file 4096 [ 111.975921][ T6248] dirty 0 [ 111.978879][ T6248] writeback 0 [ 111.982180][ T6248] workingset_refault_anon 15 [ 111.987387][ T6248] workingset_refault_file 49 [ 112.003243][ T6248] swap 155648 [ 112.018571][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 112.028098][ T6248] swapcached 249856 [ 112.031937][ T6248] pgpgin 93904 [ 112.036142][ T6248] pgpgout 93895 [ 112.039945][ T6248] pgfault 86299 [ 112.043466][ T6248] pgmajfault 2064 [ 112.052974][ T6248] inactive_anon 4096 [ 112.065224][ T6248] active_anon 24576 [ 112.070023][ T6248] inactive_file 0 [ 112.081775][ T6248] active_file 0 [ 112.085495][ T6248] unevictable 0 [ 112.089051][ T6248] hierarchical_memory_limit 314572800 [ 112.094513][ T6248] hierarchical_memsw_limit 9223372036854771712 [ 112.107840][ T6248] total_cache 4096 [ 112.111646][ T6248] total_rss 28672 [ 112.115596][ T6248] total_shmem 0 [ 112.119158][ T6248] total_mapped_file 4096 [ 112.123415][ T6248] total_dirty 0 [ 112.127352][ T6248] total_writeback 0 [ 112.131208][ T6248] total_workingset_refault_anon 15 [ 112.139792][ T6248] total_workingset_refault_file 49 [ 112.144952][ T6248] total_swap 155648 [ 112.148966][ T6248] total_swapcached 249856 [ 112.153393][ T6248] total_pgpgin 93904 [ 112.157630][ T6248] total_pgpgout 93895 [ 112.161652][ T6248] total_pgfault 86299 [ 112.165836][ T6248] total_pgmajfault 2064 [ 112.170017][ T6248] total_inactive_anon 4096 [ 112.174545][ T6248] total_active_anon 24576 [ 112.179082][ T6248] total_inactive_file 0 [ 112.183288][ T6248] total_active_file 0 [ 112.187568][ T6248] total_unevictable 0 [ 112.191577][ T6248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1033,pid=6248,uid=0 [ 112.213414][ T6248] Memory cgroup out of memory: Killed process 6248 (syz.3.1033) total-vm:94164kB, anon-rss:1252kB, file-rss:22020kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 112.390855][ T28] audit: type=1400 audit(1775100299.973:435): avc: denied { connect } for pid=6284 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.971293][ T28] audit: type=1400 audit(1775100301.483:436): avc: denied { create } for pid=6313 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.137004][ T28] audit: type=1400 audit(1775100301.483:437): avc: denied { ioctl } for pid=6313 comm="syz.2.1060" path="socket:[14844]" dev="sockfs" ino=14844 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 115.115483][ T6333] Set syz1 is full, maxelem 65536 reached [ 115.364528][ T6352] __nla_validate_parse: 1 callbacks suppressed [ 115.364542][ T6352] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1069'. [ 115.416171][ T6358] program syz.0.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.493038][ T6365] macsec0: entered promiscuous mode [ 115.498785][ T6365] macsec0: entered allmulticast mode [ 115.504276][ T6365] veth1_macvtap: entered allmulticast mode [ 115.579716][ T6369] netlink: 'syz.5.1078': attribute type 1 has an invalid length. [ 115.603872][ T6369] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 115.874503][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 115.934937][ T6386] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1084'. [ 116.160130][ T28] audit: type=1400 audit(1775100303.743:438): avc: denied { remount } for pid=6402 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.349059][ T28] audit: type=1400 audit(1775100303.933:439): avc: denied { write } for pid=6410 comm="syz.3.1094" path="socket:[14937]" dev="sockfs" ino=14937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.420684][ T6413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1095'. [ 116.491944][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.541352][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1098'. [ 116.562415][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.572982][ T6422] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1098'. [ 116.629747][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 116.647650][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.662931][ T6428] xfrm1: entered promiscuous mode [ 116.668745][ T6428] xfrm1: entered allmulticast mode [ 116.683131][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 116.708030][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.846538][ T28] audit: type=1400 audit(1775100304.433:440): avc: denied { read } for pid=3040 comm="dhcpcd" name="n29" dev="tmpfs" ino=4026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.875770][ T50] bridge_slave_1: left allmulticast mode [ 116.914636][ T50] bridge_slave_1: left promiscuous mode [ 116.920465][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.938641][ T28] audit: type=1400 audit(1775100304.433:441): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=4026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.964868][ T50] bridge_slave_0: left allmulticast mode [ 116.979394][ T50] bridge_slave_0: left promiscuous mode [ 116.993542][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.056294][ T28] audit: type=1400 audit(1775100304.433:442): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=4026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.125042][ T28] audit: type=1400 audit(1775100304.703:443): avc: denied { create } for pid=6453 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.157137][ T28] audit: type=1400 audit(1775100304.703:444): avc: denied { write } for pid=6453 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=4047 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.257575][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.267377][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.276843][ T50] bond0 (unregistering): Released all slaves [ 117.284976][ T50] bond1 (unregistering): Released all slaves [ 117.293304][ T6470] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1111'. [ 117.340969][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 117.366169][ T50] hsr_slave_0: left promiscuous mode [ 117.375698][ T50] hsr_slave_1: left promiscuous mode [ 117.384227][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.404957][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.424910][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.432462][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.443940][ T50] veth1_macvtap: left promiscuous mode [ 117.449994][ T50] veth0_macvtap: left promiscuous mode [ 117.455812][ T50] veth1_vlan: left promiscuous mode [ 117.461329][ T50] veth0_vlan: left promiscuous mode [ 117.520283][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 117.520296][ T28] audit: type=1400 audit(1775100305.103:449): avc: denied { write } for pid=6510 comm="syz.5.1123" path="socket:[15508]" dev="sockfs" ino=15508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.575918][ T50] team0 (unregistering): Port device team_slave_1 removed [ 117.586594][ T50] team0 (unregistering): Port device team_slave_0 removed [ 117.734585][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 117.819945][ T6533] netlink: 'syz.5.1130': attribute type 10 has an invalid length. [ 117.828241][ T6533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.840169][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.907257][ T6533] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 117.947937][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.956799][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.964050][ T6424] bridge_slave_0: entered allmulticast mode [ 117.970742][ T6424] bridge_slave_0: entered promiscuous mode [ 117.977628][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.985045][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.992248][ T6424] bridge_slave_1: entered allmulticast mode [ 117.999026][ T6424] bridge_slave_1: entered promiscuous mode [ 118.038477][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.069492][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.167862][ T6424] team0: Port device team_slave_0 added [ 118.177227][ T6424] team0: Port device team_slave_1 added [ 118.193595][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.200948][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.227980][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.240391][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.247595][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.273719][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.324774][ T6586] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 118.348727][ T6424] hsr_slave_0: entered promiscuous mode [ 118.363759][ T6424] hsr_slave_1: entered promiscuous mode [ 118.468834][ T6602] program syz.5.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.886346][ T6424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.918005][ T6424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.210255][ T6424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.246051][ T6424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.677586][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.698116][ T6585] syz.2.1141 (6585) used greatest stack depth: 8968 bytes left [ 119.719639][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.745687][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.752929][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.795403][ T252] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.802517][ T252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.858104][ T6720] program syz.0.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.934378][ T28] audit: type=1400 audit(1775100307.513:450): avc: denied { nlmsg_read } for pid=6726 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.024917][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.196924][ T28] audit: type=1400 audit(1775100307.783:451): avc: denied { create } for pid=6773 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.224633][ T28] audit: type=1400 audit(1775100307.803:452): avc: denied { ioctl } for pid=6773 comm="syz.5.1185" path="socket:[16648]" dev="sockfs" ino=16648 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.257061][ T6424] veth0_vlan: entered promiscuous mode [ 120.266528][ T6424] veth1_vlan: entered promiscuous mode [ 120.311284][ T6424] veth0_macvtap: entered promiscuous mode [ 120.325329][ T6424] veth1_macvtap: entered promiscuous mode [ 120.345033][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.379971][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.407807][ T252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.828897][ T6803] __nla_validate_parse: 7 callbacks suppressed [ 120.828922][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 120.959940][ T252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.999196][ T252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.037417][ T252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.143936][ T6823] program syz.0.1199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.294959][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 121.438451][ T6852] program syz.1.1211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.491272][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'. [ 121.500668][ T6855] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1212'. [ 121.728074][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 121.911845][ T6904] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 121.919945][ T6904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1234'. [ 122.081496][ T6927] netlink: 'syz.3.1243': attribute type 4 has an invalid length. [ 122.096207][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 122.315266][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 122.360744][ T6967] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1260'. [ 122.375557][ T6970] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.1261'. [ 122.563004][ T7004] tap0: tun_chr_ioctl cmd 1074025684 [ 123.095861][ T7030] program syz.5.1285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.294917][ T28] audit: type=1400 audit(1775100310.804:453): avc: denied { create } for pid=7040 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.411368][ T7058] program syz.0.1297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.533689][ T7067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.934426][ T7107] netlink: 'syz.5.1319': attribute type 10 has an invalid length. [ 123.945728][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.955100][ T7107] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.541060][ T28] audit: type=1400 audit(1775100315.124:454): avc: denied { nlmsg_write } for pid=7171 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 127.602073][ T28] audit: type=1400 audit(1775100315.124:455): avc: denied { audit_write } for pid=7171 comm="syz.3.1347" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.671465][ T28] audit: type=1107 audit(1775100315.124:456): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 127.711357][ T7178] __nla_validate_parse: 7 callbacks suppressed [ 127.711385][ T7178] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1350'. [ 127.869802][ T28] audit: type=1400 audit(1775100315.454:457): avc: denied { write } for pid=7183 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.062121][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 128.071285][ T7202] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1361'. [ 128.662481][ T7224] : port 1(ip6gretap0) entered blocking state [ 128.671684][ T7224] : port 1(ip6gretap0) entered disabled state [ 128.678831][ T7224] ip6gretap0: entered allmulticast mode [ 128.686211][ T7224] ip6gretap0: entered promiscuous mode [ 128.840484][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1376'. [ 128.884212][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1376'. [ 129.339140][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 129.520166][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1409'. [ 129.693646][ T28] audit: type=1400 audit(1775100317.285:458): avc: denied { read } for pid=7328 comm="syz.1.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.807575][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1420'. [ 129.816815][ T7343] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1420'. [ 130.097946][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 130.366102][ T7397] delete_channel: no stack [ 130.387049][ T28] audit: type=1400 audit(1775100317.945:459): avc: denied { setopt } for pid=7397 comm="syz.5.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 130.468409][ T28] audit: type=1400 audit(1775100318.055:460): avc: denied { cpu } for pid=7413 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.756379][ T28] audit: type=1400 audit(1775100318.345:461): avc: denied { read } for pid=7464 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.077016][ T7500] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 131.085065][ T7500] netlink: 'syz.2.1489': attribute type 2 has an invalid length. [ 132.004010][ T7565] netlink: 'syz.5.1520': attribute type 1 has an invalid length. [ 132.167566][ T7598] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 133.096245][ T7629] __nla_validate_parse: 20 callbacks suppressed [ 133.096261][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 133.266777][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 133.275966][ T7632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1548'. [ 135.622668][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 135.658616][ T7619] Set syz1 is full, maxelem 65536 reached [ 135.760900][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1562'. [ 135.770459][ T7667] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1562'. [ 135.917757][ T28] audit: type=1400 audit(1775100323.495:462): avc: denied { read } for pid=7677 comm="syz.2.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.955420][ T7700] program syz.1.1576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.967283][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1575'. [ 135.978728][ T28] audit: type=1400 audit(1775100323.505:463): avc: denied { create } for pid=7677 comm="syz.2.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.999308][ T7699] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1575'. [ 136.080356][ T28] audit: type=1400 audit(1775100323.665:464): avc: denied { write } for pid=7715 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.124099][ T28] audit: type=1400 audit(1775100323.715:465): avc: denied { setopt } for pid=7713 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.156449][ T28] audit: type=1400 audit(1775100323.745:466): avc: denied { ioctl } for pid=7727 comm="syz.0.1588" path="socket:[19032]" dev="sockfs" ino=19032 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.190673][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 136.570830][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 136.603557][ T7793] IPv6: Can't replace route, no match found [ 136.854621][ T7814] program syz.0.1626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.205734][ T7840] program syz.0.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.294577][ T7874] program syz.3.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.308790][ T7843] Set syz1 is full, maxelem 65536 reached [ 139.558926][ T7887] __nla_validate_parse: 2 callbacks suppressed [ 139.558943][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1654'. [ 139.574798][ T7887] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1654'. [ 139.621813][ T7890] netlink: 'syz.5.1656': attribute type 1 has an invalid length. [ 139.629889][ T7890] netlink: 'syz.5.1656': attribute type 2 has an invalid length. [ 139.638051][ T28] audit: type=1400 audit(1775100327.206:467): avc: denied { read } for pid=7889 comm="syz.5.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.658085][ T7889] delete_channel: no stack [ 139.802378][ T7924] netlink: 'syz.0.1666': attribute type 16 has an invalid length. [ 139.810396][ T7924] netlink: 'syz.0.1666': attribute type 17 has an invalid length. [ 139.836200][ T7928] syz.1.1667: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 139.850969][ T28] audit: type=1400 audit(1775100327.426:468): avc: denied { setopt } for pid=7927 comm="syz.1.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.871095][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.1.1667 Not tainted syzkaller #0 PREEMPT(full) [ 139.871165][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.871226][ T7928] Call Trace: [ 139.871234][ T7928] [ 139.871244][ T7928] __dump_stack+0x1d/0x30 [ 139.871297][ T7928] dump_stack_lvl+0x95/0xd0 [ 139.871333][ T7928] dump_stack+0x15/0x1b [ 139.871358][ T7928] warn_alloc+0x145/0x1c0 [ 139.871426][ T7928] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 139.871470][ T7928] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 139.871586][ T7928] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 139.871631][ T7928] ? slow_avc_audit+0x14c/0x190 [ 139.871672][ T7928] ? should_fail_ex+0x30/0x280 [ 139.871712][ T7928] ? xskq_create+0x36/0xe0 [ 139.871773][ T7928] vmalloc_user_noprof+0x7d/0xb0 [ 139.871816][ T7928] ? xskq_create+0x80/0xe0 [ 139.871901][ T7928] xskq_create+0x80/0xe0 [ 139.871928][ T7928] xsk_init_queue+0x70/0xb0 [ 139.871956][ T7928] xsk_setsockopt+0x477/0x640 [ 139.872042][ T7928] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.872074][ T7928] __sys_setsockopt+0x184/0x200 [ 139.872120][ T7928] __x64_sys_setsockopt+0x64/0x80 [ 139.872243][ T7928] x64_sys_call+0x2327/0x3020 [ 139.872342][ T7928] do_syscall_64+0x12c/0x370 [ 139.872416][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.872470][ T7928] RIP: 0033:0x7f133551c819 [ 139.872491][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.872513][ T7928] RSP: 002b:00007f1333f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.872539][ T7928] RAX: ffffffffffffffda RBX: 00007f1335795fa0 RCX: 00007f133551c819 [ 139.872636][ T7928] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 139.872680][ T7928] RBP: 00007f13355b2c91 R08: 0000000000000004 R09: 0000000000000000 [ 139.872696][ T7928] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 139.872736][ T7928] R13: 00007f1335796038 R14: 00007f1335795fa0 R15: 00007ffc0a0d4548 [ 139.872776][ T7928] [ 140.088045][ T7928] Mem-Info: [ 140.091199][ T7928] active_anon:6264 inactive_anon:2 isolated_anon:0 [ 140.091199][ T7928] active_file:20619 inactive_file:2336 isolated_file:0 [ 140.091199][ T7928] unevictable:0 dirty:166 writeback:0 [ 140.091199][ T7928] slab_reclaimable:3401 slab_unreclaimable:22266 [ 140.091199][ T7928] mapped:29207 shmem:181 pagetables:1256 [ 140.091199][ T7928] sec_pagetables:0 bounce:0 [ 140.091199][ T7928] kernel_misc_reclaimable:0 [ 140.091199][ T7928] free:1876475 free_pcp:10304 free_cma:0 [ 140.148448][ T7928] Node 0 active_anon:25056kB inactive_anon:8kB active_file:82476kB inactive_file:9344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116944kB dirty:664kB writeback:0kB shmem:724kB kernel_stack:3904kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.206288][ T7928] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.242152][ T7928] lowmem_reserve[]: 0 2879 7857 7857 [ 140.247550][ T7928] Node 0 DMA32 free:2944512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948140kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 140.328385][ T7928] lowmem_reserve[]: 0 0 4978 4978 [ 140.334249][ T7928] Node 0 Normal free:4546188kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24824kB inactive_anon:8kB active_file:82476kB inactive_file:9344kB unevictable:0kB writepending:664kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:37728kB local_pcp:20772kB free_cma:0kB [ 140.376009][ T7928] lowmem_reserve[]: 0 0 0 0 [ 140.380736][ T7928] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.413099][ T7928] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944512kB [ 140.445791][ T7928] Node 0 Normal: 1257*4kB (UM) 869*8kB (UME) 280*16kB (ME) 336*32kB (UME) 233*64kB (UME) 148*128kB (UM) 106*256kB (UM) 41*512kB (UM) 47*1024kB (UM) 45*2048kB (UME) 1049*4096kB (UM) = 4546188kB [ 140.498621][ T7963] netlink: 'syz.3.1673': attribute type 12 has an invalid length. [ 140.512372][ T7963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1673'. [ 140.526816][ T7928] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.536558][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 140.543038][ T7928] 23134 total pagecache pages [ 140.590812][ T7928] 2 pages in swap cache [ 140.596543][ T7928] Free swap = 124988kB [ 140.603620][ T7928] Total swap = 124996kB [ 140.607900][ T7928] 2097051 pages RAM [ 140.612001][ T7928] 0 pages HighMem/MovableOnly [ 140.675128][ T7928] 81616 pages reserved [ 140.786977][ T28] audit: type=1400 audit(1775100328.376:469): avc: denied { setopt } for pid=8032 comm="syz.5.1681" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.821745][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1683'. [ 140.834442][ T8038] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1683'. [ 140.976411][ T8057] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1690'. [ 141.040300][ T8066] netlink: 'syz.5.1693': attribute type 8 has an invalid length. [ 141.167723][ T8089] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1704'. [ 141.274199][ T28] audit: type=1400 audit(1775100328.866:470): avc: denied { create } for pid=8099 comm="syz.5.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 141.425937][ T8120] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.1718'. [ 141.449417][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 141.477544][ T8121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8121 comm=syz.0.1719 [ 141.652683][ T8145] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.661388][ T8145] netlink: 'syz.5.1731': attribute type 1 has an invalid length. [ 141.697189][ T28] audit: type=1400 audit(1775100329.286:471): avc: denied { mount } for pid=8143 comm="syz.5.1731" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.777221][ T28] audit: type=1400 audit(1775100329.316:472): avc: denied { unmount } for pid=3645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.918105][ T8172] program syz.1.1741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.582210][ T8261] program syz.0.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.780743][ T8283] netlink: 'syz.5.1793': attribute type 1 has an invalid length. [ 142.904336][ T8299] ªªªªª6: renamed from wg2 (while UP) [ 142.928249][ T8301] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.937242][ T8301] IPv6: NLM_F_REPLACE set, but no existing node found! [ 143.024296][ T28] audit: type=1400 audit(1775100330.616:473): avc: denied { ioctl } for pid=8315 comm="syz.5.1809" path="socket:[21779]" dev="sockfs" ino=21779 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 143.117414][ T8326] program syz.5.1813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.273181][ T8347] unsupported nla_type 217 [ 143.559310][ T8373] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 143.587531][ T8373] syzkaller0: entered promiscuous mode [ 143.598108][ T8373] syzkaller0: entered allmulticast mode [ 143.606744][ T28] audit: type=1400 audit(1775100331.196:474): avc: denied { relabelfrom } for pid=8368 comm="syz.3.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 143.648575][ T28] audit: type=1400 audit(1775100331.196:475): avc: denied { relabelto } for pid=8368 comm="syz.3.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 143.713262][ T8394] netlink: 'syz.0.1846': attribute type 3 has an invalid length. [ 143.784028][ T8400] program syz.0.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.099897][ T8427] netlink: 'syz.0.1861': attribute type 4 has an invalid length. [ 144.121913][ T8427] .`: renamed from bond0 (while UP) [ 144.576068][ T8487] __nla_validate_parse: 18 callbacks suppressed [ 144.576088][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1868'. [ 145.003565][ T8550] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1886'. [ 145.205158][ T8585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2573 sclass=netlink_tcpdiag_socket pid=8585 comm=syz.0.1889 [ 147.876080][ T8605] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1895'. [ 147.951492][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1902'. [ 147.976645][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 148.168424][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1913'. [ 148.182789][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1913'. [ 148.223525][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1918'. [ 148.253647][ T8663] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1921'. [ 148.287281][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'. [ 148.823747][ T8623] delete_channel: no stack [ 149.490985][ T28] audit: type=1400 audit(1775100337.067:476): avc: denied { ioctl } for pid=8790 comm="syz.2.1974" path="socket:[22445]" dev="sockfs" ino=22445 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 149.872515][ T8848] __nla_validate_parse: 9 callbacks suppressed [ 149.872602][ T8848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'. [ 149.998953][ T8863] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2010'. [ 150.337500][ T8874] Set syz1 is full, maxelem 65536 reached [ 150.354063][ T8869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2007'. [ 150.435824][ T8881] netlink: 'syz.0.2017': attribute type 13 has an invalid length. [ 150.496089][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'. [ 150.598943][ T8908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2029'. [ 150.703372][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2024'. [ 151.837881][ T8944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2044'. [ 151.983892][ T8960] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 152.011927][ T8960] netlink: 'syz.1.2049': attribute type 2 has an invalid length. [ 152.022241][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 152.024911][ T8930] Set syz1 is full, maxelem 65536 reached [ 152.069555][ T8968] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2052'. [ 152.150449][ T8979] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2057'. [ 153.025170][ T9157] netlink: 'syz.2.2118': attribute type 2 has an invalid length. [ 154.138229][ T28] audit: type=1400 audit(1775100341.728:477): avc: denied { setopt } for pid=9281 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.058894][ T9301] __nla_validate_parse: 17 callbacks suppressed [ 157.058926][ T9301] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2161'. [ 157.277972][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2177'. [ 157.293446][ T9337] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2177'. [ 157.423490][ T28] audit: type=1400 audit(1775100345.018:478): avc: denied { getopt } for pid=9364 comm="syz.1.2191" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.467423][ T28] audit: type=1400 audit(1775100345.058:479): avc: denied { setopt } for pid=9372 comm="syz.5.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.504923][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2196'. [ 157.514134][ T9376] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2196'. [ 157.564593][ T28] audit: type=1400 audit(1775100345.158:480): avc: denied { getopt } for pid=9379 comm="syz.5.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.685010][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.693974][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.953441][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.963593][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.303470][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.312105][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.440657][ T9564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2239'. [ 158.627648][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.646566][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 158.676542][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.684610][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 158.694203][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.702036][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 158.714774][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.723105][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 158.733006][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.741255][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.751630][ T9612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.758223][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.766125][ T9612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.769165][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.805433][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.822649][ T9570] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 158.870115][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.907641][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.063267][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.088780][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.652083][ T9703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 159.658649][ T9703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.670570][ T9703] vhci_hcd vhci_hcd.0: Device attached [ 159.678497][ T9704] vhci_hcd: cannot find the pending unlink 9 [ 159.685145][ T9704] vhci_hcd: connection closed [ 159.685358][ T1707] vhci_hcd vhci_hcd.1: stop threads [ 159.697136][ T1707] vhci_hcd vhci_hcd.1: release socket [ 159.702870][ T1707] vhci_hcd vhci_hcd.1: disconnect device [ 160.877589][ T9906] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.062181][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.072021][ T9932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.073638][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.082066][ T9932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.450706][ T9940] Set syz1 is full, maxelem 65536 reached [ 161.458171][ T9949] loop4: detected capacity change from 0 to 7 [ 161.464918][ T9949] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.472843][ T9949] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.480814][ T9949] loop4: unable to read partition table [ 161.488786][ T9949] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 161.501775][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.549311][ T9949] support for the xor transformation has been removed. [ 161.556460][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.575902][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.588922][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.597043][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.605365][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.613688][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.622074][ T7642] Buffer I/O error on dev loop4, logical block 0, async page read [ 161.668259][ T9960] syzkaller0: entered promiscuous mode [ 161.679319][ T9960] syzkaller0: entered allmulticast mode [ 161.756503][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.775523][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.955634][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.975357][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.070747][T10008] __nla_validate_parse: 54 callbacks suppressed [ 162.070760][T10008] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2378'. [ 162.242268][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.252255][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.395727][T10019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2383'. [ 162.572671][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 162.608461][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.618664][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.678538][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2391'. [ 162.722382][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2394'. [ 162.732072][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2394'. [ 162.741171][T10045] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2394'. [ 162.934633][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'. [ 162.977341][T10069] tls_set_device_offload_rx: netdev not found [ 163.016575][T10074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2407'. [ 163.037758][T10078] tipc: Failed to remove unknown binding: 66,0,0/0:7545555/7545556 [ 163.047904][T10078] tipc: Failed to remove unknown binding: 66,0,0/0:7545555/7545556 [ 163.071829][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.080366][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.190420][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2420'. [ 163.331057][T10112] IPv6: Can't replace route, no match found [ 163.469928][ T35] IPVS: starting estimator thread 0... [ 163.558495][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.567825][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.576265][T10128] IPVS: using max 2448 ests per chain, 122400 per kthread [ 163.829293][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.838499][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.866907][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.876099][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.072513][ T3410] IPVS: starting estimator thread 0... [ 164.124672][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.139148][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.149303][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.157820][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.169088][T10234] IPVS: using max 1968 ests per chain, 98400 per kthread [ 164.212532][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.221563][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.366688][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.377136][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.586337][T10313] tmpfs: Unknown parameter 'usrquota' [ 165.250879][T10342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.280973][T10342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.900176][T10413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.944488][T10448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.978758][T10448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.053639][ T28] audit: type=1400 audit(1775100353.649:481): avc: denied { connect } for pid=10454 comm="syz.0.2495" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.926854][T10568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.954871][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.964582][T10568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.989078][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.127294][T10582] kernel profiling enabled (shift: 9) [ 167.154450][T10586] __nla_validate_parse: 22 callbacks suppressed [ 167.154468][T10586] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2534'. [ 167.202661][T10592] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2536'. [ 167.242812][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 167.251150][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.628590][ T10] IPVS: starting estimator thread 0... [ 167.718745][T10614] IPVS: using max 2496 ests per chain, 124800 per kthread [ 167.750640][T10624] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2550'. [ 167.933343][T10639] tipc: Started in network mode [ 167.938382][T10639] tipc: Node identity 520482884269, cluster identity 4711 [ 167.945865][T10639] tipc: Enabled bearer , priority 0 [ 167.953102][T10639] syzkaller0: entered promiscuous mode [ 167.958945][T10639] syzkaller0: entered allmulticast mode [ 168.012205][T10639] tipc: Resetting bearer [ 168.024943][T10639] tipc: Disabling bearer [ 168.108068][T10653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.129136][T10653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.102445][T10695] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2579'. [ 169.726645][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 169.857348][ T28] audit: type=1400 audit(1775100357.449:482): avc: denied { create } for pid=10716 comm="syz.0.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.879950][T10738] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2591'. [ 169.987559][T10746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2595'. [ 170.032380][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2596'. [ 170.048501][T10749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2596'. [ 170.066579][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2596'. [ 170.298535][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.307015][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.968174][ T28] audit: type=1400 audit(1775100358.550:483): avc: denied { read } for pid=10772 comm="syz.1.2604" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.132725][ T28] audit: type=1400 audit(1775100358.550:484): avc: denied { open } for pid=10772 comm="syz.1.2604" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.252363][ T28] audit: type=1400 audit(1775100358.550:485): avc: denied { ioctl } for pid=10772 comm="syz.1.2604" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.450120][T10814] loop3: detected capacity change from 0 to 512 [ 171.456777][T10814] EXT4-fs: test_dummy_encryption option not supported [ 171.614776][T10830] loop1: detected capacity change from 0 to 164 [ 171.663724][ T28] audit: type=1400 audit(1775100359.250:486): avc: denied { mount } for pid=10829 comm="syz.1.2625" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 171.735070][ T28] audit: type=1400 audit(1775100359.330:487): avc: denied { unmount } for pid=6424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 171.831917][T10851] loop2: detected capacity change from 0 to 512 [ 171.851889][T10851] EXT4-fs: Ignoring removed oldalloc option [ 171.868940][T10851] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.898327][T10851] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 171.965831][T10851] EXT4-fs (loop2): 1 truncate cleaned up [ 171.988623][T10851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.014976][ T28] audit: type=1400 audit(1775100359.610:488): avc: denied { add_name } for pid=10850 comm="syz.2.2633" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.111528][ T28] audit: type=1400 audit(1775100359.610:489): avc: denied { read append open } for pid=10850 comm="syz.2.2633" path="/488/bus/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 172.199172][ T28] audit: type=1400 audit(1775100359.790:490): avc: denied { allowed } for pid=10890 comm="syz.0.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 172.320560][T10899] loop5: detected capacity change from 0 to 512 [ 172.328345][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.340749][T10899] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 172.390838][T10904] __nla_validate_parse: 7 callbacks suppressed [ 172.390850][T10904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2656'. [ 173.075044][T10931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2668'. [ 173.174340][ T28] audit: type=1400 audit(1775100360.770:491): avc: denied { setopt } for pid=10929 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.380116][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2673'. [ 173.474566][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 173.533213][ T28] audit: type=1400 audit(1775100361.070:492): avc: denied { create } for pid=10935 comm="syz.2.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 173.705833][ T28] audit: type=1400 audit(1775100361.300:493): avc: denied { create } for pid=10952 comm="syz.5.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.733929][T10953] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2675'. [ 173.874297][T10955] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2676'. [ 174.063054][T10973] loop3: detected capacity change from 0 to 2048 [ 174.111334][T10978] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2688'. [ 174.139268][T10973] Alternate GPT is invalid, using primary GPT. [ 174.162694][T10973] loop3: p2 p3 p7 [ 174.198265][ T3001] Alternate GPT is invalid, using primary GPT. [ 174.205750][ T3001] loop3: p2 p3 p7 [ 174.247381][ T7642] udevd[7642]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 174.258807][ T7636] udevd[7636]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 174.270475][T10405] udevd[10405]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 175.678361][T11022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2705'. [ 175.875685][T11030] loop2: detected capacity change from 0 to 1024 [ 175.880566][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'. [ 175.921896][T11030] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.967250][T11030] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 176.716717][T11057] Set syz1 is full, maxelem 65536 reached [ 176.975892][T11068] loop3: detected capacity change from 0 to 2048 [ 177.027876][T11068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.063286][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2725'. [ 177.077496][T11068] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.127861][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.154611][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.167846][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.630675][T11101] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2735'. [ 177.863664][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2737'. [ 177.963818][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 177.963837][ T28] audit: type=1400 audit(1775100365.560:495): avc: denied { setattr } for pid=11108 comm="syz.2.2739" name="SCTPv6" dev="sockfs" ino=27503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.173084][T11121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.206862][T11121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.245074][T11127] loop5: detected capacity change from 0 to 512 [ 178.254595][T11127] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 178.258506][ T28] audit: type=1400 audit(1775100365.860:496): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 178.429965][T11133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2750'. [ 178.944602][ T28] audit: type=1400 audit(1775100366.541:497): avc: denied { mount } for pid=11151 comm="syz.2.2752" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 179.152924][T11163] loop2: detected capacity change from 0 to 128 [ 179.160017][T11163] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.174173][T11163] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.363986][T11219] bond6: entered promiscuous mode [ 180.385796][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 180.416352][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2761'. [ 180.434398][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2758'. [ 181.573291][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2769'. [ 181.597375][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 181.693257][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2771'. [ 181.762884][T11291] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2771'. [ 183.035754][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 183.075284][T11364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2783'. [ 183.106169][T11364] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2783'. [ 183.222319][T11371] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2786'. [ 183.578244][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 183.596996][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2795'. [ 183.610828][T11413] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2795'. [ 183.869331][T11200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.951269][T11200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.995766][T11468] netlink: 16187 bytes leftover after parsing attributes in process `syz.2.2806'. [ 184.027505][T11200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.122682][T11200] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.445164][T11200] bridge_slave_1: left allmulticast mode [ 184.472096][T11527] netlink: 16187 bytes leftover after parsing attributes in process `syz.1.2818'. [ 184.510296][T11200] bridge_slave_1: left promiscuous mode [ 184.528246][T11531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2819'. [ 184.563213][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.614539][T11200] bridge_slave_0: left allmulticast mode [ 184.650500][T11200] bridge_slave_0: left promiscuous mode [ 184.700057][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.735816][T11200] ip6gretap0: left allmulticast mode [ 184.743808][T11200] ip6gretap0: left promiscuous mode [ 184.763486][T11200] : port 1(ip6gretap0) entered disabled state [ 184.978858][T11200] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.988949][T11200] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.998514][T11200] .` (unregistering): Released all slaves [ 185.006066][T11200] bond1 (unregistering): Released all slaves [ 185.015171][T11200] bond2 (unregistering): Released all slaves [ 185.024170][T11200] bond3 (unregistering): Released all slaves [ 185.033717][T11200] bond4 (unregistering): Released all slaves [ 185.042561][T11200] bond5 (unregistering): Released all slaves [ 185.067951][T11431] chnl_net:caif_netlink_parms(): no params data found [ 185.153569][T11200] hsr_slave_0: left promiscuous mode [ 185.161045][T11200] hsr_slave_1: left promiscuous mode [ 185.178950][T11200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.191991][T11200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.213612][T11200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.225337][T11200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.245827][T11200] veth1_macvtap: left allmulticast mode [ 185.258779][T11200] veth1_macvtap: left promiscuous mode [ 185.264439][T11200] veth1_vlan: left promiscuous mode [ 185.282209][T11200] veth0_vlan: left promiscuous mode [ 185.491506][T11200] team0 (unregistering): Port device team_slave_1 removed [ 185.502462][T11200] team0 (unregistering): Port device team_slave_0 removed [ 185.626127][T11431] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.640917][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.648401][T11431] bridge_slave_0: entered allmulticast mode [ 185.654887][T11431] bridge_slave_0: entered promiscuous mode [ 185.661807][T11431] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.669100][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.676385][T11431] bridge_slave_1: entered allmulticast mode [ 185.683732][T11431] bridge_slave_1: entered promiscuous mode [ 185.707481][T11431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.740267][T11431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.771692][ T28] audit: type=1400 audit(1775100373.371:498): avc: denied { write } for pid=11654 comm="syz.5.2830" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.796488][ T28] audit: type=1400 audit(1775100373.371:499): avc: denied { open } for pid=11654 comm="syz.5.2830" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 185.832084][T11431] team0: Port device team_slave_0 added [ 185.857235][T11431] team0: Port device team_slave_1 added [ 185.930638][T11200] IPVS: stop unused estimator thread 0... [ 185.969436][T11431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.980055][T11431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.010432][T11431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.038391][T11431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.045483][T11431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.073968][ T28] audit: type=1400 audit(1775100373.671:500): avc: denied { read } for pid=11674 comm="syz.2.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.078104][T11431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.171220][T11431] hsr_slave_0: entered promiscuous mode [ 186.185533][T11431] hsr_slave_1: entered promiscuous mode [ 186.199466][T11431] debugfs: 'hsr0' already exists in 'hsr' [ 186.205502][T11431] Cannot create hsr debugfs directory [ 186.479723][T11729] loop3: detected capacity change from 0 to 2048 [ 186.520354][T11431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.534245][T11729] loop3: p1 < > p4 [ 186.544719][T11729] loop3: p4 size 722688 extends beyond EOD, truncated [ 186.554267][T11431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.567424][ T28] audit: type=1400 audit(1775100374.171:501): avc: denied { write } for pid=11728 comm="syz.3.2849" name="loop3p1" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.571355][T11737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.591528][ T28] audit: type=1400 audit(1775100374.171:502): avc: denied { open } for pid=11728 comm="syz.3.2849" path="/dev/loop3p1" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.607033][T11737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.639085][T11431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.672438][T11431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.721218][T11431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.736065][T11431] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.748360][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.755598][T11200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.780257][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.787362][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.888478][T11768] loop2: detected capacity change from 0 to 128 [ 186.911143][T11431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.077062][ T28] audit: type=1400 audit(1775100374.671:503): avc: denied { remount } for pid=11766 comm="syz.2.2855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 187.201637][T11431] veth0_vlan: entered promiscuous mode [ 187.242586][T11807] batadv_slave_0: entered promiscuous mode [ 187.267881][T11431] veth1_vlan: entered promiscuous mode [ 187.312197][T11809] loop1: detected capacity change from 0 to 512 [ 187.354559][T11809] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2862: inode has both inline data and extents flags [ 187.395055][T11431] veth0_macvtap: entered promiscuous mode [ 187.461409][T11431] veth1_macvtap: entered promiscuous mode [ 187.471190][T11809] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.471439][T11809] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2862: couldn't read orphan inode 15 (err -117) [ 187.480741][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 187.480756][ C1] EXT4-fs (loop1): initial error at time 1775100375: ext4_orphan_get:1397: inode 15 [ 187.480778][ C1] EXT4-fs (loop1): last error at time 1775100375: ext4_orphan_get:1397: inode 15 [ 187.532282][T11431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.550750][T11809] loop1: lost filesystem error report for type 5 error -117 [ 187.551823][T11809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.573905][T11815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11815 comm=syz.5.2863 [ 187.600237][T11431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.624221][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.642553][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.707182][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.834574][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.846476][ T28] audit: type=1400 audit(1775100375.442:504): avc: denied { mounton } for pid=11431 comm="syz-executor" path="/root/syzkaller.BY3Y3K/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 187.900897][T11809] ipvlan2: entered promiscuous mode [ 187.909129][T11809] ipvlan2: entered allmulticast mode [ 187.935287][T11809] syz_tun: entered allmulticast mode [ 187.954390][T11809] team0: Device ipvlan2 failed to register rx_handler [ 188.075549][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.113087][T11853] __nla_validate_parse: 13 callbacks suppressed [ 188.113101][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2874'. [ 188.167953][ T3404] IPVS: starting estimator thread 0... [ 188.289642][T11862] IPVS: using max 2064 ests per chain, 103200 per kthread [ 188.318853][T11879] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2877'. [ 188.372958][T11887] loop3: detected capacity change from 0 to 512 [ 188.393963][T11883] loop1: detected capacity change from 0 to 2048 [ 188.403610][T11887] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 188.420022][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2881'. [ 188.429439][T11885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2881'. [ 188.438742][T11885] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2881'. [ 188.449135][T11883] loop1: p1 < > p4 [ 188.453799][T11883] loop1: p4 size 722688 extends beyond EOD, truncated [ 188.454540][T11887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 188.482846][T11887] System zones: 1-12 [ 188.487111][T11887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 188.508298][ T3001] loop1: p1 < > p4 [ 188.512710][T11887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2882: bg 0: block 361: padding at end of block bitmap is not set [ 188.596289][ T3001] loop1: p4 size 722688 extends beyond EOD, truncated [ 188.640603][ T7642] udevd[7642]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 188.652063][T10405] udevd[10405]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 188.675250][ T7642] udevd[7642]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 188.686092][T11887] loop3: lost filesystem error report for type 5 error -117 [ 188.696000][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 188.709995][ C1] EXT4-fs (loop3): initial error at time 1775100376: ext4_validate_block_bitmap:441 [ 188.719514][ C1] EXT4-fs (loop3): last error at time 1775100376: ext4_validate_block_bitmap:441 [ 188.732405][T10405] udevd[10405]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 188.745932][T11887] EXT4-fs (loop3): Remounting filesystem read-only [ 188.759062][T11887] EXT4-fs (loop3): 1 truncate cleaned up [ 188.766656][T11887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 188.829108][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 189.057351][T11913] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2891'. [ 189.401744][T11927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2895'. [ 189.436302][T11927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2895'. [ 189.523610][T11927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2895'. [ 189.756880][T11904] chnl_net:caif_netlink_parms(): no params data found [ 189.869786][T11888] Set syz1 is full, maxelem 65536 reached [ 190.098420][T11904] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.116571][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.169709][T11955] hugetlbfs: syz.2.2900 (11955): Using mlock ulimits for SHM_HUGETLB is obsolete [ 190.516710][T11904] bridge_slave_0: entered allmulticast mode [ 190.524014][T11904] bridge_slave_0: entered promiscuous mode [ 190.538776][T11904] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.546015][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.553273][T11904] bridge_slave_1: entered allmulticast mode [ 190.560546][T11904] bridge_slave_1: entered promiscuous mode [ 190.649670][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 190.672353][T11904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.689105][T11904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.766384][T11904] team0: Port device team_slave_0 added [ 190.773072][T11904] team0: Port device team_slave_1 added [ 190.884393][ T28] audit: type=1400 audit(1775100378.482:505): avc: denied { bind } for pid=11983 comm="syz.1.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.910633][T11904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.940864][T11904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.972839][ T28] audit: type=1400 audit(1775100378.542:506): avc: denied { write } for pid=11983 comm="syz.1.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.992434][T11904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.008785][T11904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.016164][T11904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.046535][T11904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.077489][T11990] tipc: Started in network mode [ 191.086623][T11990] tipc: Node identity 4, cluster identity 4711 [ 191.101379][T11990] tipc: Node number set to 4 [ 191.160164][T11904] hsr_slave_0: entered promiscuous mode [ 191.174996][T11904] hsr_slave_1: entered promiscuous mode [ 191.189525][T11904] debugfs: 'hsr0' already exists in 'hsr' [ 191.202763][T11904] Cannot create hsr debugfs directory [ 191.602380][T11904] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.712064][T11985] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 191.971435][T11904] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.049333][ T28] audit: type=1400 audit(1775100379.652:507): avc: denied { bind } for pid=12092 comm="syz.2.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.116842][T11904] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.131255][ T28] audit: type=1400 audit(1775100379.712:508): avc: denied { write } for pid=12092 comm="syz.2.2925" path="socket:[31845]" dev="sockfs" ino=31845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.183018][T12112] loop3: detected capacity change from 0 to 512 [ 192.217317][ T28] audit: type=1400 audit(1775100379.782:509): avc: denied { connect } for pid=12092 comm="syz.2.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.245599][T12112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.266972][T12112] EXT4-fs (loop3): 1 truncate cleaned up [ 192.273069][T12112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.298007][ T28] audit: type=1400 audit(1775100379.892:510): avc: denied { setattr } for pid=12111 comm="syz.3.2928" path="/567/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.337359][ T28] audit: type=1400 audit(1775100379.922:511): avc: denied { remove_name } for pid=12111 comm="syz.3.2928" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.361111][ T28] audit: type=1400 audit(1775100379.922:512): avc: denied { rename } for pid=12111 comm="syz.3.2928" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.362587][T11904] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.389222][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.475766][T11904] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.487652][T11904] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.516993][T12128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.553535][ T28] audit: type=1400 audit(1775100380.092:513): avc: denied { read append } for pid=12125 comm="syz.1.2931" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.586137][T12128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.614365][ T28] audit: type=1400 audit(1775100380.092:514): avc: denied { open } for pid=12125 comm="syz.1.2931" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.641961][T11904] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.674830][T11904] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.219316][T11904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.230527][T11904] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.250825][T11904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.261205][T11904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.297732][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.304870][ T8001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.327426][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.334645][ T8001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.445044][T12161] __nla_validate_parse: 1 callbacks suppressed [ 193.445060][T12161] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2937'. [ 193.475517][T12168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2938'. [ 193.517258][T11904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.548574][T12174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.568202][T12174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.327605][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'. [ 194.385242][T11904] veth0_vlan: entered promiscuous mode [ 194.394216][T11904] veth1_vlan: entered promiscuous mode [ 194.412048][T11904] veth0_macvtap: entered promiscuous mode [ 194.419655][T11904] veth1_macvtap: entered promiscuous mode [ 194.430178][T11904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.442031][T11904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.460201][ T7992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.470556][ T7992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.490456][ T7992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.627801][ T7992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.989537][T12252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2949'. [ 195.042030][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2952'. [ 195.082858][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2954'. [ 195.526806][T12289] loop5: detected capacity change from 0 to 2048 [ 195.597295][T12289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.971427][T11904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.122432][T12314] loop5: detected capacity change from 0 to 512 [ 196.135964][T12314] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 196.247646][T12314] EXT4-fs (loop5): 1 truncate cleaned up [ 196.260196][T12314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.334081][T11904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.949162][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 196.950188][ T28] audit: type=1400 audit(1775100384.543:519): avc: denied { bind } for pid=12327 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.139467][T12337] loop5: detected capacity change from 0 to 1024 [ 197.160854][T12337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.192035][T12337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.226106][ T28] audit: type=1400 audit(1775100384.823:520): avc: denied { write } for pid=12336 comm="syz.5.2977" path="/11/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 197.266158][T11904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.425593][T12359] program syz.5.2986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.467415][T12360] infiniband syz2: set active [ 197.472190][T12360] infiniband syz2: added bridge_slave_1 [ 197.532346][T12360] RDS/IB: syz2: added [ 197.536419][T12360] smc: adding ib device syz2 with port count 1 [ 197.542686][T12360] smc: ib device syz2 port 1 has no pnetid [ 197.803727][T12368] loop3: detected capacity change from 0 to 512 [ 197.821215][T12368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.834230][T12368] EXT4-fs (loop3): 1 truncate cleaned up [ 197.840830][T12368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.887065][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.964548][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.975056][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.062243][ T8001] bridge_slave_1: left allmulticast mode [ 198.073775][ T8001] bridge_slave_1: left promiscuous mode [ 198.086305][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.106843][ T8001] bridge_slave_0: left allmulticast mode [ 198.113010][ T8001] bridge_slave_0: left promiscuous mode [ 198.118990][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.133202][T12388] loop2: detected capacity change from 0 to 1764 [ 198.299563][ T8001] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 198.357340][ T8001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.369923][ T8001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.380422][ T8001] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 198.390781][ T8001] bond0 (unregistering): (slave team0): Releasing backup interface [ 198.400836][ T8001] bond0 (unregistering): Released all slaves [ 198.408919][ T8001] bond1 (unregistering): Released all slaves [ 198.417836][ T8001] bond2 (unregistering): Released all slaves [ 198.427880][ T8001] bond3 (unregistering): Released all slaves [ 198.441802][ T8001] bond4 (unregistering): Released all slaves [ 198.454728][ T8001] bond5 (unregistering): Released all slaves [ 198.467790][ T8001] bond6 (unregistering): Released all slaves [ 198.480519][ T8001] bond7 (unregistering): Released all slaves [ 198.496183][ T8001] bond8 (unregistering): Released all slaves [ 198.508799][ T8001] bond9 (unregistering): Released all slaves [ 198.587145][T12409] loop3: detected capacity change from 0 to 512 [ 198.601209][T12409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.660374][T12409] EXT4-fs (loop3): 1 truncate cleaned up [ 198.673416][T12409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.899272][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.014420][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 199.025362][T12422] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3007'. [ 199.972347][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 199.991111][T12449] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3018'. [ 200.005599][ T8001] tipc: Left network mode [ 200.399249][ T8001] hsr_slave_0: left promiscuous mode [ 200.423526][T12476] loop5: detected capacity change from 0 to 1024 [ 200.431474][T12476] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.442613][T12476] JBD2: no valid journal superblock found [ 200.448654][T12476] EXT4-fs (loop5): Could not load journal inode [ 200.502578][ T8001] hsr_slave_1: left promiscuous mode [ 200.561380][ T8001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.638472][ T8001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.659509][ T8001] veth1_macvtap: left promiscuous mode [ 200.665475][ T8001] veth0_macvtap: left promiscuous mode [ 200.671289][ T8001] veth1_vlan: left promiscuous mode [ 200.677275][ T8001] veth0_vlan: left promiscuous mode [ 200.802344][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 200.813068][T12486] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3030'. [ 200.933875][ T8001] team0 (unregistering): Port device team_slave_1 removed [ 200.948636][ T8001] team0 (unregistering): Port device team_slave_0 removed [ 201.002129][ T8001] lo (unregistering): left allmulticast mode [ 201.009768][T12463] batadv_slave_0: entered promiscuous mode [ 201.016572][T12487] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 201.028272][T12473] batadv_slave_0: left promiscuous mode [ 201.337186][T12500] loop1: detected capacity change from 0 to 512 [ 201.383388][ T8001] IPVS: stop unused estimator thread 0... [ 202.116261][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 202.152957][T12513] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3041'. [ 202.247673][T12520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=12520 comm=syz.5.3044 [ 202.277179][T12520] xt_hashlimit: size too large, truncated to 1048576 [ 203.018021][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 203.077927][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 203.393852][T12542] loop2: detected capacity change from 0 to 512 [ 205.040284][T12559] loop1: detected capacity change from 0 to 512 [ 205.179841][ T28] audit: type=1400 audit(1775100392.774:521): avc: denied { ioctl } for pid=12553 comm="syz.3.3050" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 205.339286][T12565] loop3: detected capacity change from 0 to 128 [ 205.596331][ T28] audit: type=1400 audit(1775100393.194:522): avc: denied { setopt } for pid=12573 comm="syz.0.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.639478][T12578] syzkaller0: entered promiscuous mode [ 205.648611][T12578] syzkaller0: entered allmulticast mode [ 205.658301][T12581] loop5: detected capacity change from 0 to 1024 [ 205.668699][T12578] 0: reclassify loop, rule prio 0, protocol 800 [ 205.675764][T12581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.683556][ T28] audit: type=1400 audit(1775100393.274:523): avc: denied { read } for pid=12573 comm="syz.0.3052" lport=61352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.715818][T12581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.900555][ T28] audit: type=1400 audit(1775100393.494:524): avc: denied { create } for pid=12586 comm="syz.0.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.921251][T12587] ieee802154 phy0 wpan0: encryption failed: -126 [ 205.940197][ T28] audit: type=1400 audit(1775100393.524:525): avc: denied { write } for pid=12586 comm="syz.0.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.526912][T11904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.137790][T12634] loop1: detected capacity change from 0 to 512 [ 208.108743][T12646] program syz.3.3077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.857439][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 208.869309][T12654] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3080'. [ 208.948002][T12626] lo speed is unknown, defaulting to 1000 [ 208.953879][T12626] lo speed is unknown, defaulting to 1000 [ 208.959763][T12626] lo speed is unknown, defaulting to 1000 [ 208.996705][T12626] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 209.015934][T12626] lo speed is unknown, defaulting to 1000 [ 209.023015][T12626] lo speed is unknown, defaulting to 1000 [ 209.029561][T12626] lo speed is unknown, defaulting to 1000 [ 209.036747][T12626] lo speed is unknown, defaulting to 1000 [ 209.042905][T12626] lo speed is unknown, defaulting to 1000 [ 209.049293][T12626] lo speed is unknown, defaulting to 1000 [ 209.436426][T12650] lo speed is unknown, defaulting to 1000 [ 209.509764][T12650] chnl_net:caif_netlink_parms(): no params data found [ 209.564942][T12691] loop2: detected capacity change from 0 to 512 [ 209.572719][T12691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.594931][T12692] loop1: detected capacity change from 0 to 512 [ 209.622561][T12691] EXT4-fs (loop2): 1 truncate cleaned up [ 209.659696][T12691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.738048][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.782441][T12650] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.792264][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.801636][T12650] bridge_slave_0: entered allmulticast mode [ 209.810289][T12650] bridge_slave_0: entered promiscuous mode [ 209.822608][T12650] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.830537][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.838497][T12650] bridge_slave_1: entered allmulticast mode [ 209.846275][T12650] bridge_slave_1: entered promiscuous mode [ 209.882094][T12650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.898726][T12650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.936030][T12650] team0: Port device team_slave_0 added [ 209.944768][T12650] team0: Port device team_slave_1 added [ 210.056979][T12650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.083297][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.257489][T12650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.524612][T12650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.093503][T12703] siw: device registration error -23 [ 211.299613][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.358291][T12650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.371502][T12707] loop2: detected capacity change from 0 to 512 [ 211.472401][T12703] lo speed is unknown, defaulting to 1000 [ 211.490352][ T8001] bridge_slave_1: left allmulticast mode [ 211.512690][T12707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.525662][ T8001] bridge_slave_1: left promiscuous mode [ 211.537917][T12707] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.549156][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.607227][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.616861][ T8001] bridge_slave_0: left allmulticast mode [ 211.622689][ T8001] bridge_slave_0: left promiscuous mode [ 211.629970][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.787236][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3100'. [ 211.796423][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3100'. [ 211.796989][ T8001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.815314][ T8001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.849111][ T8001] bond0 (unregistering): Released all slaves [ 211.857769][ T8001] bond1 (unregistering): Released all slaves [ 211.869709][ T8001] bond2 (unregistering): Released all slaves [ 211.881639][T12724] loop5: detected capacity change from 0 to 512 [ 211.896935][ T8001] bond3 (unregistering): Released all slaves [ 211.908108][ T8001] bond4 (unregistering): Released all slaves [ 211.918997][ T8001] bond5 (unregistering): Released all slaves [ 211.930854][ T8001] bond6 (unregistering): Released all slaves [ 211.942328][ T8001] bond7 (unregistering): Released all slaves [ 211.954307][ T8001] bond8 (unregistering): Released all slaves [ 211.966265][ T8001] bond9 (unregistering): Released all slaves [ 212.428320][T12650] hsr_slave_0: entered promiscuous mode [ 212.718621][T12735] loop1: detected capacity change from 0 to 512 [ 212.808046][T12650] hsr_slave_1: entered promiscuous mode [ 212.824567][T12650] debugfs: 'hsr0' already exists in 'hsr' [ 212.830314][T12650] Cannot create hsr debugfs directory [ 214.156088][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 214.693482][ T28] audit: type=1400 audit(1775100402.285:526): avc: denied { write } for pid=12747 comm="syz.2.3109" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.727835][ T28] audit: type=1400 audit(1775100402.285:527): avc: denied { open } for pid=12747 comm="syz.2.3109" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.844411][ T8001] hsr_slave_0: left promiscuous mode [ 214.879917][ T8001] hsr_slave_1: left promiscuous mode [ 214.897644][ T8001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.917467][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 214.954752][ T8001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.013210][T12781] Set syz1 is full, maxelem 65536 reached [ 215.088712][ T8001] team0 (unregistering): Port device team_slave_1 removed [ 215.099313][ T8001] team0 (unregistering): Port device team_slave_0 removed [ 215.294307][T12795] loop5: detected capacity change from 0 to 512 [ 215.608834][T12798] loop2: detected capacity change from 0 to 512 [ 218.472981][T12753] lo speed is unknown, defaulting to 1000 [ 218.548101][T12871] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3133'. [ 218.611817][T12878] loop2: detected capacity change from 0 to 1024 [ 218.645468][T12878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.684424][T12878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.751286][ T8001] IPVS: stop unused estimator thread 0... [ 218.909608][T12650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.936117][T12650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.957305][T12650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.975562][T12650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.041750][T12650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.055534][T12650] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.065789][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.072862][T11213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.084708][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.091804][ T7990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.116303][T12650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.127582][T12650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.187484][T12650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.268869][T12650] veth0_vlan: entered promiscuous mode [ 219.276926][T12650] veth1_vlan: entered promiscuous mode [ 219.293494][T12650] veth0_macvtap: entered promiscuous mode [ 219.300639][T12650] veth1_macvtap: entered promiscuous mode [ 219.311351][T12650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.323116][T12650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.333131][T11213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.346414][T11213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.363156][T11213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.371971][T11213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.439111][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.834878][T12991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3156'. [ 221.364764][T13002] syz2: rxe_newlink: already configured on bridge_slave_1 [ 221.451460][T13004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13004 comm=syz.1.3162 [ 221.500694][T13004] xt_hashlimit: size too large, truncated to 1048576 [ 221.747951][T13039] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 221.936488][T13030] lo speed is unknown, defaulting to 1000 [ 221.999073][T13030] chnl_net:caif_netlink_parms(): no params data found [ 222.095596][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.108361][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.214616][T13030] bridge_slave_0: entered allmulticast mode [ 222.221349][T13030] bridge_slave_0: entered promiscuous mode [ 222.232460][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.239636][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.246987][T13030] bridge_slave_1: entered allmulticast mode [ 222.253825][T13030] bridge_slave_1: entered promiscuous mode [ 223.150491][ T7997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.181295][ T7997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.212723][T13030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.275556][T13030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.342408][ T7997] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 223.380194][ T7997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.402041][ T7997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.436566][T13030] team0: Port device team_slave_0 added [ 223.462875][T13030] team0: Port device team_slave_1 added [ 223.504934][T13030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.513498][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.540129][T13030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.551781][T13030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.559145][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.586367][T13030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.642847][T13030] hsr_slave_0: entered promiscuous mode [ 223.649347][T13030] hsr_slave_1: entered promiscuous mode [ 223.655656][T13030] debugfs: 'hsr0' already exists in 'hsr' [ 223.661458][T13030] Cannot create hsr debugfs directory [ 223.759517][ T7997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.789866][ T7997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.874129][ T7997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.928046][ T7997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.097800][ T7997] bridge_slave_1: left allmulticast mode [ 224.122054][ T7997] bridge_slave_1: left promiscuous mode [ 224.127773][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.147615][ T7997] bridge_slave_0: left allmulticast mode [ 224.160966][ T7997] bridge_slave_0: left promiscuous mode [ 224.169530][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.182603][T13119] loop5: detected capacity change from 0 to 2048 [ 224.189992][T13119] EXT4-fs: Mount option(s) incompatible with ext2 [ 224.526336][ T7997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.609975][T13154] loop5: detected capacity change from 0 to 512 [ 224.623253][ T7997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.636510][ T7997] bond0 (unregistering): Released all slaves [ 224.652145][ T7997] bond1 (unregistering): Released all slaves [ 224.662928][ T7997] bond2 (unregistering): Released all slaves [ 225.298093][ T7997] bond3 (unregistering): Released all slaves [ 225.338942][ T7997] bond4 (unregistering): Released all slaves [ 225.360617][ T7997] bond5 (unregistering): Released all slaves [ 225.379129][ T7997] bond6 (unregistering): Released all slaves [ 225.421881][T13127] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3203'. [ 225.464062][T13162] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3213'. [ 225.702212][ T7997] hsr_slave_0: left promiscuous mode [ 225.707995][ T7997] hsr_slave_1: left promiscuous mode [ 225.714551][ T7997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.722183][ T7997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.291135][ T7997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.374313][ T7997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.474116][ T7997] veth1_macvtap: left promiscuous mode [ 226.490096][ T7997] veth0_macvtap: left promiscuous mode [ 226.497617][ T7997] veth1_vlan: left promiscuous mode [ 226.508222][ T7997] veth0_vlan: left promiscuous mode [ 226.528291][T13192] loop5: detected capacity change from 0 to 1024 [ 226.534476][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3220'. [ 226.538320][T13192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.560486][T13194] validate_nla: 35 callbacks suppressed [ 226.560502][T13194] netlink: 'syz.1.3220': attribute type 18 has an invalid length. [ 226.593207][T13194] netlink: 'syz.1.3220': attribute type 18 has an invalid length. [ 226.601652][T13192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.605701][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 226.676477][ T7997] team0 (unregistering): Port device team_slave_1 removed [ 226.686773][ T7997] team0 (unregistering): Port device team_slave_0 removed [ 226.772136][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'. [ 226.783757][T13185] lo speed is unknown, defaulting to 1000 [ 226.798856][T13210] can: request_module (can-proto-5) failed. [ 226.862396][ T28] audit: type=1400 audit(1775100414.416:528): avc: denied { wake_alarm } for pid=13209 comm="syz.1.3225" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.905414][T13210] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.912698][T13210] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.990997][T13210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.017938][T13210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.061623][T13218] ip6tnl0: Master is either lo or non-ether device [ 227.069099][ T3410] syz2: Port: 1 Link DOWN [ 227.077980][ T1330] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.127725][ T1330] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.148717][ T1330] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.165911][ T1330] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.180143][T13245] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3230'. [ 227.232511][ T7997] IPVS: stop unused estimator thread 0... [ 227.280719][T13030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.351479][T13030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.368773][T11904] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.380940][T13263] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3233'. [ 227.405508][T13271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13271 comm=syz.0.3235 [ 227.426981][T13030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.480795][T13271] xt_hashlimit: size too large, truncated to 1048576 [ 227.520100][T13030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.533714][T13278] loop3: detected capacity change from 0 to 512 [ 227.595502][T13278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.618930][T13278] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.117420][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 228.135880][ T28] audit: type=1400 audit(1775100415.726:529): avc: denied { create } for pid=13276 comm="syz.3.3238" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 228.175862][T12650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.220736][ T28] audit: type=1400 audit(1775100415.726:530): avc: denied { rename } for pid=13276 comm="syz.3.3238" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 228.342321][T13030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.369050][ T28] audit: type=1400 audit(1775100415.726:531): avc: denied { unlink } for pid=13276 comm="syz.3.3238" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.405414][T13030] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.482146][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.489294][ T8001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.515384][T13313] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3244'. [ 228.535529][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.542634][ T7999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.684136][T13030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.828104][T13030] veth0_vlan: entered promiscuous mode [ 228.839701][T13030] veth1_vlan: entered promiscuous mode [ 228.858291][T13347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13347 comm=syz.0.3253 [ 228.884185][T13030] veth0_macvtap: entered promiscuous mode [ 228.896916][T13030] veth1_macvtap: entered promiscuous mode [ 228.915130][T13347] xt_hashlimit: size too large, truncated to 1048576 [ 228.924953][T13030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.945249][T13030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.967680][ T8001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.986021][ T8001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.012827][ T8001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.046141][ T8001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.159027][T13358] loop2: detected capacity change from 0 to 1024 [ 229.180108][T13358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.203461][T13358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.634776][T13435] Set syz1 is full, maxelem 65536 reached [ 229.701227][T13405] ================================================================== [ 229.709387][T13405] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 229.719232][T13405] [ 229.721587][T13405] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 229.729668][T13405] tick_do_update_jiffies64+0x113/0x1c0 [ 229.735255][T13405] tick_nohz_handler+0x8d/0x3d0 [ 229.740162][T13405] __hrtimer_run_queues+0x218/0x4f0 [ 229.745392][T13405] hrtimer_interrupt+0x269/0x810 [ 229.750364][T13405] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 229.756017][T13441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13441 comm=syz.5.3267 [ 229.756307][T13405] sysvec_apic_timer_interrupt+0x6f/0x80 [ 229.769700][T13375] syz.0.3256 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 229.774544][T13405] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.774576][T13405] __tsan_read1+0x12/0x180 [ 229.774593][T13405] mas_wr_store_type+0x926/0xce0 [ 229.774615][T13405] mas_preallocate+0x267/0x510 [ 229.796759][T13375] CPU: 1 UID: 0 PID: 13375 Comm: syz.0.3256 Not tainted syzkaller #0 PREEMPT(full) [ 229.796837][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.796876][T13375] Call Trace: [ 229.796897][T13375] [ 229.796918][T13375] __dump_stack+0x1d/0x30 [ 229.797016][T13375] dump_stack_lvl+0x95/0xd0 [ 229.797124][T13375] dump_stack+0x15/0x1b [ 229.797193][T13375] dump_header+0x80/0x240 [ 229.797274][T13375] oom_kill_process+0x295/0x350 [ 229.797351][T13375] out_of_memory+0x97d/0xb80 [ 229.797470][T13375] try_charge_memcg+0x62e/0xa10 [ 229.797620][T13375] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 229.797727][T13375] __swap_cache_prepare_and_add+0x67/0x460 [ 229.797886][T13375] ? alloc_pages_mpol+0x217/0x260 [ 229.797977][T13375] swap_cache_alloc_folio+0xa2/0x120 [ 229.798085][T13375] swap_cluster_readahead+0x26e/0x3d0 [ 229.798218][T13375] swapin_readahead+0xde/0x840 [ 229.798314][T13375] ? _raw_spin_unlock+0x9/0x30 [ 229.798413][T13375] ? swap_put_entries_cluster+0x385/0x3a0 [ 229.798541][T13375] ? swap_put_entries_cluster+0x101/0x3a0 [ 229.798679][T13375] ? __rcu_read_unlock+0x4e/0x70 [ 229.798749][T13375] ? swap_cache_get_folio+0x26f/0x280 [ 229.798850][T13375] do_swap_page+0x2fe/0x21e0 [ 229.798985][T13375] ? css_rstat_updated+0xbb/0x280 [ 229.799073][T13375] ? __rcu_read_lock+0x36/0x50 [ 229.799285][T13375] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 229.799376][T13375] handle_mm_fault+0xb46/0x3020 [ 229.799534][T13375] ? vma_start_read+0x1c7/0x2c0 [ 229.799625][T13375] do_user_addr_fault+0x62f/0x1050 [ 229.799780][T13375] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 229.799870][T13375] ? trace_page_fault_user+0x1f/0xe0 [ 229.799990][T13375] exc_page_fault+0x62/0xa0 [ 229.800092][T13375] asm_exc_page_fault+0x26/0x30 [ 229.800162][T13375] RIP: 0033:0x7f51edd2a190 [ 229.800222][T13375] Code: c4 4c 0f 42 e0 83 3d 3a dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d fe b4 ed 00 e8 03 00 00 48 8d 1d ff bd 3a 00 e8 8a 31 13 00 [ 229.800334][T13375] RSP: 002b:00007ffdcd54adc0 EFLAGS: 00010202 [ 229.800388][T13375] RAX: 0000000000038129 RBX: 00007f51ee0d7da0 RCX: 0000000000037e88 [ 229.800430][T13375] RDX: 00000000000002a1 RSI: 00007ffdcd54ada0 RDI: 0000000000000001 [ 229.800472][T13375] RBP: 00007f51ee0d7da0 R08: 0000000028261161 R09: 7fffffffffffffff [ 229.800521][T13375] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000003830c [ 229.800582][T13375] R13: 00007f51ee0d609c R14: 0000000000038037 R15: 00007f51ee0d6090 [ 229.800647][T13375] [ 229.805195][T13375] memory: usage 307200kB, limit 307200kB, failcnt 497 [ 229.805664][T13405] __split_vma+0x240/0x640 [ 229.805702][T13405] vms_gather_munmap_vmas+0x184/0x850 [ 229.815517][T13441] xt_hashlimit: size too large, truncated to 1048576 [ 229.825119][T13405] mmap_region+0x718/0x2050 [ 229.825143][T13405] do_mmap+0x9b2/0xbd0 [ 229.825172][T13405] vm_mmap_pgoff+0x183/0x2d0 [ 229.825190][T13405] ksys_mmap_pgoff+0x267/0x310 [ 229.828689][T13375] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 229.831529][T13405] x64_sys_call+0x14df/0x3020 [ 229.831565][T13405] do_syscall_64+0x12c/0x370 [ 229.831590][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.836550][T13375] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 229.840419][T13405] [ 229.840429][T13405] read to 0xffffffff86c09a00 of 8 bytes by task 13405 on cpu 0: [ 229.840449][T13405] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 229.840477][T13405] count_shadow_nodes+0x6a/0x230 [ 230.143592][T13405] do_shrink_slab+0x63/0x6a0 [ 230.148249][T13405] shrink_slab+0x538/0x880 [ 230.152678][T13405] shrink_node+0x6bc/0x2130 [ 230.157201][T13405] do_try_to_free_pages+0x408/0xc80 [ 230.162442][T13405] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 230.168365][T13405] try_charge_memcg+0x37e/0xa10 [ 230.173258][T13405] obj_cgroup_charge_pages+0x23/0xc0 [ 230.178574][T13405] __memcg_kmem_charge_page+0x9e/0x170 [ 230.184056][T13405] __alloc_frozen_pages_noprof+0x18a/0x360 [ 230.189886][T13405] alloc_pages_mpol+0xb3/0x260 [ 230.194672][T13405] alloc_pages_noprof+0x8f/0x140 [ 230.199632][T13405] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 230.205547][T13405] bpf_map_area_alloc+0xfa/0x140 [ 230.210506][T13405] prealloc_init+0xcb/0x490 [ 230.215032][T13405] htab_map_alloc+0x49d/0x6b0 [ 230.219744][T13405] map_create+0x862/0xda0 [ 230.224100][T13405] __sys_bpf+0x5c8/0x7e0 [ 230.228362][T13405] __x64_sys_bpf+0x41/0x50 [ 230.232809][T13405] x64_sys_call+0x10cb/0x3020 [ 230.237640][T13405] do_syscall_64+0x12c/0x370 [ 230.242260][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.248176][T13405] [ 230.250524][T13405] value changed: 0x00000000ffffe45d -> 0x00000000ffffe45e [ 230.257639][T13405] [ 230.260005][T13405] Reported by Kernel Concurrency Sanitizer on: [ 230.266272][T13405] CPU: 0 UID: 0 PID: 13405 Comm: syz.0.3256 Not tainted syzkaller #0 PREEMPT(full) [ 230.275667][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.285739][T13405] ================================================================== [ 230.325392][T13375] Memory cgroup stats for /syz0: [ 230.325665][T13375] cache 0 [ 230.333633][T13375] rss 0 [ 230.336418][T13375] shmem 0 [ 230.339409][T13375] mapped_file 0 [ 230.342990][T13375] dirty 0 [ 230.345951][T13375] writeback 0 [ 230.349277][T13375] workingset_refault_anon 9 [ 230.353825][T13375] workingset_refault_file 1 [ 230.358354][T13375] swap 188416 [ 230.361707][T13375] swapcached 225280 [ 230.365527][T13375] pgpgin 121582 [ 230.369055][T13375] pgpgout 121582 [ 230.372660][T13375] pgfault 171652 [ 230.376288][T13375] pgmajfault 10 [ 230.379818][T13375] inactive_anon 0 [ 230.401520][T13375] active_anon 0 [ 230.405037][T13375] inactive_file 0 [ 230.415989][T13375] active_file 0 [ 230.419495][T13375] unevictable 0 [ 230.423015][T13375] hierarchical_memory_limit 314572800 [ 230.428488][T13375] hierarchical_memsw_limit 9223372036854771712 [ 230.434715][T13375] total_cache 0 [ 230.438189][T13375] total_rss 0 [ 230.441878][T13375] total_shmem 0 [ 230.445377][T13375] total_mapped_file 0 [ 230.449374][T13375] total_dirty 0 [ 230.461164][T13375] total_writeback 0 [ 230.465019][T13375] total_workingset_refault_anon 9 [ 230.470063][T13375] total_workingset_refault_file 1 [ 230.476291][T13375] total_swap 188416 [ 230.480118][T13375] total_swapcached 225280 [ 230.487018][T13375] total_pgpgin 121582 [ 230.499806][T13375] total_pgpgout 121582 [ 230.504059][T13375] total_pgfault 171652 [ 230.508162][T13375] total_pgmajfault 10 [ 230.512461][T13375] total_inactive_anon 0 [ 230.516698][T13375] total_active_anon 0 [ 230.520692][T13375] total_inactive_file 0 [ 230.526213][T13375] total_active_file 0 [ 230.530233][T13375] total_unevictable 0 [ 230.534546][T13375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3256,pid=13375,uid=0 [ 230.549481][T13375] Memory cgroup out of memory: Killed process 13375 (syz.0.3256) total-vm:96140kB, anon-rss:1248kB, file-rss:22020kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 230.550783][T13030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.