last executing test programs: 33.421441697s ago: executing program 1 (id=114): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 33.338568269s ago: executing program 1 (id=115): mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x20000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 32.921507879s ago: executing program 4 (id=121): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/229, 0xe5}], 0x1, 0x3, 0x0) 32.022635891s ago: executing program 4 (id=123): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 32.013450871s ago: executing program 4 (id=126): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) 31.900296884s ago: executing program 4 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 31.878114804s ago: executing program 4 (id=128): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000480)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@usrjquota}]}, 0x43, 0x460, &(0x7f0000000780)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPNbWKwR9Jk1btwYui4EFB0EM9xiQttWkjTQRbilaRepSCF0/iUfAv8CB6EfUkePGgdykU6aWtIIzM7kyz2e5uk3STjdnPB6Z9b+fNvvfdN2/3zbxOA+haQ/kfScT2iPgjIgaq2cUFhqp/Xb96fvLG1fOTSWTZG38nlXLXrp6fLIuWx20rMsNpRPpJEnsb1Dt39tzJiZmZ6TNFfnT+1Lujc2fPPX3i1MTx6ePTp8ePHDl8aOy5Z8efqTtyf/9K4szbdG3PB7P7dr/y1qXXJo9eevvnb5Iy/ro42mSo1c7HsqzN1XXWjpp00tvBhrAsPRGRd1dfZfwPRE8sdN5AvPxxRxsHrKosy7JtzXdfyIANLImlljxZfF8AG0P5Q59f/5bbGk091oUrL1QvgPK4rxdbdU9vpEWZvrrr23YaioijF/75Mt9iefchdn63Sm0CADa27/P5z1ON5n9p3FdT7q5ibWgwIu7OJx8RcU9E7IqIeyMqZe+PiAeWWX/9Ismt85/0ckR88fuKoru9fP73fLG2tXj+V87+YrCnyO2oxN+XHDsxM32w+EyGo29Tnh9rUccPL/32WbN9tfO/fMvrL+eCRTsu925afMzUxPzEncRc68pHEXt6G8Wf3FwJSCJid0TsafYmm1vXceKJr/c129cs/r6lNL4N60zZVxGPV/v/QtTFX0par0+Obo6Z6YOj5Vlxq19+vfh6s/pv3/+rK+//rQ3P/5vxDya167Vzy6/j4p+fNr2mWen535+8WUmXi8HvT8zPnxmL6E9erTa69vXxhWPLfFk+j3/4QOPxvzMWPom9EZGfxA9GxEMR8XDR9v0R8UhEHGgR/08vPvrO0uNP17z/p5bV/wuJ/qh/pXGi5+SP3y6qdLBV/I36/3AlNVy8spTvvxbNuZFl2R2czQAAAPD/k0bE9kjSkZvpNB0Zqf57+V2xNZ2ZnZt/8tjse6enqs8IDEZfWt7pGqi5HzpWXNaX+fG6/KHivvHnPVsq+ZHJ2ZmpTgcPXW5bk/Gf+6un060DVp3ntaB7Gf/QvYx/6F7GP3SvBuN/SyfaAay9Rr//H3agHcDaqxv/lv2gi7j+h+5l/EP36r39M/zAxjO3JVo/vL/ixL/FfyDQ/neWWA+JSNdFMyRWKdHpbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+C8AAP//E8nlDg==") syz_emit_ethernet(0x0, 0x0, 0x0) 31.665219429s ago: executing program 4 (id=129): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents(r2, 0x0, 0x58) 31.607919171s ago: executing program 32 (id=129): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents(r2, 0x0, 0x58) 31.418549635s ago: executing program 1 (id=131): r0 = socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e}, 0x28) open(&(0x7f0000000140)='.\x00', 0x88000, 0x114) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$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") mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 28.590080483s ago: executing program 1 (id=156): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000006780)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@errors_continue}, {@mblk_io_submit}, {@nolazytime}]}, 0x1, 0x4ac, &(0x7f0000006800)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x4a7) 28.348398959s ago: executing program 1 (id=161): syz_open_procfs(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 28.084361746s ago: executing program 1 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@remote, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 28.051004516s ago: executing program 33 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@remote, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 21.243412279s ago: executing program 2 (id=252): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000140)=0x2200a, 0xffffffffffffffe1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4fef, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r0, 0x2218, 0x7721, 0x16, 0x0, 0x0) 20.8316744s ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 20.706857773s ago: executing program 2 (id=261): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 20.142462216s ago: executing program 2 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 19.98954665s ago: executing program 2 (id=267): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0xfb0f}, 0x90) 19.214511928s ago: executing program 2 (id=270): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6a024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014", 0x23}], 0x1}, 0x20000004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 19.202047969s ago: executing program 34 (id=270): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6a024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014", 0x23}], 0x1}, 0x20000004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 13.678570641s ago: executing program 0 (id=337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 13.585473314s ago: executing program 0 (id=339): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 13.425741117s ago: executing program 0 (id=343): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) 13.383091008s ago: executing program 0 (id=344): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 13.254473132s ago: executing program 0 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x7ffffffc}]) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 12.025542601s ago: executing program 0 (id=360): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 11.965473552s ago: executing program 35 (id=360): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 9.16995912s ago: executing program 5 (id=405): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) close_range(r0, 0xffffffffffffffff, 0x0) 9.024054323s ago: executing program 5 (id=407): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 8.120419274s ago: executing program 5 (id=426): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x2000, 0x8000) fallocate(r0, 0x8, 0x2000, 0x6000) 7.918071079s ago: executing program 5 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 7.751089974s ago: executing program 5 (id=435): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 7.544362309s ago: executing program 5 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/156}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.4756254s ago: executing program 36 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/156}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.710943045s ago: executing program 3 (id=497): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400000008"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.571007468s ago: executing program 3 (id=500): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf45b, 0x98}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) 1.826626565s ago: executing program 6 (id=515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 1.789245326s ago: executing program 6 (id=516): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) 1.773695517s ago: executing program 3 (id=517): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) 1.67838556s ago: executing program 6 (id=519): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x1013c1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.63136805s ago: executing program 3 (id=521): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.494247784s ago: executing program 9 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.494033184s ago: executing program 6 (id=526): r0 = socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x4, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.270609479s ago: executing program 9 (id=529): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@hci={0x1d, 0x1, 0x2}, 0x80, 0x0}}], 0x1, 0x200000c1) sched_setscheduler(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) 1.107067263s ago: executing program 9 (id=531): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 951.308217ms ago: executing program 9 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[], 0x0) 928.479018ms ago: executing program 9 (id=535): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 925.090018ms ago: executing program 6 (id=536): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x17bc}], 0x2, 0x40012030, 0x0) 814.65779ms ago: executing program 6 (id=537): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 814.45864ms ago: executing program 3 (id=538): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 814.34227ms ago: executing program 3 (id=539): socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x22020600) close(0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x1000002, 0x2013, r0, 0x0) 786.947571ms ago: executing program 9 (id=540): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000022) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 587.876686ms ago: executing program 7 (id=541): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @private1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 534.973767ms ago: executing program 7 (id=543): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) 426.438859ms ago: executing program 7 (id=546): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60140, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x54000}], 0x75, 0x5000, 0x0, 0x3) 347.052341ms ago: executing program 8 (id=547): syz_open_dev$usbfs(0x0, 0x1ff, 0x8041) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 346.802801ms ago: executing program 8 (id=548): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 346.622961ms ago: executing program 8 (id=549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x30, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe, 0x0, @opaque="e10da20aa83b"}}}}}, 0x0) 254.411584ms ago: executing program 8 (id=550): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000"], 0x38}}, 0x4000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 224.404654ms ago: executing program 8 (id=551): ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x70c5, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x8000001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 154.715006ms ago: executing program 7 (id=552): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x552}]}, 0x34}}, 0x0) 154.466066ms ago: executing program 8 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 56.937339ms ago: executing program 7 (id=554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffbff, 0x1}, 0xfcc8, 0x1224, 0x99c2, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x410002) 0s ago: executing program 7 (id=555): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0xa, 0x3, 0x87) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0xfffffffe}, 0x50) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): nied { write } for pid=3248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.458624][ T28] audit: type=1400 audit(1784205800.565:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.582777][ T28] audit: type=1400 audit(1784205801.685:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.613791][ T28] audit: type=1400 audit(1784205801.715:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 29.565647][ T28] audit: type=1400 audit(1784205804.665:126): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.588907][ T28] audit: type=1400 audit(1784205804.695:127): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.591684][ T3281] cgroup: Unknown subsys name 'net' [ 29.718711][ T3281] cgroup: Unknown subsys name 'cpuset' [ 29.725169][ T3281] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.891111][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.941997][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.617647][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 30.617666][ T28] audit: type=1400 audit(1784205805.715:140): avc: denied { execmem } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.800722][ T28] audit: type=1400 audit(1784205805.905:141): avc: denied { read } for pid=3294 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.837798][ T28] audit: type=1400 audit(1784205805.905:142): avc: denied { open } for pid=3294 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.890202][ T28] audit: type=1400 audit(1784205805.925:143): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 30.930677][ T28] audit: type=1400 audit(1784205805.935:144): avc: denied { module_request } for pid=3294 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 30.952930][ T28] audit: type=1400 audit(1784205805.965:145): avc: denied { sys_module } for pid=3294 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.346540][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.353851][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.361180][ T3294] bridge_slave_0: entered allmulticast mode [ 31.368126][ T3294] bridge_slave_0: entered promiscuous mode [ 31.396096][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.403284][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.410600][ T3294] bridge_slave_1: entered allmulticast mode [ 31.417074][ T3294] bridge_slave_1: entered promiscuous mode [ 31.469069][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.493921][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.510692][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.517979][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.525223][ T3302] bridge_slave_0: entered allmulticast mode [ 31.531830][ T3302] bridge_slave_0: entered promiscuous mode [ 31.553917][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.561153][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.568359][ T3302] bridge_slave_1: entered allmulticast mode [ 31.574961][ T3302] bridge_slave_1: entered promiscuous mode [ 31.589208][ T3294] team0: Port device team_slave_0 added [ 31.616832][ T3294] team0: Port device team_slave_1 added [ 31.622600][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.629836][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.637090][ T3295] bridge_slave_0: entered allmulticast mode [ 31.643817][ T3295] bridge_slave_0: entered promiscuous mode [ 31.665356][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.672585][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.679796][ T3295] bridge_slave_1: entered allmulticast mode [ 31.686226][ T3295] bridge_slave_1: entered promiscuous mode [ 31.693853][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.704230][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.742098][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.749136][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.775137][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.800361][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.807530][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.814759][ T3300] bridge_slave_0: entered allmulticast mode [ 31.821335][ T3300] bridge_slave_0: entered promiscuous mode [ 31.828286][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.835257][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.861339][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.873446][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.883834][ T3302] team0: Port device team_slave_0 added [ 31.894280][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.901544][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.908894][ T3300] bridge_slave_1: entered allmulticast mode [ 31.915469][ T3300] bridge_slave_1: entered promiscuous mode [ 31.925706][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.935649][ T3302] team0: Port device team_slave_1 added [ 31.941371][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.948475][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.955717][ T3301] bridge_slave_0: entered allmulticast mode [ 31.962194][ T3301] bridge_slave_0: entered promiscuous mode [ 31.988812][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.996032][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.003343][ T3301] bridge_slave_1: entered allmulticast mode [ 32.009884][ T3301] bridge_slave_1: entered promiscuous mode [ 32.023334][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.053581][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.063675][ T3295] team0: Port device team_slave_0 added [ 32.069548][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.076552][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.102612][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.119401][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.134542][ T3295] team0: Port device team_slave_1 added [ 32.146010][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.153068][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.179071][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.192570][ T3294] hsr_slave_0: entered promiscuous mode [ 32.198897][ T3294] hsr_slave_1: entered promiscuous mode [ 32.205874][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.227098][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.234165][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.260188][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.271509][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.278553][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.304591][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.325878][ T3300] team0: Port device team_slave_0 added [ 32.333370][ T3300] team0: Port device team_slave_1 added [ 32.348828][ T3301] team0: Port device team_slave_0 added [ 32.371952][ T3301] team0: Port device team_slave_1 added [ 32.399114][ T3302] hsr_slave_0: entered promiscuous mode [ 32.405318][ T3302] hsr_slave_1: entered promiscuous mode [ 32.411263][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 32.416994][ T3302] Cannot create hsr debugfs directory [ 32.423024][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.430047][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.456061][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.482703][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.489728][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.515756][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.526828][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.533900][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.559883][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.573828][ T3295] hsr_slave_0: entered promiscuous mode [ 32.580049][ T3295] hsr_slave_1: entered promiscuous mode [ 32.585896][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 32.591676][ T3295] Cannot create hsr debugfs directory [ 32.603611][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.610652][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.636699][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.709056][ T3300] hsr_slave_0: entered promiscuous mode [ 32.715190][ T3300] hsr_slave_1: entered promiscuous mode [ 32.721049][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.726821][ T3300] Cannot create hsr debugfs directory [ 32.768642][ T3301] hsr_slave_0: entered promiscuous mode [ 32.774789][ T3301] hsr_slave_1: entered promiscuous mode [ 32.780811][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.786561][ T3301] Cannot create hsr debugfs directory [ 32.936882][ T3294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.945902][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.953957][ T3294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.962834][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.976812][ T3294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.985905][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.000165][ T3294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.009321][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.030769][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.039928][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.047956][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.056856][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.065532][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.074533][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.086253][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.095297][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.125804][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.135645][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.143879][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.152919][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.160856][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.169513][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.177340][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.186148][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.229308][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.236608][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.245555][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.258608][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.267507][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.275763][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.284556][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.293126][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.301882][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.328676][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.337442][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.345959][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.354811][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.373660][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.382352][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.391208][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.400160][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.421350][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.430898][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.438071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.448589][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.461887][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.469085][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.489681][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.519439][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.526558][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.535694][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.542845][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.557955][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.597250][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.614986][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.630589][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.637728][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.649647][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.667272][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.674537][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.692662][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.702405][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.709577][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.718593][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.725798][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.766900][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.784427][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.791604][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.801475][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.808606][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.982969][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.997186][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.099418][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.137499][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.188496][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.222093][ T3294] veth0_vlan: entered promiscuous mode [ 34.230617][ T3295] veth0_vlan: entered promiscuous mode [ 34.244403][ T3294] veth1_vlan: entered promiscuous mode [ 34.253846][ T3295] veth1_vlan: entered promiscuous mode [ 34.287841][ T3294] veth0_macvtap: entered promiscuous mode [ 34.304252][ T3294] veth1_macvtap: entered promiscuous mode [ 34.321389][ T3295] veth0_macvtap: entered promiscuous mode [ 34.339496][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.369565][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.384231][ T3295] veth1_macvtap: entered promiscuous mode [ 34.394062][ T3302] veth0_vlan: entered promiscuous mode [ 34.407325][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416502][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.436104][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.445234][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.456244][ T3302] veth1_vlan: entered promiscuous mode [ 34.475039][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.484674][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.497439][ T3301] veth0_vlan: entered promiscuous mode [ 34.507306][ T3300] veth0_vlan: entered promiscuous mode [ 34.519859][ T28] audit: type=1400 audit(1784205809.625:146): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.AfZJYl/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.525800][ T3301] veth1_vlan: entered promiscuous mode [ 34.552417][ T28] audit: type=1400 audit(1784205809.625:147): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.555832][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.577651][ T28] audit: type=1400 audit(1784205809.655:148): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.AfZJYl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.595332][ T3302] veth0_macvtap: entered promiscuous mode [ 34.614477][ T28] audit: type=1400 audit(1784205809.655:149): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.642242][ T403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.651133][ T403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.661651][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.667172][ T3300] veth1_vlan: entered promiscuous mode [ 34.684065][ T3302] veth1_macvtap: entered promiscuous mode [ 34.690552][ T403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.741889][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.755687][ T3300] veth0_macvtap: entered promiscuous mode [ 34.764477][ T3300] veth1_macvtap: entered promiscuous mode [ 34.777318][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.785758][ T3301] veth0_macvtap: entered promiscuous mode [ 34.814447][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.829298][ T3301] veth1_macvtap: entered promiscuous mode [ 34.841088][ T311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.850600][ T403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.874235][ T403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.883178][ T403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.897489][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.922960][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.935292][ T311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.954740][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.971710][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.989098][ T311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.998308][ T311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.032955][ T311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048035][ T311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.076404][ T311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.087005][ T311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.781423][ T3537] syz.4.11 (3537) used greatest stack depth: 10440 bytes left [ 35.941499][ T3300] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 35.948395][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 35.948414][ T28] audit: type=1400 audit(1784205811.045:179): avc: denied { write } for pid=3542 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.025979][ T28] audit: type=1400 audit(1784205811.125:180): avc: denied { create } for pid=3544 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.046491][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 36.046518][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 36.046537][ T3300] Call Trace: [ 36.046543][ T3300] [ 36.046551][ T3300] __dump_stack+0x1d/0x30 [ 36.046683][ T3300] dump_stack_lvl+0x95/0xd0 [ 36.046813][ T3300] dump_stack+0x15/0x1b [ 36.046837][ T3300] dump_header+0x80/0x240 [ 36.046864][ T3300] oom_kill_process+0x295/0x350 [ 36.046965][ T3300] out_of_memory+0x981/0xbc0 [ 36.047007][ T3300] try_charge_memcg+0x621/0xa00 [ 36.047061][ T3300] charge_memcg+0x6d/0x120 [ 36.047126][ T3300] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 36.047296][ T3300] swap_cache_alloc_folio+0x47b/0x5e0 [ 36.047342][ T3300] swap_cluster_readahead+0x3d2/0x460 [ 36.047389][ T3300] swapin_readahead+0xd8/0x8a0 [ 36.047470][ T3300] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 36.047503][ T3300] ? hrtimer_start_range_ns+0x108/0x120 [ 36.047594][ T3300] ? __rcu_read_unlock+0x4e/0x70 [ 36.047680][ T3300] ? swap_cache_get_folio+0x1f7/0x200 [ 36.047718][ T3300] do_swap_page+0x2a2/0x1ec0 [ 36.047834][ T3300] ? __schedule+0x799/0xd10 [ 36.047893][ T3300] ? __rcu_read_lock+0x36/0x50 [ 36.047921][ T3300] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 36.047966][ T3300] handle_mm_fault+0xb3c/0x2da0 [ 36.048016][ T3300] do_user_addr_fault+0x634/0x1060 [ 36.048056][ T3300] ? trace_page_fault_user+0x1f/0xa0 [ 36.048122][ T3300] exc_page_fault+0x62/0xa0 [ 36.048161][ T3300] asm_exc_page_fault+0x26/0x30 [ 36.048183][ T3300] RIP: 0033:0x7fd801f08fd7 [ 36.048200][ T3300] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 36.048261][ T3300] RSP: 002b:00007ffc0850a600 EFLAGS: 00010202 [ 36.048279][ T3300] RAX: 0000000000000000 RBX: 0000555564f26500 RCX: 00007fd801f08fd7 [ 36.048293][ T3300] RDX: 00007ffc0850a640 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.048306][ T3300] RBP: 00007ffc0850a6ac R08: 0000000000000000 R09: 0000000000000000 [ 36.048318][ T3300] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 36.048331][ T3300] R13: 00000000000927c0 R14: 0000000000008ad7 R15: 00007ffc0850a700 [ 36.048355][ T3300] [ 36.147065][ T28] audit: type=1400 audit(1784205811.245:181): avc: denied { setopt } for pid=3544 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.189616][ T3300] memory: usage 307200kB, limit 307200kB, failcnt 473 [ 36.300032][ T3300] memory+swap: usage 276540kB, limit 9007199254740988kB, failcnt 0 [ 36.308023][ T3300] kmem: usage 262408kB, limit 9007199254740988kB, failcnt 0 [ 36.316897][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 36.325756][ T28] audit: type=1400 audit(1784205811.245:182): avc: denied { bind } for pid=3544 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.338276][ T3300] Memory cgroup stats for [ 36.355708][ T311] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.355755][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 36.358599][ T3300] /syz2 [ 36.385923][ T311] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.390110][ T3300] : [ 36.415928][ T28] audit: type=1400 audit(1784205811.245:183): avc: denied { name_bind } for pid=3544 comm="syz.0.14" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.419140][ T3300] cache 10301440 [ 36.440422][ T311] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.471534][ T3549] Zero length message leads to an empty skb [ 36.480466][ T311] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.489328][ T28] audit: type=1400 audit(1784205811.245:184): avc: denied { node_bind } for pid=3544 comm="syz.0.14" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 36.565721][ T28] audit: type=1400 audit(1784205811.295:185): avc: denied { write } for pid=3544 comm="syz.0.14" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.568451][ T3300] rss 163840 [ 36.654234][ T28] audit: type=1400 audit(1784205811.295:186): avc: denied { connect } for pid=3544 comm="syz.0.14" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.728570][ T28] audit: type=1400 audit(1784205811.295:187): avc: denied { name_connect } for pid=3544 comm="syz.0.14" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.749275][ T3300] shmem 0 [ 36.779349][ T3300] mapped_file 9793536 [ 36.787986][ T28] audit: type=1400 audit(1784205811.695:188): avc: denied { create } for pid=3552 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.812856][ T3300] dirty 12288 [ 36.829703][ T3536] syz.2.9 (3536) used greatest stack depth: 9920 bytes left [ 36.872259][ T3300] writeback 0 [ 36.877038][ T3300] workingset_refault_anon 10 [ 36.885260][ T3300] workingset_refault_file 737 [ 36.902326][ T3300] swap 24576 [ 36.911997][ T3300] swapcached 65536 [ 36.925027][ T3564] loop3: detected capacity change from 0 to 512 [ 36.946609][ T3300] pgpgin 3596 [ 36.953448][ T3564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.972293][ T3300] pgpgout 1041 [ 36.981538][ T3300] pgfault 379 [ 36.987841][ T3564] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.997956][ T3300] pgmajfault 11 [ 37.001538][ T3300] inactive_anon 0 [ 37.005409][ T3300] active_anon 0 [ 37.009116][ T3300] inactive_file 0 [ 37.016518][ T3300] active_file 512000 [ 37.020581][ T3300] unevictable 9953280 [ 37.032964][ T3300] hierarchical_memory_limit 314572800 [ 37.041165][ T3564] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #11: comm syz.3.20: corrupted in-inode xattr: invalid ea_ino [ 37.054784][ T3300] hierarchical_memsw_limit 9223372036854771712 [ 37.061465][ T3564] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.061796][ T3564] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.20: couldn't read orphan inode 11 (err -117) [ 37.071073][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.071092][ C1] EXT4-fs (loop3): initial error at time 1784205812: ext4_iget_extra_inode:5180: inode 11 [ 37.071134][ C1] EXT4-fs (loop3): last error at time 1784205812: ext4_iget_extra_inode:5180: inode 11 [ 37.079528][ T3300] total_cache 10301440 [ 37.083321][ T3564] loop3: lost filesystem error report for type 5 error -117 [ 37.113235][ T3300] total_rss 163840 [ 37.124742][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.136873][ T3300] total_shmem 0 [ 37.140816][ T3300] total_mapped_file 9793536 [ 37.145363][ T3300] total_dirty 12288 [ 37.149249][ T3300] total_writeback 0 [ 37.153147][ T3300] total_workingset_refault_anon 10 [ 37.158387][ T3300] total_workingset_refault_file 737 [ 37.163610][ T3300] total_swap 24576 [ 37.167418][ T3300] total_swapcached 65536 [ 37.171879][ T3300] total_pgpgin 3596 [ 37.175743][ T3300] total_pgpgout 1041 [ 37.179713][ T3300] total_pgfault 379 [ 37.183663][ T3300] total_pgmajfault 11 [ 37.187744][ T3300] total_inactive_anon 0 [ 37.191960][ T3300] total_active_anon 0 [ 37.196015][ T3300] total_inactive_file 0 [ 37.200240][ T3300] total_active_file 512000 [ 37.204791][ T3300] total_unevictable 9953280 [ 37.209424][ T3300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9,pid=3533,uid=0 [ 37.223922][ T3300] Memory cgroup out of memory: OOM victim 3533 (syz.2.9) is already exiting. Skip killing the task [ 37.299055][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.423450][ T3579] IPVS: persistence engine module ip_vs_pe_s not found [ 37.678119][ T3595] veth1_to_bond: entered allmulticast mode [ 37.684307][ T3593] loop4: detected capacity change from 0 to 4096 [ 37.702065][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.725517][ T3595] veth1_to_bond: entered promiscuous mode [ 37.815355][ T3603] EXT4-fs (loop4): shut down requested (0) [ 37.845183][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.054346][ T3616] IPVS: persistence engine module ip_vs_pe_s not found [ 39.331894][ T3753] loop1: detected capacity change from 0 to 512 [ 39.379877][ T3753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.422475][ T3753] EXT4-fs (loop1): 1 truncate cleaned up [ 39.429466][ T3753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.726432][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.818719][ T3815] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.825984][ T3815] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.834891][ T3822] loop0: detected capacity change from 0 to 512 [ 40.862008][ T3822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.932431][ T3822] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #11: comm syz.0.77: corrupted in-inode xattr: invalid ea_ino [ 40.962500][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 40.962516][ T28] audit: type=1400 audit(1784205816.065:241): avc: denied { setopt } for pid=3826 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.022594][ T3822] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.022804][ T3822] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.77: couldn't read orphan inode 11 (err -117) [ 41.032099][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 41.032131][ C1] EXT4-fs (loop0): initial error at time 1784205816: ext4_iget_extra_inode:5180: inode 11 [ 41.032171][ C1] EXT4-fs (loop0): last error at time 1784205816: ext4_iget_extra_inode:5180: inode 11 [ 41.075364][ T3815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.125724][ T3815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.137003][ T3822] loop0: lost filesystem error report for type 5 error -117 [ 41.137969][ T3822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.404533][ T3727] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.434519][ T3727] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.447830][ T3727] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.451916][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.458305][ T3727] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.608298][ T3604] syz.2.35 (3604) used greatest stack depth: 8552 bytes left [ 41.636869][ T3851] process 'syz.2.89' launched './file0' with NULL argv: empty string added [ 41.637321][ T28] audit: type=1400 audit(1784205816.735:242): avc: denied { execute } for pid=3850 comm="syz.2.89" name="file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.646845][ T3851] Invalid argument reading file caps for ./file0 [ 41.686568][ T28] audit: type=1400 audit(1784205816.755:243): avc: denied { execute_no_trans } for pid=3850 comm="syz.2.89" path="/15/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.746547][ T28] audit: type=1400 audit(1784205816.835:244): avc: denied { sqpoll } for pid=3852 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.836743][ T3869] loop0: detected capacity change from 0 to 512 [ 41.919406][ T28] audit: type=1400 audit(1784205817.015:245): avc: denied { create } for pid=3897 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.949268][ T3869] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 41.983802][ T3869] System zones: 0-2, 18-18, 34-35 [ 41.993998][ T28] audit: type=1400 audit(1784205817.045:246): avc: denied { read } for pid=3897 comm="syz.3.93" path="socket:[6290]" dev="sockfs" ino=6290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.034125][ T3869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.049817][ T28] audit: type=1400 audit(1784205817.045:247): avc: denied { shutdown } for pid=3897 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.087379][ T3869] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.119362][ T28] audit: type=1400 audit(1784205817.225:248): avc: denied { write } for pid=3856 comm="syz.0.92" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.182601][ T28] audit: type=1400 audit(1784205817.225:249): avc: denied { read append } for pid=3856 comm="syz.0.92" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.233041][ T28] audit: type=1400 audit(1784205817.225:250): avc: denied { open } for pid=3856 comm="syz.0.92" path="/10/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.585044][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.753983][ T3940] loop0: detected capacity change from 0 to 256 [ 42.785253][ T3940] FAT-fs (loop0): Directory bread(block 1285) failed [ 42.801549][ T3940] FAT-fs (loop0): Directory bread(block 1286) failed [ 42.816885][ T3940] FAT-fs (loop0): Directory bread(block 1287) failed [ 42.823928][ T3940] FAT-fs (loop0): Directory bread(block 1288) failed [ 42.848316][ T3940] FAT-fs (loop0): Directory bread(block 1285) failed [ 42.866517][ T3940] FAT-fs (loop0): Directory bread(block 1286) failed [ 42.885242][ T3940] FAT-fs (loop0): Directory bread(block 1287) failed [ 42.903890][ T3952] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 42.924968][ T3940] FAT-fs (loop0): Directory bread(block 1288) failed [ 42.946058][ T3940] FAT-fs (loop0): Directory bread(block 1285) failed [ 43.039332][ T3961] syzkaller1: entered promiscuous mode [ 43.044994][ T3961] syzkaller1: entered allmulticast mode [ 43.871175][ T3294] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 43.927933][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 43.927967][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 43.927982][ T3294] Call Trace: [ 43.927989][ T3294] [ 43.927997][ T3294] __dump_stack+0x1d/0x30 [ 43.928033][ T3294] dump_stack_lvl+0x95/0xd0 [ 43.928054][ T3294] dump_stack+0x15/0x1b [ 43.928073][ T3294] dump_header+0x80/0x240 [ 43.928094][ T3294] oom_kill_process+0x295/0x350 [ 43.928157][ T3294] out_of_memory+0x981/0xbc0 [ 43.928191][ T3294] try_charge_memcg+0x621/0xa00 [ 43.928248][ T3294] charge_memcg+0x6d/0x120 [ 43.928287][ T3294] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 43.928345][ T3294] swap_cache_alloc_folio+0x47b/0x5e0 [ 43.928397][ T3294] swap_cluster_readahead+0x2b1/0x460 [ 43.928437][ T3294] swapin_readahead+0xd8/0x8a0 [ 43.928521][ T3294] ? tick_program_event+0x79/0xc0 [ 43.928556][ T3294] ? _raw_spin_unlock+0x9/0x30 [ 43.928580][ T3294] ? __rcu_read_unlock+0x4e/0x70 [ 43.928610][ T3294] ? swap_cache_get_folio+0x1f7/0x200 [ 43.928678][ T3294] do_swap_page+0x2a2/0x1ec0 [ 43.928715][ T3294] ? __schedule+0x799/0xd10 [ 43.928746][ T3294] ? __rcu_read_lock+0x36/0x50 [ 43.928804][ T3294] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 43.928848][ T3294] handle_mm_fault+0xb3c/0x2da0 [ 43.928968][ T3294] do_user_addr_fault+0x634/0x1060 [ 43.929001][ T3294] ? trace_page_fault_user+0x1f/0xa0 [ 43.929043][ T3294] exc_page_fault+0x62/0xa0 [ 43.929074][ T3294] asm_exc_page_fault+0x26/0x30 [ 43.929117][ T3294] RIP: 0033:0x7f5f925e8fd7 [ 43.929135][ T3294] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 43.929159][ T3294] RSP: 002b:00007ffe25f07e60 EFLAGS: 00010202 [ 43.929176][ T3294] RAX: 0000000000000000 RBX: 0000555585a10500 RCX: 00007f5f925e8fd7 [ 43.929189][ T3294] RDX: 00007ffe25f07ea0 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.929202][ T3294] RBP: 00007ffe25f07f0c R08: 0000000000000000 R09: 0000000000000000 [ 43.929233][ T3294] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 43.929246][ T3294] R13: 00000000000927c0 R14: 000000000000a96a R15: 00007ffe25f07f60 [ 43.929267][ T3294] [ 43.931888][ T3294] memory: usage 307200kB, limit 307200kB, failcnt 557 [ 44.176051][ T3294] memory+swap: usage 220904kB, limit 9007199254740988kB, failcnt 0 [ 44.197165][ T3294] kmem: usage 169472kB, limit 9007199254740988kB, failcnt 0 [ 44.228008][ T3294] Memory cgroup stats for /syz1: [ 44.228379][ T3294] cache 9830400 [ 44.267096][ T3294] rss 172032 [ 44.281306][ T3294] shmem 0 [ 44.291778][ T3294] mapped_file 9830400 [ 44.309535][ T3294] dirty 8192 [ 44.323670][ T3294] writeback 0 [ 44.337733][ T3294] workingset_refault_anon 3 [ 44.357772][ T3294] workingset_refault_file 1005 [ 44.385758][ T3294] swap 24576 [ 44.396334][ T3294] swapcached 36864 [ 44.413168][ T3294] pgpgin 4852 [ 44.426657][ T3294] pgpgout 2410 [ 44.437726][ T3294] pgfault 3412 [ 44.454576][ T3294] pgmajfault 16 [ 44.458397][ T3294] inactive_anon 0 [ 44.462150][ T3294] active_anon 0 [ 44.465722][ T3294] inactive_file 0 [ 44.546946][ T3294] active_file 0 [ 44.552707][ T3294] unevictable 9998336 [ 44.561677][ T3294] hierarchical_memory_limit 314572800 [ 44.573751][ T3294] hierarchical_memsw_limit 9223372036854771712 [ 44.592010][ T3294] total_cache 9830400 [ 44.603306][ T3294] total_rss 172032 [ 44.614723][ T3294] total_shmem 0 [ 44.646536][ T3294] total_mapped_file 9830400 [ 44.657500][ T3294] total_dirty 8192 [ 44.666189][ T3294] total_writeback 0 [ 44.681590][ T3294] total_workingset_refault_anon 3 [ 44.701881][ T3294] total_workingset_refault_file 1005 [ 44.718184][ T3294] total_swap 24576 [ 44.731100][ T3294] total_swapcached 36864 [ 44.747295][ T3294] total_pgpgin 4852 [ 44.762420][ T3294] total_pgpgout 2410 [ 44.774761][ T3294] total_pgfault 3412 [ 44.789111][ T3294] total_pgmajfault 16 [ 44.804402][ T3294] total_inactive_anon 0 [ 44.819305][ T3294] total_active_anon 0 [ 44.831714][ T3294] total_inactive_file 0 [ 44.845975][ T3294] total_active_file 0 [ 44.861037][ T3294] total_unevictable 9998336 [ 44.875098][ T3294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.115,pid=3970,uid=0 [ 44.943666][ T3294] Memory cgroup out of memory: OOM victim 3970 (syz.1.115) is already exiting. Skip killing the task [ 45.512074][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.537780][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.557871][ T4006] bridge_slave_0: entered allmulticast mode [ 45.579761][ T4006] bridge_slave_0: entered promiscuous mode [ 45.608860][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.620347][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.639283][ T4006] bridge_slave_1: entered allmulticast mode [ 45.657213][ T4006] bridge_slave_1: entered promiscuous mode [ 45.711766][ T4006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.723597][ T4006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.762630][ T4006] team0: Port device team_slave_0 added [ 45.788854][ T4006] team0: Port device team_slave_1 added [ 45.812069][ T4006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.830030][ T4006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.895443][ T4006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.933636][ T4006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.960234][ T4006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.004513][ T4006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.120970][ T4006] hsr_slave_0: entered promiscuous mode [ 46.127511][ T4006] hsr_slave_1: entered promiscuous mode [ 46.133485][ T4006] debugfs: 'hsr0' already exists in 'hsr' [ 46.139754][ T4006] Cannot create hsr debugfs directory [ 46.288436][ T4006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.297325][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.305762][ T4006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.314920][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.323273][ T4006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.333106][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.341105][ T4006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.351056][ T4006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.397298][ T4006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.410115][ T4006] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.424594][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.431803][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.443442][ T3877] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.450562][ T3877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.623268][ T4006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.773030][ T4006] veth0_vlan: entered promiscuous mode [ 46.781941][ T4006] veth1_vlan: entered promiscuous mode [ 46.801310][ T4006] veth0_macvtap: entered promiscuous mode [ 46.809443][ T4006] veth1_macvtap: entered promiscuous mode [ 46.822989][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.837380][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.849773][ T3877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.859041][ T3877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.868711][ T3877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.880585][ T3877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.919964][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 46.919982][ T28] audit: type=1400 audit(1784205822.025:281): avc: denied { mounton } for pid=4006 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.103510][ T4081] loop3: detected capacity change from 0 to 512 [ 47.136688][ T28] audit: type=1400 audit(1784205822.235:282): avc: denied { mount } for pid=4084 comm="syz.5.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.187028][ T28] audit: type=1400 audit(1784205822.245:283): avc: denied { search } for pid=4084 comm="syz.5.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.212521][ T4081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.262795][ T4081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.265250][ T4090] rdma_op ffff88812ef29d80 conn xmit_rdma 0000000000000000 [ 47.279779][ T28] audit: type=1400 audit(1784205822.245:284): avc: denied { search } for pid=4084 comm="syz.5.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.325152][ T4081] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.361369][ T28] audit: type=1400 audit(1784205822.245:285): avc: denied { read } for pid=4084 comm="syz.5.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.402973][ T4081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.140: bg 0: block 217: padding at end of block bitmap is not set [ 47.459715][ T4083] xt_hashlimit: size too large, truncated to 1048576 [ 47.463270][ T4081] EXT4-fs (loop3): Remounting filesystem read-only [ 47.474960][ T4099] random: crng reseeded on system resumption [ 47.482513][ T28] audit: type=1400 audit(1784205822.265:286): avc: denied { read open } for pid=4084 comm="syz.5.141" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.509818][ T28] audit: type=1400 audit(1784205822.365:287): avc: denied { bind } for pid=4089 comm="syz.5.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.545306][ T28] audit: type=1400 audit(1784205822.485:288): avc: denied { write } for pid=4080 comm="syz.3.140" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.562872][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.569735][ T28] audit: type=1400 audit(1784205822.535:289): avc: denied { setopt } for pid=4079 comm="syz.0.137" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.604024][ T416] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 47.638883][ T4105] loop3: detected capacity change from 0 to 128 [ 47.690300][ T4107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'. [ 47.714954][ T4109] loop5: detected capacity change from 0 to 1024 [ 47.732341][ T4105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.766318][ T4105] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.860826][ T4109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.867311][ T4113] loop2: detected capacity change from 0 to 164 [ 47.917002][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.965716][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.994688][ T4117] loop1: detected capacity change from 0 to 512 [ 48.022309][ T4113] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 48.036009][ T4117] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.050617][ T4121] loop0: detected capacity change from 0 to 512 [ 48.078527][ T4117] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 48.096594][ T4121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.117251][ T4117] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 48.119852][ T4121] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.126273][ T4117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.172204][ T3294] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 48.189811][ T4121] capability: warning: `syz.0.158' uses 32-bit capabilities (legacy support in use) [ 48.233068][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.244038][ T3294] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -EUCLEAN reading directory block [ 48.419471][ T4127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.517867][ T4151] syz.5.169 uses obsolete (PF_INET,SOCK_PACKET) [ 48.751116][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.776917][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.860575][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 48.997877][ T4153] syz.0.167 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 49.031409][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.031443][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 49.031512][ T4153] Call Trace: [ 49.031519][ T4153] [ 49.031529][ T4153] __dump_stack+0x1d/0x30 [ 49.031555][ T4153] dump_stack_lvl+0x95/0xd0 [ 49.031581][ T4153] dump_stack+0x15/0x1b [ 49.031606][ T4153] dump_header+0x80/0x240 [ 49.031668][ T4153] oom_kill_process+0x295/0x350 [ 49.031708][ T4153] out_of_memory+0x981/0xbc0 [ 49.031749][ T4153] try_charge_memcg+0x621/0xa00 [ 49.031804][ T4153] ? __rcu_read_unlock+0x4e/0x70 [ 49.031842][ T4153] __memcg_kmem_charge_page+0x199/0x3a0 [ 49.031892][ T4153] __alloc_frozen_pages_noprof+0x18a/0x350 [ 49.031954][ T4153] alloc_pages_mpol+0xa9/0x1d0 [ 49.031986][ T4153] alloc_pages_noprof+0x8f/0x140 [ 49.032017][ T4153] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 49.032091][ T4153] __kvmalloc_node_noprof+0x3a0/0x590 [ 49.032128][ T4153] ? futex_hash_allocate+0x192/0x920 [ 49.032157][ T4153] ? futex_hash_allocate+0x192/0x920 [ 49.032246][ T4153] ? futex_hash_allocate+0x192/0x920 [ 49.032269][ T4153] futex_hash_allocate+0x192/0x920 [ 49.032294][ T4153] ? cap_task_prctl+0x13f/0x6b0 [ 49.032334][ T4153] futex_hash_prctl+0xd8/0xf0 [ 49.032423][ T4153] __se_sys_prctl+0x4f4/0x13b0 [ 49.032457][ T4153] __x64_sys_prctl+0x67/0x80 [ 49.032516][ T4153] x64_sys_call+0x2533/0x3020 [ 49.032548][ T4153] do_syscall_64+0x136/0x3c0 [ 49.032578][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.032657][ T4153] RIP: 0033:0x7f494114de59 [ 49.032676][ T4153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.032701][ T4153] RSP: 002b:00007f4937786028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 49.032748][ T4153] RAX: ffffffffffffffda RBX: 00007f49413d6090 RCX: 00007f494114de59 [ 49.032768][ T4153] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 49.032817][ T4153] RBP: 00007f49411e3e6f R08: 0000000000000000 R09: 0000000000000000 [ 49.032830][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.032842][ T4153] R13: 00007f49413d6128 R14: 00007f49413d6090 R15: 00007ffce754ce88 [ 49.032956][ T4153] [ 49.033108][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.033147][ T4153] memory: usage 307200kB, limit 307200kB, failcnt 403 [ 49.091880][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.096830][ T4153] memory+swap: usage 307216kB, limit 9007199254740988kB, failcnt 0 [ 49.128333][ T4152] bridge_slave_0: entered allmulticast mode [ 49.137487][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 49.158219][ T4152] bridge_slave_0: entered promiscuous mode [ 49.160942][ T4153] kmem: usage 297364kB, limit 9007199254740988kB, failcnt 0 [ 49.181564][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.218267][ T4153] Memory cgroup stats for /syz0 [ 49.289960][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.290486][ T4152] bridge_slave_1: entered allmulticast mode [ 49.318141][ T4153] : [ 49.318526][ T4153] cache 9887744 [ 49.350042][ T4153] rss 188416 [ 49.353306][ T4153] shmem 0 [ 49.356366][ T4153] mapped_file 9883648 [ 49.360452][ T4153] dirty 4096 [ 49.364430][ T4152] bridge_slave_1: entered promiscuous mode [ 49.377137][ T4153] writeback 0 [ 49.380921][ T4153] workingset_refault_anon 7 [ 49.385535][ T4153] workingset_refault_file 294 [ 49.390389][ T4153] swap 16384 [ 49.393627][ T4153] swapcached 45056 [ 49.397590][ T4153] pgpgin 15131 [ 49.401268][ T4153] pgpgout 12671 [ 49.425148][ T4183] ======================================================= [ 49.425148][ T4183] WARNING: The mand mount option has been deprecated and [ 49.425148][ T4183] and is ignored by this kernel. Remove the mand [ 49.425148][ T4183] option from the mount to silence this warning. [ 49.425148][ T4183] ======================================================= [ 49.473261][ T4152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.490123][ T4152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.507927][ T4153] pgfault 18243 [ 49.511520][ T4153] pgmajfault 13 [ 49.535106][ T4153] inactive_anon 0 [ 49.550658][ T4152] team0: Port device team_slave_0 added [ 49.563224][ T4153] active_anon 0 [ 49.575296][ T4152] team0: Port device team_slave_1 added [ 49.584122][ T4153] inactive_file 0 [ 49.594162][ T4153] active_file 0 [ 49.613308][ T4152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.626924][ T4153] unevictable 10072064 [ 49.633146][ T4152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.661265][ T4153] hierarchical_memory_limit 314572800 [ 49.666712][ T4153] hierarchical_memsw_limit 9223372036854771712 [ 49.673242][ T4152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.684002][ T4153] total_cache 9887744 [ 49.688204][ T4153] total_rss 188416 [ 49.692859][ T4152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.699978][ T4153] total_shmem 0 [ 49.703522][ T4152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.746344][ T4153] total_mapped_file 9883648 [ 49.752640][ T4153] total_dirty 4096 [ 49.757293][ T4153] total_writeback 0 [ 49.761359][ T4152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.772029][ T4153] total_workingset_refault_anon 7 [ 49.778644][ T4153] total_workingset_refault_file 294 [ 49.783973][ T4153] total_swap 16384 [ 49.788239][ T4153] total_swapcached 45056 [ 49.792585][ T4153] total_pgpgin 15131 [ 49.796523][ T4153] total_pgpgout 12671 [ 49.800841][ T4153] total_pgfault 18243 [ 49.804886][ T4153] total_pgmajfault 13 [ 49.809203][ T4153] total_inactive_anon 0 [ 49.813392][ T4153] total_active_anon 0 [ 49.817404][ T4153] total_inactive_file 0 [ 49.822109][ T4153] total_active_file 0 [ 49.826160][ T4153] total_unevictable 10072064 [ 49.831161][ T4153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.167,pid=4145,uid=0 [ 49.846037][ T4153] Memory cgroup out of memory: Killed process 4153 (syz.0.167) total-vm:231396kB, anon-rss:1420kB, file-rss:64508kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 49.919707][ T4152] hsr_slave_0: entered promiscuous mode [ 49.926010][ T4152] hsr_slave_1: entered promiscuous mode [ 49.932173][ T4152] debugfs: 'hsr0' already exists in 'hsr' [ 49.938159][ T4152] Cannot create hsr debugfs directory [ 50.045699][ T4152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.055509][ T4152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.063890][ T4152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.076725][ T4152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.084887][ T4152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.101741][ T4152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.109733][ T4152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 50.119541][ T4152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.182448][ T4152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.196956][ T4152] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.209013][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.216131][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.216952][ T4202] Set syz1 is full, maxelem 6117 reached [ 50.233220][ T3877] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.240335][ T3877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.330941][ T4217] Illegal XDP return value 4294967274 on prog (id 30) dev syz_tun, expect packet loss! [ 50.405036][ T4152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.576104][ T4152] veth0_vlan: entered promiscuous mode [ 50.584671][ T4152] veth1_vlan: entered promiscuous mode [ 50.609182][ T4152] veth0_macvtap: entered promiscuous mode [ 50.622175][ T4152] veth1_macvtap: entered promiscuous mode [ 50.633530][ T4152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.642504][ T4152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.655473][ T3877] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.674924][ T3877] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.695290][ T3877] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.722658][ T3877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.531436][ T4249] loop0: detected capacity change from 0 to 8192 [ 52.077619][ T4283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'. [ 52.089987][ T4283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.097353][ T4283] IPv6: NLM_F_CREATE should be set when creating new route [ 52.109577][ T4283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'. [ 52.120142][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 52.120160][ T28] audit: type=1400 audit(1784205827.225:330): avc: denied { create } for pid=4286 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.126555][ T4283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.153875][ T28] audit: type=1400 audit(1784205827.225:331): avc: denied { listen } for pid=4286 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.185702][ T28] audit: type=1400 audit(1784205827.255:332): avc: denied { accept } for pid=4286 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.321255][ T28] audit: type=1400 audit(1784205827.425:333): avc: denied { name_connect } for pid=4294 comm="syz.6.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 52.343206][ T4293] loop5: detected capacity change from 0 to 8192 [ 52.358181][ T28] audit: type=1400 audit(1784205827.465:334): avc: denied { accept } for pid=4297 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.390008][ T28] audit: type=1400 audit(1784205827.495:335): avc: denied { mounton } for pid=4292 comm="syz.5.213" path="/13/file0/bus" dev="loop5" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 52.444706][ T4301] syzkaller1: entered promiscuous mode [ 52.450496][ T4301] syzkaller1: entered allmulticast mode [ 52.489277][ T28] audit: type=1400 audit(1784205827.595:336): avc: denied { watch_reads } for pid=4305 comm="syz.6.218" path="/3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.829851][ T28] audit: type=1400 audit(1784205827.935:337): avc: denied { unmount } for pid=4006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.939408][ T4325] netlink: 7 bytes leftover after parsing attributes in process `syz.5.223'. [ 52.957414][ T416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.038165][ T416] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.082354][ T28] audit: type=1400 audit(1784205828.185:338): avc: denied { mounton } for pid=4311 comm="syz.3.220" path="/proc/126/task" dev="proc" ino=7720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.153930][ T4318] loop3: detected capacity change from 0 to 32768 [ 53.228460][ T416] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.240609][ T4318] loop3: p1 [ 53.283457][ T28] audit: type=1400 audit(1784205828.385:339): avc: denied { read } for pid=4334 comm="syz.2.239" name="file1" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.501903][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.626919][ T4355] netlink: 22 bytes leftover after parsing attributes in process `syz.3.235'. [ 53.671373][ T416] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.683835][ T4356] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 53.906139][ T4362] loop3: detected capacity change from 0 to 512 [ 53.930813][ T4344] syz.5.229 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 53.956291][ T416] bridge_slave_1: left allmulticast mode [ 53.972323][ T416] bridge_slave_1: left promiscuous mode [ 53.989478][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.001533][ T4344] CPU: 0 UID: 0 PID: 4344 Comm: syz.5.229 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.001644][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 54.001660][ T4344] Call Trace: [ 54.001669][ T4344] [ 54.001680][ T4344] __dump_stack+0x1d/0x30 [ 54.001713][ T4344] dump_stack_lvl+0x95/0xd0 [ 54.001743][ T4344] dump_stack+0x15/0x1b [ 54.001822][ T4344] dump_header+0x80/0x240 [ 54.001846][ T4344] oom_kill_process+0x295/0x350 [ 54.001883][ T4344] out_of_memory+0x981/0xbc0 [ 54.001982][ T4344] try_charge_memcg+0x621/0xa00 [ 54.002025][ T4344] ? __rcu_read_unlock+0x4e/0x70 [ 54.002106][ T4344] __memcg_kmem_charge_page+0x199/0x3a0 [ 54.002213][ T4344] __alloc_frozen_pages_noprof+0x18a/0x350 [ 54.002245][ T4344] alloc_pages_mpol+0xa9/0x1d0 [ 54.002313][ T4344] alloc_pages_noprof+0x8f/0x140 [ 54.002355][ T4344] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 54.002407][ T4344] __kvmalloc_node_noprof+0x3a0/0x590 [ 54.002518][ T4344] ? futex_hash_allocate+0x192/0x920 [ 54.002547][ T4344] ? futex_hash_allocate+0x192/0x920 [ 54.002587][ T4344] ? futex_hash_allocate+0x192/0x920 [ 54.002610][ T4344] futex_hash_allocate+0x192/0x920 [ 54.002676][ T4344] ? cap_task_prctl+0x13f/0x6b0 [ 54.002725][ T4344] futex_hash_prctl+0xd8/0xf0 [ 54.002754][ T4344] __se_sys_prctl+0x4f4/0x13b0 [ 54.002845][ T4344] __x64_sys_prctl+0x67/0x80 [ 54.002880][ T4344] x64_sys_call+0x2533/0x3020 [ 54.002980][ T4344] do_syscall_64+0x136/0x3c0 [ 54.003013][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.003043][ T4344] RIP: 0033:0x7f321331de59 [ 54.003065][ T4344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.003090][ T4344] RSP: 002b:00007f3211d56028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 54.003144][ T4344] RAX: ffffffffffffffda RBX: 00007f32135a6090 RCX: 00007f321331de59 [ 54.003163][ T4344] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 54.003181][ T4344] RBP: 00007f32133b3e6f R08: 0000000000000000 R09: 0000000000000000 [ 54.003199][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.003215][ T4344] R13: 00007f32135a6128 R14: 00007f32135a6090 R15: 00007ffd0645c868 [ 54.003301][ T4344] [ 54.003703][ T4344] memory: usage 307200kB, limit 307200kB, failcnt 159 [ 54.237302][ T4344] memory+swap: usage 255484kB, limit 9007199254740988kB, failcnt 0 [ 54.238097][ T416] bridge_slave_0: left allmulticast mode [ 54.245346][ T4344] kmem: usage 245404kB, limit 9007199254740988kB, failcnt 0 [ 54.258670][ T4344] Memory cgroup stats for /syz5: [ 54.258990][ T4344] cache 8646656 [ 54.273311][ T4344] rss 1445888 [ 54.284853][ T4344] shmem 0 [ 54.287933][ T4344] mapped_file 8646656 [ 54.290545][ T416] bridge_slave_0: left promiscuous mode [ 54.292019][ T4344] dirty 0 [ 54.292031][ T4344] writeback 0 [ 54.303927][ T4344] workingset_refault_anon 1 [ 54.308521][ T4344] workingset_refault_file 506 [ 54.313276][ T4344] swap 24576 [ 54.316809][ T4344] swapcached 28672 [ 54.320743][ T4344] pgpgin 4846 [ 54.324106][ T4344] pgpgout 2382 [ 54.327584][ T4344] pgfault 3900 [ 54.328676][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.331096][ T4344] pgmajfault 9 [ 54.347763][ T4344] inactive_anon 0 [ 54.352966][ T4344] active_anon 0 [ 54.361306][ T4344] inactive_file 0 [ 54.371257][ T4344] active_file 0 [ 54.376350][ T4344] unevictable 10092544 [ 54.402518][ T4344] hierarchical_memory_limit 314572800 [ 54.423024][ T4344] hierarchical_memsw_limit 9223372036854771712 [ 54.447161][ T4344] total_cache 8646656 [ 54.461431][ T4344] total_rss 1445888 [ 54.477172][ T4344] total_shmem 0 [ 54.492102][ T4344] total_mapped_file 8646656 [ 54.498545][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.508776][ T4344] total_dirty 0 [ 54.513792][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.520996][ T4344] total_writeback 0 [ 54.528681][ T416] bond0 (unregistering): Released all slaves [ 54.531540][ T4344] total_workingset_refault_anon 1 [ 54.552015][ T4344] total_workingset_refault_file 506 [ 54.561810][ T4344] total_swap 24576 [ 54.568612][ T4344] total_swapcached 28672 [ 54.589676][ T4344] total_pgpgin 4846 [ 54.598128][ T4344] total_pgpgout 2382 [ 54.606203][ T4344] total_pgfault 3900 [ 54.615146][ T416] hsr_slave_0: left promiscuous mode [ 54.622915][ T416] hsr_slave_1: left promiscuous mode [ 54.628572][ T4344] total_pgmajfault 9 [ 54.635875][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.644997][ T4344] total_inactive_anon 0 [ 54.654238][ T4344] total_active_anon 0 [ 54.658745][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.663289][ T4344] total_inactive_file 0 [ 54.670552][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.677850][ T4344] total_active_file 0 [ 54.677952][ T4344] total_unevictable 10092544 [ 54.677964][ T4344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.229,pid=4336,uid=0 [ 54.695416][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.725191][ T4344] Memory cgroup out of memory: Killed process 4344 (syz.5.229) total-vm:96360kB, anon-rss:2668kB, file-rss:64520kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 54.743739][ T416] veth1_macvtap: left promiscuous mode [ 54.750172][ T416] veth0_macvtap: left promiscuous mode [ 54.758698][ T416] veth1_vlan: left promiscuous mode [ 54.771153][ T416] veth0_vlan: left promiscuous mode [ 54.944701][ T416] team0 (unregistering): Port device team_slave_1 removed [ 54.965318][ T416] team0 (unregistering): Port device team_slave_0 removed [ 55.010374][ T4392] netlink: 88 bytes leftover after parsing attributes in process `syz.5.247'. [ 55.045004][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 55.245034][ T4408] VFS: Mount too revealing [ 55.356045][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.710407][ T4422] syz.6.228 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 55.766847][ T4422] CPU: 0 UID: 0 PID: 4422 Comm: syz.6.228 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.766886][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 55.766937][ T4422] Call Trace: [ 55.766947][ T4422] [ 55.766956][ T4422] __dump_stack+0x1d/0x30 [ 55.766988][ T4422] dump_stack_lvl+0x95/0xd0 [ 55.767017][ T4422] dump_stack+0x15/0x1b [ 55.767043][ T4422] dump_header+0x80/0x240 [ 55.767097][ T4422] oom_kill_process+0x295/0x350 [ 55.767141][ T4422] out_of_memory+0x981/0xbc0 [ 55.767178][ T4422] try_charge_memcg+0x621/0xa00 [ 55.767299][ T4422] ? __rcu_read_unlock+0x4e/0x70 [ 55.767333][ T4422] __memcg_kmem_charge_page+0x199/0x3a0 [ 55.767367][ T4422] __alloc_frozen_pages_noprof+0x18a/0x350 [ 55.767405][ T4422] alloc_pages_mpol+0xa9/0x1d0 [ 55.767496][ T4422] alloc_pages_noprof+0x8f/0x140 [ 55.767526][ T4422] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 55.767565][ T4422] __kvmalloc_node_noprof+0x3a0/0x590 [ 55.767610][ T4422] ? futex_hash_allocate+0x192/0x920 [ 55.767653][ T4422] ? futex_hash_allocate+0x192/0x920 [ 55.767679][ T4422] ? futex_hash_allocate+0x192/0x920 [ 55.767703][ T4422] futex_hash_allocate+0x192/0x920 [ 55.767801][ T4422] ? cap_task_prctl+0x13f/0x6b0 [ 55.767872][ T4422] futex_hash_prctl+0xd8/0xf0 [ 55.767893][ T4422] __se_sys_prctl+0x4f4/0x13b0 [ 55.767993][ T4422] __x64_sys_prctl+0x67/0x80 [ 55.768024][ T4422] x64_sys_call+0x2533/0x3020 [ 55.768049][ T4422] do_syscall_64+0x136/0x3c0 [ 55.768079][ T4422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.768131][ T4422] RIP: 0033:0x7fc820efde59 [ 55.768147][ T4422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.768171][ T4422] RSP: 002b:00007fc817536028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 55.768275][ T4422] RAX: ffffffffffffffda RBX: 00007fc821186090 RCX: 00007fc820efde59 [ 55.768295][ T4422] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 55.768313][ T4422] RBP: 00007fc820f93e6f R08: 0000000000000000 R09: 0000000000000000 [ 55.768330][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.768346][ T4422] R13: 00007fc821186128 R14: 00007fc821186090 R15: 00007fffe9273b88 [ 55.768434][ T4422] [ 55.987111][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.013182][ T4455] loop2: detected capacity change from 0 to 128 [ 56.054623][ T4422] memory: usage 153804kB, limit 307200kB, failcnt 138 [ 56.062170][ T4422] memory+swap: usage 153840kB, limit 9007199254740988kB, failcnt 0 [ 56.070428][ T4422] kmem: usage 2228kB, limit 9007199254740988kB, failcnt 0 [ 56.077917][ T4422] Memory cgroup stats for /syz6: [ 56.078261][ T4422] cache 0 [ 56.086406][ T4422] rss 154968064 [ 56.090303][ T4422] shmem 0 [ 56.093419][ T4422] mapped_file 0 [ 56.097026][ T4422] dirty 0 [ 56.100427][ T4422] writeback 0 [ 56.101814][ T4455] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 56.103761][ T4422] workingset_refault_anon 3 [ 56.103774][ T4422] workingset_refault_file 0 [ 56.125352][ T4422] swap 36864 [ 56.128601][ T4422] swapcached 53248 [ 56.132450][ T4422] pgpgin 38160 [ 56.135979][ T4422] pgpgout 326 [ 56.139958][ T4422] pgfault 39324 [ 56.143486][ T4422] pgmajfault 3 [ 56.146911][ T4422] inactive_anon 0 [ 56.157734][ T4422] active_anon 4096 [ 56.163015][ T4422] inactive_file 0 [ 56.170664][ T4422] active_file 0 [ 56.184277][ T4422] unevictable 154963968 [ 56.186187][ T4455] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.200985][ T4422] hierarchical_memory_limit 314572800 [ 56.216054][ T4422] hierarchical_memsw_limit 9223372036854771712 [ 56.237785][ T4422] total_cache 0 [ 56.241366][ T4422] total_rss 154968064 [ 56.248245][ T4422] total_shmem 0 [ 56.261856][ T4422] total_mapped_file 0 [ 56.275712][ T4422] total_dirty 0 [ 56.285168][ T4422] total_writeback 0 [ 56.295156][ T4422] total_workingset_refault_anon 3 [ 56.319915][ T4422] total_workingset_refault_file 0 [ 56.338185][ T4422] total_swap 36864 [ 56.350776][ T4422] total_swapcached 53248 [ 56.363854][ T4422] total_pgpgin 38160 [ 56.374896][ T4475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'. [ 56.379875][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.394643][ T4422] total_pgpgout 326 [ 56.405724][ T4422] total_pgfault 39324 [ 56.412815][ T4422] total_pgmajfault 3 [ 56.422763][ T4422] total_inactive_anon 0 [ 56.434430][ T4422] total_active_anon 4096 [ 56.447798][ T4422] total_inactive_file 0 [ 56.463666][ T4422] total_active_file 0 [ 56.479315][ T4422] total_unevictable 154963968 [ 56.488701][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.496148][ T4422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.228,pid=4328,uid=0 [ 56.546243][ T4422] Memory cgroup out of memory: Killed process 4422 (syz.6.228) total-vm:231324kB, anon-rss:152548kB, file-rss:66292kB, shmem-rss:0kB, UID:0 pgtables:500kB oom_score_adj:1000 [ 56.601195][ T3376] kernel read not supported for file /ppp (pid: 3376 comm: kworker/1:4) [ 56.822552][ T3723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.909124][ T3723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.978907][ T3723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.052516][ T3723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.170787][ T3723] bridge_slave_1: left allmulticast mode [ 57.181371][ T3723] bridge_slave_1: left promiscuous mode [ 57.191050][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.227417][ T3723] bridge_slave_0: left allmulticast mode [ 57.233342][ T3723] bridge_slave_0: left promiscuous mode [ 57.249510][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.363804][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 57.363825][ T28] audit: type=1400 audit(1784205832.465:367): avc: denied { write } for pid=4493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.445095][ T28] audit: type=1400 audit(1784205832.545:368): avc: denied { write } for pid=4505 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.539631][ T3723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.576316][ T3723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.605945][ T3723] bond0 (unregistering): Released all slaves [ 57.655441][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.732626][ T3723] hsr_slave_0: left promiscuous mode [ 57.742614][ T28] audit: type=1400 audit(1784205832.845:369): avc: denied { name_bind } for pid=4521 comm="syz.3.276" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.764258][ T3723] hsr_slave_1: left promiscuous mode [ 57.773773][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.810863][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.844771][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.868925][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.910660][ T3723] veth1_macvtap: left promiscuous mode [ 57.927283][ T3723] veth0_macvtap: left promiscuous mode [ 57.943812][ T3723] veth1_vlan: left promiscuous mode [ 57.947097][ T28] audit: type=1400 audit(1784205833.045:370): avc: denied { write } for pid=4523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.969284][ T3723] veth0_vlan: left promiscuous mode [ 58.020515][ T4541] netlink: 'syz.3.279': attribute type 39 has an invalid length. [ 58.066862][ T28] audit: type=1400 audit(1784205833.165:371): avc: denied { write } for pid=4542 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.212877][ T3723] team0 (unregistering): Port device team_slave_1 removed [ 58.533612][ T3723] team0 (unregistering): Port device team_slave_0 removed [ 58.612874][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.875298][ T28] audit: type=1400 audit(1784205833.975:372): avc: denied { write } for pid=4555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.939929][ T28] audit: type=1400 audit(1784205834.025:373): avc: denied { write } for pid=4570 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.973561][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 59.039280][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.046641][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.054531][ T4506] bridge_slave_0: entered allmulticast mode [ 59.061892][ T4506] bridge_slave_0: entered promiscuous mode [ 59.070284][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.077630][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.085401][ T4506] bridge_slave_1: entered allmulticast mode [ 59.093975][ T4506] bridge_slave_1: entered promiscuous mode [ 59.118797][ T4506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.130671][ T4506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.153121][ T4506] team0: Port device team_slave_0 added [ 59.160019][ T4506] team0: Port device team_slave_1 added [ 59.194012][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.216324][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.268812][ T28] audit: type=1400 audit(1784205834.375:374): avc: denied { write } for pid=4586 comm="syz.3.284" name="file0" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.271092][ T4506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.329832][ T28] audit: type=1400 audit(1784205834.415:375): avc: denied { ioctl } for pid=4586 comm="syz.3.284" path="/73/file0" dev="tmpfs" ino=390 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.364229][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.381332][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.422388][ T4506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.450896][ T4506] hsr_slave_0: entered promiscuous mode [ 59.456767][ T28] audit: type=1400 audit(1784205834.525:376): avc: denied { write } for pid=4593 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.494909][ T4506] hsr_slave_1: entered promiscuous mode [ 59.511143][ T4506] debugfs: 'hsr0' already exists in 'hsr' [ 59.529463][ T4506] Cannot create hsr debugfs directory [ 59.606586][ T4603] xt_hashlimit: size too large, truncated to 1048576 [ 59.632945][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 59.763843][ T4506] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 59.780111][ T4506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.797174][ T4506] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 59.817364][ T4506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.827452][ T4506] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.838401][ T4506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.846284][ T4506] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.858547][ T4506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.954849][ T4506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.996528][ T4506] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.021037][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.028253][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.059257][ T3877] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.066395][ T3877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.297139][ T4506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.526452][ T4667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 60.547350][ T4506] veth0_vlan: entered promiscuous mode [ 60.564910][ T4506] veth1_vlan: entered promiscuous mode [ 60.593019][ T4506] veth0_macvtap: entered promiscuous mode [ 60.615416][ T4506] veth1_macvtap: entered promiscuous mode [ 60.640963][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.662975][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.675661][ T3877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.684623][ T3877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.709765][ T3877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.718587][ T3877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.162682][ T4699] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 61.305460][ T4725] loop6: detected capacity change from 0 to 512 [ 61.336696][ T4725] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.350183][ T4727] loop7: detected capacity change from 0 to 1024 [ 61.359111][ T4725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0102] [ 61.367984][ T4725] System zones: 1-12 [ 61.383984][ T4725] EXT4-fs (loop6): orphan cleanup on readonly fs [ 61.396027][ T4725] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.317: bg 0: block 361: padding at end of block bitmap is not set [ 61.396465][ T4727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.411829][ T4725] loop6: lost filesystem error report for type 5 error -117 [ 61.424317][ T4725] EXT4-fs (loop6): Remounting filesystem read-only [ 61.431680][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 61.431710][ C1] EXT4-fs (loop6): initial error at time 1784205836: ext4_validate_block_bitmap:441 [ 61.431741][ C1] EXT4-fs (loop6): last error at time 1784205836: ext4_validate_block_bitmap:441 [ 61.514276][ T4725] EXT4-fs (loop6): 1 truncate cleaned up [ 61.534600][ T4725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 61.621078][ T4506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.634859][ T4152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 61.745365][ T4750] capability: warning: `syz.0.325' uses deprecated v2 capabilities in a way that may be insecure [ 61.879130][ T4761] loop3: detected capacity change from 0 to 512 [ 61.899601][ T4761] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.945562][ T4761] EXT4-fs (loop3): 1 truncate cleaned up [ 61.990285][ T4761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.782184][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.791770][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 62.791788][ T28] audit: type=1400 audit(1784205837.895:401): avc: denied { bind } for pid=4778 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.849920][ T28] audit: type=1400 audit(1784205837.925:402): avc: denied { ioctl } for pid=4779 comm="syz.5.334" path="socket:[10456]" dev="sockfs" ino=10456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.003322][ T28] audit: type=1400 audit(1784205838.085:403): avc: denied { read } for pid=4794 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.056720][ T28] audit: type=1400 audit(1784205838.155:404): avc: denied { create } for pid=4803 comm="syz.6.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.103149][ T28] audit: type=1400 audit(1784205838.155:405): avc: denied { write } for pid=4803 comm="syz.6.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.148212][ T28] audit: type=1400 audit(1784205838.155:406): avc: denied { read } for pid=4803 comm="syz.6.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.195558][ T28] audit: type=1400 audit(1784205838.235:407): avc: denied { getopt } for pid=4803 comm="syz.6.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.816081][ T4890] loop6: detected capacity change from 0 to 512 [ 63.863498][ T4890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.914351][ T4890] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.920288][ T28] audit: type=1400 audit(1784205839.025:408): avc: denied { associate } for pid=4901 comm="syz.7.351" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.971779][ T28] audit: type=1400 audit(1784205839.075:409): avc: denied { write } for pid=4888 comm="syz.6.350" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.205621][ T4152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.324110][ T28] audit: type=1400 audit(1784205839.425:410): avc: denied { read } for pid=4932 comm="syz.3.355" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.418979][ T4940] loop3: detected capacity change from 0 to 128 [ 64.469384][ T4940] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.509870][ T4940] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.582700][ T3871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.884507][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.892278][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.910552][ T4953] bridge_slave_0: entered allmulticast mode [ 64.926654][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.938024][ T4953] bridge_slave_0: entered promiscuous mode [ 64.953587][ T3871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.004261][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.036932][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.053719][ T4953] bridge_slave_1: entered allmulticast mode [ 65.062033][ T4953] bridge_slave_1: entered promiscuous mode [ 65.088079][ T3871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.148627][ T4985] loop5: detected capacity change from 0 to 256 [ 65.168401][ T4953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.183034][ T3871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.186695][ T4985] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.208609][ T4953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.311762][ T4953] team0: Port device team_slave_0 added [ 65.331905][ T4953] team0: Port device team_slave_1 added [ 65.381113][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.379'. [ 65.384323][ T4953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.422898][ T4953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.470860][ T4953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.484935][ T4953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.492126][ T4953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.526927][ T4953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.598648][ T4953] hsr_slave_0: entered promiscuous mode [ 65.614290][ T4953] hsr_slave_1: entered promiscuous mode [ 65.636181][ T4953] debugfs: 'hsr0' already exists in 'hsr' [ 65.652926][ T4953] Cannot create hsr debugfs directory [ 65.724964][ T5021] loop7: detected capacity change from 0 to 1764 [ 65.776350][ T3871] bridge_slave_1: left allmulticast mode [ 65.782356][ T3871] bridge_slave_1: left promiscuous mode [ 65.789505][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.850906][ T3871] bridge_slave_0: left allmulticast mode [ 65.856644][ T3871] bridge_slave_0: left promiscuous mode [ 65.862588][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.886150][ T5009] loop3: detected capacity change from 0 to 512 [ 66.128476][ T3871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.151322][ T3871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.158414][ T5009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.176288][ T3871] bond0 (unregistering): Released all slaves [ 66.177188][ T5009] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.254461][ T3871] hsr_slave_0: left promiscuous mode [ 66.275433][ T3871] hsr_slave_1: left promiscuous mode [ 66.282441][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.311653][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.338459][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.343394][ T3741] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.354607][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.365954][ T3871] veth1_macvtap: left promiscuous mode [ 66.371854][ T3871] veth0_macvtap: left promiscuous mode [ 66.378391][ T3871] veth1_vlan: left promiscuous mode [ 66.383693][ T3871] veth0_vlan: left promiscuous mode [ 66.551431][ T3871] team0 (unregistering): Port device team_slave_1 removed [ 66.565481][ T3871] team0 (unregistering): Port device team_slave_0 removed [ 66.658678][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 66.762193][ T4953] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 66.781915][ T4953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.794794][ T4953] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 66.824995][ T4953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.846666][ T4953] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 66.875736][ T4953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.893736][ T4953] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 67.168980][ T4953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.177322][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 67.340367][ T4953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.410884][ T4953] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.422069][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 67.435288][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.442417][ T3871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.452550][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.459677][ T3871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.561166][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.594523][ T5128] loop3: detected capacity change from 0 to 512 [ 67.609758][ T5128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.637168][ T5128] EXT4-fs (loop3): 1 truncate cleaned up [ 67.643955][ T5128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.706411][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.801553][ T5146] IPVS: Scheduler module ip_vs_ not found [ 67.809600][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 67.809617][ T28] audit: type=1400 audit(1784205842.915:431): avc: denied { write } for pid=5153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.840453][ T4953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.853208][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 67.896497][ T28] audit: type=1400 audit(1784205842.995:432): avc: denied { connect } for pid=5160 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.042343][ T5176] netlink: 'syz.7.417': attribute type 1 has an invalid length. [ 68.064469][ T5176] netlink: 'syz.7.417': attribute type 4 has an invalid length. [ 68.077123][ T5176] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.417'. [ 68.106295][ T5176] netlink: 'syz.7.417': attribute type 1 has an invalid length. [ 68.115460][ T5176] netlink: 'syz.7.417': attribute type 4 has an invalid length. [ 68.123571][ T5176] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.417'. [ 68.176069][ T4953] veth0_vlan: entered promiscuous mode [ 68.188906][ T4953] veth1_vlan: entered promiscuous mode [ 68.206089][ T4953] veth0_macvtap: entered promiscuous mode [ 68.213714][ T4953] veth1_macvtap: entered promiscuous mode [ 68.226592][ T4953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.238946][ T4953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.250658][ T3858] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.260288][ T3858] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.280276][ T3858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290046][ T3858] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.377792][ T5201] loop5: detected capacity change from 0 to 512 [ 68.377887][ T5037] Bluetooth: hci0: command 0x1003 tx timeout [ 68.384689][ T3764] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.398891][ T5035] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 68.411523][ T5201] EXT4-fs: Ignoring removed i_version option [ 68.420965][ T5201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.451766][ T5201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.463627][ T5205] netlink: 'syz.7.427': attribute type 9 has an invalid length. [ 68.476423][ T5205] netlink: 'syz.7.427': attribute type 7 has an invalid length. [ 68.484596][ T5201] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.492426][ T28] audit: type=1400 audit(1784205843.595:433): avc: denied { write } for pid=5200 comm="syz.5.426" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.498578][ T5205] netlink: 'syz.7.427': attribute type 8 has an invalid length. [ 68.581313][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.584440][ T28] audit: type=1400 audit(1784205843.685:434): avc: denied { read write } for pid=5213 comm="syz.8.429" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.626373][ T28] audit: type=1400 audit(1784205843.685:435): avc: denied { open } for pid=5213 comm="syz.8.429" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.675041][ T28] audit: type=1400 audit(1784205843.755:436): avc: denied { read } for pid=5216 comm="syz.8.432" path="socket:[11585]" dev="sockfs" ino=11585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.710515][ T28] audit: type=1400 audit(1784205843.815:437): avc: denied { connect } for pid=5223 comm="syz.8.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.735989][ T28] audit: type=1400 audit(1784205843.835:438): avc: denied { name_bind } for pid=5218 comm="syz.3.433" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.834912][ T28] audit: type=1400 audit(1784205843.935:439): avc: denied { create } for pid=5230 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.883268][ T28] audit: type=1400 audit(1784205843.955:440): avc: denied { write } for pid=5219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.974876][ T3858] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.053848][ T3858] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.153722][ T3858] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.226115][ T3858] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.368296][ T3858] bridge_slave_1: left allmulticast mode [ 69.381503][ T3858] bridge_slave_1: left promiscuous mode [ 69.394177][ T3858] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.421434][ T3858] bridge_slave_0: left allmulticast mode [ 69.427322][ T3858] bridge_slave_0: left promiscuous mode [ 69.437639][ T3858] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.471410][ T5282] loop3: detected capacity change from 0 to 1024 [ 69.506930][ T5282] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.548394][ T5282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.607320][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.652444][ T3858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.675547][ T3858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.686302][ T3858] bond0 (unregistering): Released all slaves [ 69.765585][ T3858] hsr_slave_0: left promiscuous mode [ 69.782936][ T3858] hsr_slave_1: left promiscuous mode [ 69.801956][ T3858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.827509][ T3858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.846459][ T3858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.854129][ T3858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.875547][ T3858] veth1_macvtap: left promiscuous mode [ 69.881442][ T3858] veth0_macvtap: left promiscuous mode [ 69.891635][ T3858] veth1_vlan: left promiscuous mode [ 69.898111][ T3858] veth0_vlan: left promiscuous mode [ 70.016693][ T3858] team0 (unregistering): Port device team_slave_1 removed [ 70.028189][ T3858] team0 (unregistering): Port device team_slave_0 removed [ 70.341729][ T5335] loop3: detected capacity change from 0 to 512 [ 70.369771][ T5339] loop6: detected capacity change from 0 to 2048 [ 70.381616][ T5335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.399483][ T5339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.419127][ T5335] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.426035][ T5339] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.465422][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.486728][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.497583][ T5335] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #18: comm syz.3.459: corrupted inode contents [ 70.516479][ T5339] EXT4-fs (loop6): Remounting filesystem read-only [ 70.527301][ T5252] bridge_slave_0: entered allmulticast mode [ 70.564941][ T5335] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 70.565699][ T5335] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #18: comm syz.3.459: mark_inode_dirty error [ 70.580389][ T4152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.594227][ T5252] bridge_slave_0: entered promiscuous mode [ 70.607780][ T5335] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 70.607979][ T5335] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #18: comm syz.3.459: corrupted inode contents [ 70.629583][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.644673][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.660158][ T5252] bridge_slave_1: entered allmulticast mode [ 70.678758][ T5335] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 70.678884][ T5335] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #18: comm syz.3.459: mark_inode_dirty error [ 70.702414][ T5252] bridge_slave_1: entered promiscuous mode [ 70.709254][ T5335] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 70.709363][ T5335] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #18: comm syz.3.459: mark inode dirty (error -117) [ 70.731445][ T5335] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 70.731586][ T5335] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 70.750652][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 70.776343][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.796861][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.811926][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.848206][ T5252] team0: Port device team_slave_0 added [ 70.863594][ T5252] team0: Port device team_slave_1 added [ 70.908168][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.915403][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.978977][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.464'. [ 70.989463][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.010091][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.464'. [ 71.034753][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.042068][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.069670][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.137634][ T5252] hsr_slave_0: entered promiscuous mode [ 71.155614][ T5252] hsr_slave_1: entered promiscuous mode [ 71.162403][ T5252] debugfs: 'hsr0' already exists in 'hsr' [ 71.168371][ T5252] Cannot create hsr debugfs directory [ 71.223887][ T5389] netlink: 'syz.7.467': attribute type 13 has an invalid length. [ 71.449681][ T5252] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 71.466357][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.479258][ T5252] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 71.495568][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.542989][ T5416] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 71.549620][ T5416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.566232][ T5252] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 71.598986][ T5416] vhci_hcd vhci_hcd.0: Device attached [ 71.609860][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.626365][ T5252] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 71.646799][ T5252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.725976][ T5439] netlink: 52 bytes leftover after parsing attributes in process `syz.7.475'. [ 71.747025][ T5439] ip6gre1: entered promiscuous mode [ 71.772526][ T5439] ip6gre1: entered allmulticast mode [ 71.778073][ T23] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 71.837756][ T23] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 71.855370][ T5417] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 71.879361][ T3871] vhci_hcd vhci_hcd.6: stop threads [ 71.884751][ T3871] vhci_hcd vhci_hcd.6: release socket [ 71.890345][ T3871] vhci_hcd vhci_hcd.6: disconnect device [ 72.272036][ T5415] syz.6.472 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 72.302733][ T5415] CPU: 0 UID: 0 PID: 5415 Comm: syz.6.472 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.302769][ T5415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 72.302828][ T5415] Call Trace: [ 72.302834][ T5415] [ 72.302845][ T5415] __dump_stack+0x1d/0x30 [ 72.302875][ T5415] dump_stack_lvl+0x95/0xd0 [ 72.302934][ T5415] dump_stack+0x15/0x1b [ 72.302956][ T5415] dump_header+0x80/0x240 [ 72.302985][ T5415] oom_kill_process+0x295/0x350 [ 72.303027][ T5415] out_of_memory+0x981/0xbc0 [ 72.303131][ T5415] try_charge_memcg+0x621/0xa00 [ 72.303221][ T5415] charge_memcg+0x6d/0x120 [ 72.303264][ T5415] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 72.303300][ T5415] swap_cache_alloc_folio+0x47b/0x5e0 [ 72.303414][ T5415] swap_cluster_readahead+0x2b1/0x460 [ 72.303477][ T5415] swapin_readahead+0xd8/0x8a0 [ 72.303560][ T5415] ? _raw_spin_unlock+0x9/0x30 [ 72.303587][ T5415] ? swap_put_entries_cluster+0x49c/0x4c0 [ 72.303620][ T5415] ? wake_page_function+0x11a/0x1f0 [ 72.303682][ T5415] ? __wake_up_locked_key+0x3d/0x60 [ 72.303704][ T5415] ? __rcu_read_unlock+0x4e/0x70 [ 72.303797][ T5415] ? swap_cache_get_folio+0x1f7/0x200 [ 72.303834][ T5415] do_swap_page+0x2a2/0x1ec0 [ 72.303938][ T5415] ? __css_rstat_updated+0xbb/0x280 [ 72.303991][ T5415] ? __rcu_read_lock+0x36/0x50 [ 72.304023][ T5415] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 72.304120][ T5415] handle_mm_fault+0xb3c/0x2da0 [ 72.304164][ T5415] do_user_addr_fault+0x634/0x1060 [ 72.304195][ T5415] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 72.304292][ T5415] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 72.304330][ T5415] ? trace_page_fault_user+0x1f/0xa0 [ 72.304360][ T5415] exc_page_fault+0x62/0xa0 [ 72.304389][ T5415] asm_exc_page_fault+0x26/0x30 [ 72.304452][ T5415] RIP: 0033:0x7fc820ebe660 [ 72.304468][ T5415] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 72.304554][ T5415] RSP: 002b:00007fffe9273c68 EFLAGS: 00010246 [ 72.304572][ T5415] RAX: 0000000000000000 RBX: 000055555bbdf500 RCX: 0000000000000000 [ 72.304586][ T5415] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 000055555bbdf808 [ 72.304598][ T5415] RBP: 00007fc821187da0 R08: 00007fffe9273cc0 R09: 0000000000000000 [ 72.304633][ T5415] R10: 0000000000000000 R11: 000055555bbdf808 R12: 000000000001248c [ 72.304651][ T5415] R13: 00007fc821185fac R14: 0000000000011903 R15: 00007fc821185fa0 [ 72.304677][ T5415] [ 72.579408][ T5415] memory: usage 307200kB, limit 307200kB, failcnt 252 [ 72.586319][ T5415] memory+swap: usage 318864kB, limit 9007199254740988kB, failcnt 0 [ 72.605212][ T5415] kmem: usage 270520kB, limit 9007199254740988kB, failcnt 0 [ 72.616165][ T5415] Memory cgroup stats for /syz6: [ 72.616417][ T5415] cache 0 [ 72.633305][ T5415] rss 0 [ 72.636141][ T5415] shmem 0 [ 72.639367][ T5415] mapped_file 0 [ 72.642865][ T5415] dirty 0 [ 72.645827][ T5415] writeback 0 [ 72.649553][ T5415] workingset_refault_anon 31 [ 72.654209][ T5415] workingset_refault_file 0 [ 72.661977][ T5415] swap 11943936 [ 72.665490][ T5415] swapcached 12087296 [ 72.684758][ T5415] pgpgin 44146 [ 72.688358][ T5415] pgpgout 44143 [ 72.696255][ T5415] pgfault 51226 [ 72.707748][ T5415] pgmajfault 22 [ 72.711271][ T5415] inactive_anon 8192 [ 72.715253][ T5415] active_anon 4096 [ 72.734915][ T5415] inactive_file 0 [ 72.742918][ T5415] active_file 0 [ 72.746726][ T5415] unevictable 0 [ 72.761638][ T5415] hierarchical_memory_limit 314572800 [ 72.767349][ T5415] hierarchical_memsw_limit 9223372036854771712 [ 72.773766][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 72.773946][ T5415] total_cache 0 [ 72.783976][ T5415] total_rss 0 [ 72.787305][ T5415] total_shmem 0 [ 72.792287][ T5415] total_mapped_file 0 [ 72.796388][ T5415] total_dirty 0 [ 72.800169][ T5415] total_writeback 0 [ 72.804024][ T5415] total_workingset_refault_anon 31 [ 72.809453][ T5415] total_workingset_refault_file 0 [ 72.817141][ T5415] total_swap 11943936 [ 72.828063][ T5415] total_swapcached 12087296 [ 72.832630][ T5415] total_pgpgin 44146 [ 72.836557][ T5415] total_pgpgout 44143 [ 72.840638][ T5415] total_pgfault 51226 [ 72.844820][ T5415] total_pgmajfault 22 [ 72.857441][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.866982][ T5415] total_inactive_anon 8192 [ 72.871675][ T5415] total_active_anon 4096 [ 72.876017][ T5415] total_inactive_file 0 [ 72.880391][ T5415] total_active_file 0 [ 72.884511][ T5415] total_unevictable 0 [ 72.888633][ T5415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.472,pid=5415,uid=0 [ 72.915901][ T5415] Memory cgroup out of memory: Killed process 5415 (syz.6.472) total-vm:94312kB, anon-rss:1248kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 72.916512][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.979654][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.986894][ T3871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.005173][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.012327][ T3865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.138539][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 73.138606][ T28] audit: type=1400 audit(1784205848.245:463): avc: denied { create } for pid=5478 comm="syz.8.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.195121][ T28] audit: type=1400 audit(1784205848.275:464): avc: denied { bind } for pid=5478 comm="syz.8.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.229332][ T28] audit: type=1400 audit(1784205848.325:465): avc: denied { read } for pid=5485 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.308738][ T28] audit: type=1400 audit(1784205848.325:466): avc: denied { write } for pid=5478 comm="syz.8.487" path="socket:[12687]" dev="sockfs" ino=12687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.366736][ T5491] loop7: detected capacity change from 0 to 8192 [ 73.395763][ T28] audit: type=1400 audit(1784205848.365:467): avc: denied { write } for pid=5454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.412059][ T5491] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.475122][ T5512] netlink: 'syz.6.494': attribute type 1 has an invalid length. [ 73.485409][ T28] audit: type=1400 audit(1784205848.385:468): avc: denied { read } for pid=5478 comm="syz.8.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.506421][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.551070][ T28] audit: type=1400 audit(1784205848.455:469): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.570381][ T5520] loop3: detected capacity change from 0 to 128 [ 73.581815][ T5512] bond1: entered promiscuous mode [ 73.613140][ T5512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.645547][ T5520] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.680342][ T5520] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.714697][ T5515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.727402][ T5515] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 73.741274][ T5515] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 73.752771][ T28] audit: type=1400 audit(1784205848.855:470): avc: denied { write } for pid=5517 comm="syz.3.495" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.778253][ T5515] bond1: (slave ipip0): making interface the new active one [ 73.799720][ T5515] ipip0: entered promiscuous mode [ 73.807099][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.816171][ T5515] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 73.859079][ T28] audit: type=1400 audit(1784205848.955:471): avc: denied { write } for pid=5513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.956464][ T28] audit: type=1400 audit(1784205849.055:472): avc: denied { write } for pid=5549 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.063541][ T5252] veth0_vlan: entered promiscuous mode [ 74.083980][ T5252] veth1_vlan: entered promiscuous mode [ 74.094932][ T5565] netlink: 'syz.6.502': attribute type 3 has an invalid length. [ 74.103036][ T5565] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.502'. [ 74.127639][ T5252] veth0_macvtap: entered promiscuous mode [ 74.145235][ T5252] veth1_macvtap: entered promiscuous mode [ 74.163717][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.176340][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.190693][ T3741] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.200220][ T3741] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.216130][ T3741] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.228327][ T3741] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.517416][ T5527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.820415][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 74.873465][ T5635] syzkaller0: entered promiscuous mode [ 74.895014][ T5635] syzkaller0: entered allmulticast mode [ 75.028551][ T5648] loop8: detected capacity change from 0 to 256 [ 75.038845][ T5652] netlink: 'syz.9.525': attribute type 18 has an invalid length. [ 75.065613][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.525'. [ 75.091682][ T5652] netlink: 'syz.9.525': attribute type 18 has an invalid length. [ 75.100340][ T3741] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.110250][ T3741] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.119340][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.525'. [ 75.128492][ T3741] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.137385][ T3741] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.356693][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 75.431098][ T5640] mmap: syz.3.521 (5640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.006670][ T5715] netlink: 'syz.7.543': attribute type 1 has an invalid length. [ 76.039670][ T5715] gretap1: entered allmulticast mode [ 76.050825][ T5715] bond1: (slave gretap1): making interface the new active one [ 76.062213][ T5715] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 76.162582][ T5724] loop7: detected capacity change from 0 to 4096 [ 76.179759][ T5724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.322321][ T4506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.560323][ T5739] ================================================================== [ 76.568507][ T5739] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 76.577190][ T5739] [ 76.579558][ T5739] write to 0xffff88810a671820 of 8 bytes by task 5741 on cpu 0: [ 76.587225][ T5739] shmem_file_splice_read+0x401/0x590 [ 76.592665][ T5739] splice_direct_to_actor+0x261/0x680 [ 76.598091][ T5739] do_splice_direct+0x119/0x1a0 [ 76.602997][ T5739] do_sendfile+0x37d/0x640 [ 76.607452][ T5739] __x64_sys_sendfile64+0x105/0x150 [ 76.612694][ T5739] x64_sys_call+0x2dc4/0x3020 [ 76.617405][ T5739] do_syscall_64+0x136/0x3c0 [ 76.622025][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.627956][ T5739] [ 76.630301][ T5739] write to 0xffff88810a671820 of 8 bytes by task 5739 on cpu 1: [ 76.637952][ T5739] shmem_file_splice_read+0x401/0x590 [ 76.643377][ T5739] splice_direct_to_actor+0x261/0x680 [ 76.648803][ T5739] do_splice_direct+0x119/0x1a0 [ 76.653703][ T5739] do_sendfile+0x37d/0x640 [ 76.658169][ T5739] __x64_sys_sendfile64+0x105/0x150 [ 76.663412][ T5739] x64_sys_call+0x2dc4/0x3020 [ 76.668133][ T5739] do_syscall_64+0x136/0x3c0 [ 76.672797][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.678719][ T5739] [ 76.681061][ T5739] value changed: 0x0000000000003168 -> 0x0000000000003169 [ 76.688200][ T5739] [ 76.690557][ T5739] Reported by Kernel Concurrency Sanitizer on: [ 76.696745][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: syz.8.553 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.705982][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 76.716074][ T5739] ================================================================== [ 76.857814][ T23] usb 13-1: enqueue for inactive port 0 [ 76.872293][ T23] usb 13-1: enqueue for inactive port 0 [ 76.972901][ T23] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 79.251573][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 79.251591][ T28] audit: type=1400 audit(1784205854.355:491): avc: denied { write } for pid=5749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.289693][ T28] audit: type=1400 audit(1784205854.395:492): avc: denied { write } for pid=5760 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.084768][ T28] audit: type=1400 audit(1784205855.185:493): avc: denied { write } for pid=5763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.118199][ T28] audit: type=1400 audit(1784205855.225:494): avc: denied { write } for pid=5774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.393021][ T28] audit: type=1400 audit(1784205855.495:495): avc: denied { write } for pid=5777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.426891][ T28] audit: type=1400 audit(1784205855.525:496): avc: denied { write } for pid=5788 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.609373][ T28] audit: type=1400 audit(1784205855.715:497): avc: denied { write } for pid=5791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.643383][ T28] audit: type=1400 audit(1784205855.745:498): avc: denied { write } for pid=5802 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1