last executing test programs: 2.19301134s ago: executing program 3 (id=199): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 2.157656532s ago: executing program 3 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "0b77380a49fed5c1"}) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) 1.765029459s ago: executing program 3 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/netfilter\x00') fchdir(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.345952107s ago: executing program 2 (id=243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4171, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0xb) 1.345205887s ago: executing program 2 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x7) 1.344922907s ago: executing program 4 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close(r2) 1.344756377s ago: executing program 0 (id=247): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 1.301345701s ago: executing program 2 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000000f2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.301185972s ago: executing program 0 (id=250): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.300957301s ago: executing program 4 (id=251): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)) 1.244987706s ago: executing program 0 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 1.244690566s ago: executing program 2 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1.244337356s ago: executing program 4 (id=255): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:device_t:s0\x00', 0x1e, 0x1) 1.244170136s ago: executing program 0 (id=256): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200020a, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 1.242465947s ago: executing program 1 (id=257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) 1.240311197s ago: executing program 2 (id=258): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r1, &(0x7f0000000080)={0x0, 0x6, &(0x7f00000000c0), 0x1}, 0x24008811) 1.226157278s ago: executing program 4 (id=259): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfc, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_gettime(r2, &(0x7f0000000340)) 1.172822583s ago: executing program 1 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioperm(0x0, 0x8001, 0x9) 1.172438503s ago: executing program 1 (id=261): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 1.172137593s ago: executing program 4 (id=262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5a86f477512bbe340530685b8caa8e2eeff2aa"}) 1.171458483s ago: executing program 2 (id=263): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfb36b7c5eda090f7, 0x0, 0x1, 0x0, &(0x7f00000013c0)) inotify_init1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, 0x0, 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 1.166151704s ago: executing program 1 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.081466752s ago: executing program 1 (id=265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$phonet(r1, 0x0, 0x0) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.025028077s ago: executing program 0 (id=266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r1, 0x5) accept$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 872.1511ms ago: executing program 3 (id=267): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000300), 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 852.477402ms ago: executing program 3 (id=268): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000000)='./file0\x00', 0x401, 0x0) 46.614556ms ago: executing program 0 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) 15.438209ms ago: executing program 4 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 3.47687ms ago: executing program 1 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)=""/77, 0x4d}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 0s ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x17, &(0x7f0000000780)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.708679][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.708696][ T29] audit: type=1400 audit(1726652157.477:76): avc: denied { transition } for pid=3141 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.713082][ T29] audit: type=1400 audit(1726652157.477:77): avc: denied { noatsecure } for pid=3141 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.715786][ T29] audit: type=1400 audit(1726652157.487:78): avc: denied { write } for pid=3141 comm="sh" path="pipe:[1627]" dev="pipefs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.719306][ T29] audit: type=1400 audit(1726652157.487:79): avc: denied { rlimitinh } for pid=3141 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.722291][ T29] audit: type=1400 audit(1726652157.487:80): avc: denied { siginh } for pid=3141 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.430233][ T3142] sshd (3142) used greatest stack depth: 11368 bytes left [ 21.916471][ T29] audit: type=1400 audit(1726652159.687:81): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 27.953588][ T29] audit: type=1400 audit(1726652165.727:82): avc: denied { mounton } for pid=3251 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.954860][ T3251] cgroup: Unknown subsys name 'net' [ 27.976318][ T29] audit: type=1400 audit(1726652165.727:83): avc: denied { mount } for pid=3251 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.003696][ T29] audit: type=1400 audit(1726652165.757:84): avc: denied { unmount } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.161171][ T3251] cgroup: Unknown subsys name 'cpuset' [ 28.167443][ T3251] cgroup: Unknown subsys name 'rlimit' [ 28.274735][ T29] audit: type=1400 audit(1726652166.047:85): avc: denied { setattr } for pid=3251 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.300353][ T29] audit: type=1400 audit(1726652166.047:86): avc: denied { create } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.320860][ T29] audit: type=1400 audit(1726652166.047:87): avc: denied { write } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.330162][ T3253] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.341280][ T29] audit: type=1400 audit(1726652166.047:88): avc: denied { read } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.370175][ T29] audit: type=1400 audit(1726652166.047:89): avc: denied { mounton } for pid=3251 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.395015][ T29] audit: type=1400 audit(1726652166.047:90): avc: denied { mount } for pid=3251 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.418321][ T29] audit: type=1400 audit(1726652166.117:91): avc: denied { relabelto } for pid=3253 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.448087][ T3251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.910631][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 29.985127][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.992250][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.999581][ T3260] bridge_slave_0: entered allmulticast mode [ 30.006333][ T3260] bridge_slave_0: entered promiscuous mode [ 30.014140][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.021369][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.028518][ T3260] bridge_slave_1: entered allmulticast mode [ 30.034974][ T3260] bridge_slave_1: entered promiscuous mode [ 30.055123][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.067132][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.089651][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 30.103916][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 30.119114][ T3260] team0: Port device team_slave_0 added [ 30.137989][ T3260] team0: Port device team_slave_1 added [ 30.166477][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 30.199782][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.206803][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.232792][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.257097][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.264236][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.271487][ T3268] bridge_slave_0: entered allmulticast mode [ 30.277797][ T3268] bridge_slave_0: entered promiscuous mode [ 30.284498][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.291514][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.317513][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.332861][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 30.351105][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.358253][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.365564][ T3268] bridge_slave_1: entered allmulticast mode [ 30.372008][ T3268] bridge_slave_1: entered promiscuous mode [ 30.385703][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.392804][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.399945][ T3261] bridge_slave_0: entered allmulticast mode [ 30.406262][ T3261] bridge_slave_0: entered promiscuous mode [ 30.424906][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.432154][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.439344][ T3261] bridge_slave_1: entered allmulticast mode [ 30.445765][ T3261] bridge_slave_1: entered promiscuous mode [ 30.458262][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.492872][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.503200][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.526013][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.533144][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.540418][ T3271] bridge_slave_0: entered allmulticast mode [ 30.546880][ T3271] bridge_slave_0: entered promiscuous mode [ 30.559195][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.574743][ T3260] hsr_slave_0: entered promiscuous mode [ 30.580773][ T3260] hsr_slave_1: entered promiscuous mode [ 30.589020][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.596137][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.603596][ T3271] bridge_slave_1: entered allmulticast mode [ 30.610150][ T3271] bridge_slave_1: entered promiscuous mode [ 30.635542][ T3268] team0: Port device team_slave_0 added [ 30.642157][ T3268] team0: Port device team_slave_1 added [ 30.648452][ T3261] team0: Port device team_slave_0 added [ 30.664833][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.683983][ T3261] team0: Port device team_slave_1 added [ 30.689822][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.696948][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.704321][ T3265] bridge_slave_0: entered allmulticast mode [ 30.710991][ T3265] bridge_slave_0: entered promiscuous mode [ 30.718353][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.727966][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.735235][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.742419][ T3265] bridge_slave_1: entered allmulticast mode [ 30.748730][ T3265] bridge_slave_1: entered promiscuous mode [ 30.778077][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.785062][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.811233][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.829565][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.836599][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.862529][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.879293][ T3271] team0: Port device team_slave_0 added [ 30.889995][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.897030][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.923005][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.936133][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.943247][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.969229][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.980749][ T3271] team0: Port device team_slave_1 added [ 30.989710][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.018378][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.055247][ T3265] team0: Port device team_slave_0 added [ 31.067277][ T3261] hsr_slave_0: entered promiscuous mode [ 31.073573][ T3261] hsr_slave_1: entered promiscuous mode [ 31.079386][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.087019][ T3261] Cannot create hsr debugfs directory [ 31.092689][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.099682][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.125636][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.146995][ T3265] team0: Port device team_slave_1 added [ 31.157310][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.164339][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.190335][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.205179][ T3268] hsr_slave_0: entered promiscuous mode [ 31.211367][ T3268] hsr_slave_1: entered promiscuous mode [ 31.217276][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.224885][ T3268] Cannot create hsr debugfs directory [ 31.245935][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.252935][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.278847][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.305619][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.312753][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.338781][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.366778][ T3271] hsr_slave_0: entered promiscuous mode [ 31.372911][ T3271] hsr_slave_1: entered promiscuous mode [ 31.378649][ T3271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.386595][ T3271] Cannot create hsr debugfs directory [ 31.421863][ T3260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.446257][ T3265] hsr_slave_0: entered promiscuous mode [ 31.452579][ T3265] hsr_slave_1: entered promiscuous mode [ 31.458545][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.466205][ T3265] Cannot create hsr debugfs directory [ 31.471874][ T3260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.480841][ T3260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.501784][ T3260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.640966][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.650002][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.659522][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.669066][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.685829][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.707676][ T3261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.716879][ T3261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.726168][ T3261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.734976][ T3261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.754255][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.776023][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.783186][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.797784][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.807025][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.816067][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.834901][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.847458][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.854628][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.882308][ T3271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.892782][ T3271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.902065][ T3271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.928822][ T3271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.960943][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.987056][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.002568][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.009665][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.019048][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.039267][ T3344] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.046378][ T3344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.066529][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.088534][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.099986][ T2407] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.107086][ T2407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.125126][ T2407] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.132236][ T2407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.144591][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.163667][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.184686][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.198821][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.223939][ T2407] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.231091][ T2407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.240550][ T2407] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.247732][ T2407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.263562][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.292794][ T2407] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.299874][ T2407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.312469][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.319830][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.335665][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.412955][ T3260] veth0_vlan: entered promiscuous mode [ 32.448426][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.456704][ T3260] veth1_vlan: entered promiscuous mode [ 32.477349][ T3260] veth0_macvtap: entered promiscuous mode [ 32.509543][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.520233][ T3268] veth0_vlan: entered promiscuous mode [ 32.529041][ T3268] veth1_vlan: entered promiscuous mode [ 32.535913][ T3260] veth1_macvtap: entered promiscuous mode [ 32.561366][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.569725][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.591990][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.620873][ T3268] veth0_macvtap: entered promiscuous mode [ 32.631115][ T3265] veth0_vlan: entered promiscuous mode [ 32.660754][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.669629][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.678623][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.687416][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.697571][ T3268] veth1_macvtap: entered promiscuous mode [ 32.705153][ T3265] veth1_vlan: entered promiscuous mode [ 32.738367][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.748948][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.762981][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.773059][ T3265] veth0_macvtap: entered promiscuous mode [ 32.792027][ T3265] veth1_macvtap: entered promiscuous mode [ 32.801899][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.812424][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.824578][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.839762][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.850401][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.860255][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.870700][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.881907][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.890503][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.899232][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.907980][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.916826][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.943691][ T3261] veth0_vlan: entered promiscuous mode [ 32.961672][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 32.961687][ T29] audit: type=1400 audit(1726652170.737:121): avc: denied { map_read map_write } for pid=3400 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.963982][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.987412][ T29] audit: type=1400 audit(1726652170.737:122): avc: denied { prog_load } for pid=3400 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.987446][ T29] audit: type=1400 audit(1726652170.737:123): avc: denied { perfmon } for pid=3400 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.997897][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.997914][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.997933][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.999252][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.016626][ T29] audit: type=1400 audit(1726652170.737:124): avc: denied { prog_run } for pid=3400 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.086200][ T29] audit: type=1400 audit(1726652170.817:125): avc: denied { read } for pid=3400 comm="syz.3.4" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.096429][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.116473][ T29] audit: type=1400 audit(1726652170.817:126): avc: denied { open } for pid=3400 comm="syz.3.4" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.125175][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.125210][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148571][ T29] audit: type=1400 audit(1726652170.817:127): avc: denied { ioctl } for pid=3400 comm="syz.3.4" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.148603][ T29] audit: type=1326 audit(1726652170.847:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3402 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fe07def9 code=0x7ffc0000 [ 33.157334][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.165994][ T29] audit: type=1326 audit(1726652170.847:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3402 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fe07def9 code=0x7ffc0000 [ 33.166024][ T29] audit: type=1326 audit(1726652170.847:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3402 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73fe07def9 code=0x7ffc0000 [ 33.282491][ T3261] veth1_vlan: entered promiscuous mode [ 33.289534][ T3271] veth0_vlan: entered promiscuous mode [ 33.303068][ T3405] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 33.320766][ T3271] veth1_vlan: entered promiscuous mode [ 33.361472][ T3261] veth0_macvtap: entered promiscuous mode [ 33.377227][ T3271] veth0_macvtap: entered promiscuous mode [ 33.397152][ T3261] veth1_macvtap: entered promiscuous mode [ 33.412033][ T3271] veth1_macvtap: entered promiscuous mode [ 33.435271][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.445917][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.455813][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.466353][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.476353][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.487044][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.499276][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.508859][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.519413][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.529311][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.539980][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.549983][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.560468][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.572548][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.588200][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.598847][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.608906][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.619463][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.629316][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.639828][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.649749][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.660258][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.673347][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.681745][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.692320][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.702343][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.712855][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.722832][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.733453][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.743326][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.753859][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.764767][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.782350][ T3271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791413][ T3271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.800194][ T3271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.809003][ T3271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.825702][ T3261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.834508][ T3261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.843344][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.852166][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.004462][ T3433] loop3: detected capacity change from 0 to 2048 [ 34.018709][ T3439] syz.1.2 (3439) used greatest stack depth: 11336 bytes left [ 34.037374][ T3435] loop0: detected capacity change from 0 to 2048 [ 34.054190][ T3442] loop4: detected capacity change from 0 to 1024 [ 34.065223][ T3442] ======================================================= [ 34.065223][ T3442] WARNING: The mand mount option has been deprecated and [ 34.065223][ T3442] and is ignored by this kernel. Remove the mand [ 34.065223][ T3442] option from the mount to silence this warning. [ 34.065223][ T3442] ======================================================= [ 34.101834][ T3433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.121664][ T3442] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.140568][ T3435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.156144][ T3433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.179498][ T3442] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.19: Invalid block bitmap block 0 in block_group 0 [ 34.205448][ T3433] syz.3.16 (3433) used greatest stack depth: 10656 bytes left [ 34.216788][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.225247][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.274527][ T3442] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.19: Failed to acquire dquot type 0 [ 34.295600][ T3442] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.19: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.309291][ T3442] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.19: Invalid inode bitmap blk 0 in block_group 0 [ 34.323201][ T58] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u8:4: Failed to release dquot type 0 [ 34.336219][ T3442] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 34.345563][ T3442] EXT4-fs (loop4): 1 orphan inode deleted [ 34.371307][ T3442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.429320][ T3442] syz.4.19 (3442) used greatest stack depth: 9856 bytes left [ 34.468710][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.520533][ T3469] SELinux: Context is not valid (left unmapped). [ 34.735011][ T3496] syz.1.42[3496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.735082][ T3496] syz.1.42[3496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.820858][ T3503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.45'. [ 34.930843][ T3519] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 34.965982][ T3524] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.056170][ T3535] loop3: detected capacity change from 0 to 128 [ 35.103997][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 35.132440][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 35.144967][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 35.157499][ T3546] vhci_hcd: invalid port number 157 [ 35.162791][ T3546] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 35.211725][ T3557] loop4: detected capacity change from 0 to 128 [ 35.226267][ T3553] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 35.232841][ T3553] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 35.240421][ T3553] vhci_hcd vhci_hcd.0: Device attached [ 35.255004][ T3560] vhci_hcd: connection closed [ 35.255223][ T58] vhci_hcd: stop threads [ 35.264264][ T58] vhci_hcd: release socket [ 35.268734][ T58] vhci_hcd: disconnect device [ 35.279200][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 35.288821][ T3558] netlink: 208 bytes leftover after parsing attributes in process `syz.0.71'. [ 35.381972][ T3570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 35.382338][ T3572] netlink: set zone limit has 8 unknown bytes [ 35.497134][ T3588] Zero length message leads to an empty skb [ 35.568746][ T3595] process '+}[@' launched './file1' with NULL argv: empty string added [ 35.628342][ T3605] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.93'. [ 35.676046][ T3612] syz.0.96[3612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.676224][ T3612] syz.0.96[3612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.750053][ C0] hrtimer: interrupt took 28013 ns [ 36.174601][ T3643] block device autoloading is deprecated and will be removed. [ 36.220406][ T3643] syz.1.106: attempt to access beyond end of device [ 36.220406][ T3643] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 36.521880][ T3671] syz.2.119[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.522018][ T3671] syz.2.119[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.576560][ T3671] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 36.606288][ T3675] loop1: detected capacity change from 0 to 128 [ 36.634071][ T3677] Illegal XDP return value 4294967274 on prog (id 113) dev N/A, expect packet loss! [ 36.767105][ T3686] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.921243][ T3702] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 36.928951][ T3702] netlink: 152 bytes leftover after parsing attributes in process `syz.3.135'. [ 37.069644][ T3715] netlink: 100 bytes leftover after parsing attributes in process `syz.3.139'. [ 37.113033][ T3717] syz.4.140[3717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.114276][ T3717] syz.4.140[3717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.238188][ T3731] capability: warning: `syz.4.147' uses 32-bit capabilities (legacy support in use) [ 45.633344][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 45.633359][ T29] audit: type=1400 audit(1726652183.407:352): avc: denied { audit_read } for pid=3761 comm="syz.2.161" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.723293][ T29] audit: type=1400 audit(1726652183.407:353): avc: denied { create } for pid=3761 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.743898][ T29] audit: type=1400 audit(1726652183.407:354): avc: denied { write } for pid=3761 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.764196][ T29] audit: type=1400 audit(1726652183.407:355): avc: denied { nlmsg_read } for pid=3761 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 45.780114][ T3785] loop3: detected capacity change from 0 to 1024 [ 45.784972][ T29] audit: type=1400 audit(1726652183.467:356): avc: denied { create } for pid=3773 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.795248][ T3785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.810863][ T29] audit: type=1400 audit(1726652183.487:357): avc: denied { create } for pid=3773 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.838224][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.839811][ T29] audit: type=1400 audit(1726652183.487:358): avc: denied { write } for pid=3773 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.863588][ T3785] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 45.871984][ T29] audit: type=1400 audit(1726652183.487:359): avc: denied { nlmsg_write } for pid=3773 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.901352][ T29] audit: type=1400 audit(1726652183.487:360): avc: denied { create } for pid=3775 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.920928][ T29] audit: type=1400 audit(1726652183.487:361): avc: denied { connect } for pid=3775 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.997770][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.002660][ T3796] loop2: detected capacity change from 0 to 512 [ 46.292010][ T3839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 46.369643][ T3848] : renamed from vlan1 (while UP) [ 46.521775][ T3875] SELinux: failed to load policy [ 46.591393][ T3878] loop2: detected capacity change from 0 to 1024 [ 46.604491][ T3878] EXT4-fs: Ignoring removed orlov option [ 46.620145][ T3878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.642807][ T3878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 46.657773][ T3883] loop0: detected capacity change from 0 to 256 [ 46.660142][ T3878] System zones: 0-1, 3-12 [ 46.669125][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.694152][ T3878] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 46.711070][ T3878] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.2.212: corrupted in-inode xattr: bad magic number in in-inode xattr [ 46.757078][ T3878] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.212: attempt to clear invalid blocks 1886221359 len 1 [ 46.763876][ T3894] loop1: detected capacity change from 0 to 512 [ 46.790581][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.812667][ T3894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.818170][ T3901] loop4: detected capacity change from 0 to 1024 [ 46.834723][ T3894] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.852188][ T3901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.859503][ T3894] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.219: corrupted inode contents [ 46.864860][ T3901] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.891590][ T3894] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #2: comm syz.1.219: mark_inode_dirty error [ 46.910646][ T3894] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.219: corrupted inode contents [ 46.923787][ T3894] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.219: mark_inode_dirty error [ 46.942612][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.987030][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.008036][ T3920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.035345][ T3924] tipc: Started in network mode [ 47.048384][ T3924] tipc: Node identity 4, cluster identity 4711 [ 47.054638][ T3924] tipc: Node number set to 4 [ 47.230943][ T3963] netlink: 'syz.1.248': attribute type 3 has an invalid length. [ 47.258973][ T3965] netlink: 'syz.2.249': attribute type 3 has an invalid length. [ 47.302422][ T3977] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 47.404457][ T3994] loop2: detected capacity change from 0 to 764 [ 47.450275][ T3994] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.115055][ T3994] syz.2.263 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 48.129158][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.2.263 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 48.139441][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 48.149546][ T3994] Call Trace: [ 48.152847][ T3994] [ 48.155795][ T3994] dump_stack_lvl+0xf2/0x150 [ 48.160436][ T3994] dump_stack+0x15/0x20 [ 48.164617][ T3994] dump_header+0x83/0x2d0 [ 48.169012][ T3994] oom_kill_process+0x341/0x4c0 [ 48.173952][ T3994] out_of_memory+0x9af/0xbe0 [ 48.178653][ T3994] ? __rcu_read_unlock+0x4e/0x70 [ 48.183635][ T3994] mem_cgroup_out_of_memory+0x13e/0x190 [ 48.189212][ T3994] try_charge_memcg+0x51b/0x810 [ 48.194080][ T3994] obj_cgroup_charge_pages+0xbd/0x1a0 [ 48.199509][ T3994] __memcg_kmem_charge_page+0x9d/0x170 [ 48.205004][ T3994] __alloc_pages_noprof+0x1bc/0x360 [ 48.210221][ T3994] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 48.215697][ T3994] alloc_pages_noprof+0xe1/0x100 [ 48.220707][ T3994] __vmalloc_node_range_noprof+0x736/0xec0 [ 48.226670][ T3994] __kvmalloc_node_noprof+0x121/0x170 [ 48.232168][ T3994] ? ip_set_alloc+0x1f/0x30 [ 48.236760][ T3994] ip_set_alloc+0x1f/0x30 [ 48.241109][ T3994] hash_netiface_create+0x273/0x730 [ 48.246326][ T3994] ? __nla_parse+0x40/0x60 [ 48.250764][ T3994] ? __pfx_hash_netiface_create+0x10/0x10 [ 48.256498][ T3994] ip_set_create+0x359/0x8a0 [ 48.261190][ T3994] ? strnstr+0xf1/0x100 [ 48.265455][ T3994] ? __nla_parse+0x40/0x60 [ 48.269895][ T3994] nfnetlink_rcv_msg+0x4a9/0x570 [ 48.274874][ T3994] netlink_rcv_skb+0x12c/0x230 [ 48.279732][ T3994] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 48.285360][ T3994] nfnetlink_rcv+0x16c/0x15c0 [ 48.290054][ T3994] ? kmem_cache_free+0xdd/0x2d0 [ 48.295071][ T3994] ? nlmon_xmit+0x51/0x60 [ 48.299466][ T3994] ? __kfree_skb+0x102/0x150 [ 48.304087][ T3994] ? consume_skb+0x49/0x160 [ 48.308643][ T3994] ? nlmon_xmit+0x51/0x60 [ 48.312994][ T3994] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 48.318364][ T3994] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 48.323581][ T3994] ? ref_tracker_free+0x3a5/0x410 [ 48.328629][ T3994] ? copy_from_kernel_nofault_allowed+0x82/0xa0 [ 48.334901][ T3994] ? __dev_queue_xmit+0x161/0x1fe0 [ 48.340091][ T3994] ? __netlink_deliver_tap+0x495/0x4c0 [ 48.345562][ T3994] netlink_unicast+0x599/0x670 [ 48.350351][ T3994] netlink_sendmsg+0x5cc/0x6e0 [ 48.355126][ T3994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.360424][ T3994] __sock_sendmsg+0x140/0x180 [ 48.365215][ T3994] ____sys_sendmsg+0x312/0x410 [ 48.369999][ T3994] __sys_sendmsg+0x1dd/0x270 [ 48.374617][ T3994] __x64_sys_sendmsg+0x46/0x50 [ 48.379435][ T3994] x64_sys_call+0x2689/0x2d60 [ 48.384197][ T3994] do_syscall_64+0xc9/0x1c0 [ 48.388710][ T3994] ? clear_bhb_loop+0x55/0xb0 [ 48.393477][ T3994] ? clear_bhb_loop+0x55/0xb0 [ 48.398266][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.404178][ T3994] RIP: 0033:0x7ff5d336def9 [ 48.408679][ T3994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.428322][ T3994] RSP: 002b:00007ff5d1fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.436923][ T3994] RAX: ffffffffffffffda RBX: 00007ff5d3525f80 RCX: 00007ff5d336def9 [ 48.444975][ T3994] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 48.453052][ T3994] RBP: 00007ff5d33e0b76 R08: 0000000000000000 R09: 0000000000000000 [ 48.461032][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.469011][ T3994] R13: 0000000000000000 R14: 00007ff5d3525f80 R15: 00007ffcf8447cf8 [ 48.477022][ T3994] [ 48.480903][ T3994] memory: usage 307200kB, limit 307200kB, failcnt 142 [ 48.488297][ T3994] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 48.496321][ T3994] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 48.503727][ T3994] Memory cgroup stats for /syz2: [ 48.503996][ T3994] cache 69632 [ 48.512462][ T3994] rss 0 [ 48.515269][ T3994] shmem 0 [ 48.518412][ T3994] mapped_file 65536 [ 48.522262][ T3994] dirty 65536 [ 48.525568][ T3994] writeback 0 [ 48.529017][ T3994] workingset_refault_anon 33 [ 48.533658][ T3994] workingset_refault_file 0 [ 48.538170][ T3994] swap 765952 [ 48.541589][ T3994] swapcached 0 [ 48.544980][ T3994] pgpgin 5704 [ 48.548530][ T3994] pgpgout 5687 [ 48.552280][ T3994] pgfault 9692 [ 48.555845][ T3994] pgmajfault 14 [ 48.559558][ T3994] inactive_anon 0 [ 48.563230][ T3994] active_anon 0 [ 48.566704][ T3994] inactive_file 0 [ 48.570366][ T3994] active_file 69632 [ 48.574238][ T3994] unevictable 0 [ 48.577714][ T3994] hierarchical_memory_limit 314572800 [ 48.583135][ T3994] hierarchical_memsw_limit 9223372036854771712 [ 48.589379][ T3994] total_cache 69632 [ 48.593260][ T3994] total_rss 0 [ 48.596570][ T3994] total_shmem 0 [ 48.600127][ T3994] total_mapped_file 65536 [ 48.604485][ T3994] total_dirty 65536 [ 48.608293][ T3994] total_writeback 0 [ 48.612165][ T3994] total_workingset_refault_anon 33 [ 48.617423][ T3994] total_workingset_refault_file 0 [ 48.622473][ T3994] total_swap 765952 [ 48.626283][ T3994] total_swapcached 0 [ 48.630203][ T3994] total_pgpgin 5704 [ 48.634013][ T3994] total_pgpgout 5687 [ 48.637982][ T3994] total_pgfault 9692 [ 48.641990][ T3994] total_pgmajfault 14 [ 48.646056][ T3994] total_inactive_anon 0 [ 48.650242][ T3994] total_active_anon 0 [ 48.654226][ T3994] total_inactive_file 0 [ 48.658555][ T3994] total_active_file 69632 [ 48.662939][ T3994] total_unevictable 0 [ 48.666945][ T3994] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.263,pid=3992,uid=0 [ 48.681711][ T3994] Memory cgroup out of memory: Killed process 3992 (syz.2.263) total-vm:89032kB, anon-rss:612kB, file-rss:16160kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 48.700688][ T3994] ================================================================== [ 48.708798][ T3994] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 48.716198][ T3994] [ 48.718533][ T3994] read-write to 0xffff8881153a3668 of 4 bytes by task 3268 on cpu 0: [ 48.726645][ T3994] mem_cgroup_iter+0x28e/0x380 [ 48.731421][ T3994] shrink_node+0x74a/0x1d40 [ 48.735939][ T3994] do_try_to_free_pages+0x3c6/0xc50 [ 48.741149][ T3994] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 48.747057][ T3994] try_charge_memcg+0x2bc/0x810 [ 48.751922][ T3994] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 48.758011][ T3994] __read_swap_cache_async+0x2b7/0x520 [ 48.763490][ T3994] swap_cluster_readahead+0x276/0x3f0 [ 48.768883][ T3994] swapin_readahead+0xe4/0x760 [ 48.773668][ T3994] do_swap_page+0x3da/0x1ef0 [ 48.778278][ T3994] handle_mm_fault+0x8c5/0x2a20 [ 48.783146][ T3994] exc_page_fault+0x3b9/0x650 [ 48.787840][ T3994] asm_exc_page_fault+0x26/0x30 [ 48.792707][ T3994] [ 48.795031][ T3994] read to 0xffff8881153a3668 of 4 bytes by task 3994 on cpu 1: [ 48.802577][ T3994] mem_cgroup_iter+0x93/0x380 [ 48.807361][ T3994] shrink_node+0x74a/0x1d40 [ 48.811887][ T3994] do_try_to_free_pages+0x3c6/0xc50 [ 48.817093][ T3994] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 48.822994][ T3994] try_charge_memcg+0x2bc/0x810 [ 48.827859][ T3994] obj_cgroup_charge_pages+0xbd/0x1a0 [ 48.833248][ T3994] __memcg_kmem_charge_page+0x9d/0x170 [ 48.838721][ T3994] __alloc_pages_noprof+0x1bc/0x360 [ 48.843946][ T3994] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 48.849333][ T3994] alloc_pages_noprof+0xe1/0x100 [ 48.854287][ T3994] __vmalloc_node_range_noprof+0x736/0xec0 [ 48.860112][ T3994] __kvmalloc_node_noprof+0x121/0x170 [ 48.865583][ T3994] ip_set_alloc+0x1f/0x30 [ 48.869943][ T3994] hash_netiface_create+0x273/0x730 [ 48.875238][ T3994] ip_set_create+0x359/0x8a0 [ 48.879839][ T3994] nfnetlink_rcv_msg+0x4a9/0x570 [ 48.884793][ T3994] netlink_rcv_skb+0x12c/0x230 [ 48.889559][ T3994] nfnetlink_rcv+0x16c/0x15c0 [ 48.894242][ T3994] netlink_unicast+0x599/0x670 [ 48.899024][ T3994] netlink_sendmsg+0x5cc/0x6e0 [ 48.903798][ T3994] __sock_sendmsg+0x140/0x180 [ 48.908573][ T3994] ____sys_sendmsg+0x312/0x410 [ 48.913344][ T3994] __sys_sendmsg+0x1dd/0x270 [ 48.917942][ T3994] __x64_sys_sendmsg+0x46/0x50 [ 48.922713][ T3994] x64_sys_call+0x2689/0x2d60 [ 48.927402][ T3994] do_syscall_64+0xc9/0x1c0 [ 48.931912][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.937824][ T3994] [ 48.940144][ T3994] value changed: 0x000004a9 -> 0x000004aa [ 48.945946][ T3994] [ 48.948266][ T3994] Reported by Kernel Concurrency Sanitizer on: [ 48.954412][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.2.263 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 48.964657][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 48.974717][ T3994] ================================================================== [ 49.267753][ T3994] syz.2.263 (3994) used greatest stack depth: 7328 bytes left