last executing test programs: 10.688311647s ago: executing program 4 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 9.699274624s ago: executing program 4 (id=171): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x2000410, &(0x7f0000000280), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(r3, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000980)='./file1\x00', 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011"], 0x129) read(r4, &(0x7f0000005480)=""/213, 0xd5) 9.320892323s ago: executing program 4 (id=179): prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x34, r1}) r2 = syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xd, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6}], &(0x7f00000001c0)='GPL\x00', 0xf, 0x74, &(0x7f00000002c0)=""/116, 0x41100, 0x883172389c9d0379, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x652, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[{0x0, 0x3, 0xa, 0x2}], 0x10, 0x0, @value=r2}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x62040200) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") openat$tcp_mem(0xffffff9c, 0x0, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xd}]}}}]}, 0x3c}}, 0x0) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, 0x0, 0x0) 7.815226959s ago: executing program 4 (id=185): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x21, r2, 0x0, &(0x7f0000000100)={0x0}) openat(0xffffffffffffff9c, 0x0, 0x2a040, 0x120) ptrace$setopts(0x4200, r2, 0xffffffffffffff91, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) 7.319816608s ago: executing program 3 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8000000000000001}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={r3, 0x2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="0100f2ffffff000000003b05000008000300", @ANYRES32=r6, @ANYBLOB="8400330080800000ffffffffffff08021100000050505050505000001a004981000000000000000000006ac1000602020202020201016c0301040406000000000700060209002a01013c040908050c2d1a0200127f00000000000000070000000b00000000080800000007720603030303030371"], 0xa0}}, 0x20040000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 6.926759647s ago: executing program 4 (id=193): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x180040, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000200)) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6.582478476s ago: executing program 4 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb0000000000000000000000006cfcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 6.494453396s ago: executing program 32 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb0000000000000000000000006cfcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 6.458773356s ago: executing program 3 (id=198): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000400)) io_uring_enter(0xffffffffffffffff, 0x0, 0x3, 0x7, 0x0, 0x0) 6.318247925s ago: executing program 3 (id=199): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x43, 0x0, 0x0, 0x6]}}]}}]}, 0x8c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x4d3, &(0x7f0000000c00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2000000) 5.044136832s ago: executing program 3 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r1, r1, 0x0, 0x6) r2 = socket(0x1e, 0x1, 0x0) splice(r2, 0x0, r0, 0x0, 0x4ff9c, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3) 4.726875741s ago: executing program 3 (id=209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5248, &(0x7f0000000080)={0x0, 0x101fab, 0x1000, 0xffffffff, 0x40}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unlink(&(0x7f0000000180)='./file1\x00') 3.446811348s ago: executing program 2 (id=213): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x2, 0x76, 0x10b, 0x5, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3.285000328s ago: executing program 1 (id=216): bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000001800850000008600000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.087062797s ago: executing program 1 (id=217): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) fcntl$notify(r3, 0x402, 0x3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.086367197s ago: executing program 1 (id=218): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000180000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000cfb63600cffd000018180000", @ANYBLOB="00000000000000008500000014000000"], &(0x7f0000000280)='GPL\x00', 0xb17ed7e, 0xf5, &(0x7f0000000440)=""/245, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x0, 0x38f, 0x1}, 0x10, 0xc48b, 0xffffffffffffffff, 0x9, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x4, 0x0, 0xc}, {0x3, 0x4, 0x4, 0x4}, {0x2, 0x5, 0x6, 0x4}, {0x4, 0x5, 0xf}, {0x4, 0x4, 0x0, 0xa}, {0x1, 0x1, 0x8}, {0x4, 0x5, 0x1, 0x5}, {0x2, 0x5, 0x5}, {0x3, 0x3, 0xe, 0x7}], 0x10, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2, 0xb8, 0xf9, 0x7f, 0x0, 0x5, 0x800, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x789a, 0xffffffffffffffff}, 0x40, 0x9, 0x7, 0x3, 0x6, 0x7, 0x6, 0x0, 0x69a, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$netlink(0x10, 0x3, 0x8) 3.042008957s ago: executing program 3 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r4, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) 2.116731695s ago: executing program 1 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readv(r1, &(0x7f0000002140)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200a00000010c000280050001"], 0x64}}, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) 1.742885803s ago: executing program 5 (id=225): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 1.553076593s ago: executing program 5 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r3, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r3, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x4000, 0x0) 1.544343583s ago: executing program 2 (id=227): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x400c010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) msgget(0x2, 0x208) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.543750133s ago: executing program 0 (id=236): msgget(0x3, 0x710) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x8000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xa0, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x8, 0x0, 0x0, 0x1, 0x3, 0x200}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffb, 0x2, 0x0, 0x0, 0x10, 0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xffff8000, 0x3, 0x0, 0x3}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2be965174ef16aba}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) 1.528100753s ago: executing program 0 (id=228): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x79}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000002c0)=""/152, &(0x7f0000000180)=0x98) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 1.229738212s ago: executing program 1 (id=229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x510a, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x10000000, 0xfffffdef) 889.444932ms ago: executing program 0 (id=230): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r1, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x8, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x5, 0x5, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x9, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x7, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x41, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x3, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x3, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0xa0, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 752.382321ms ago: executing program 0 (id=231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000020000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1e18c0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r2}, 0x10) 704.597431ms ago: executing program 0 (id=232): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff", @ANYRES32], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xe, {"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", 0x1000}}, 0x1006) socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 607.311191ms ago: executing program 2 (id=233): socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 606.138001ms ago: executing program 5 (id=234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x78, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 415.02445ms ago: executing program 0 (id=235): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000100)="0f", 0x1, r0) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000002c0)=[{0x1, 0x85, 0x800}, {0x1, 0x8698, 0x1000}], 0x2) semctl$GETVAL(r4, 0x2, 0xc, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x819, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 297.18389ms ago: executing program 1 (id=237): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x2, 0x76, 0x10b, 0x5, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 290.80328ms ago: executing program 2 (id=238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0xe42, &(0x7f0000000140), 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 187.98571ms ago: executing program 2 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x50}}, 0x40808c4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 186.73108ms ago: executing program 5 (id=240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, &(0x7f0000e5f000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 118.938329ms ago: executing program 2 (id=241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x6db6e559) 81.02944ms ago: executing program 5 (id=242): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 0s ago: executing program 5 (id=243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, 0x0, 0x0, 0x23, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f00000000c0)=""/85, 0x55}], 0x4, &(0x7f0000000500)=""/92, 0x5c}, 0x7}, {{&(0x7f0000000580)=@in, 0x80, &(0x7f0000000180)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1, &(0x7f00000006c0)=""/237, 0xed}, 0x9}, {{&(0x7f00000007c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/53, 0x35}, {&(0x7f00000018c0)=""/163, 0xa3}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000380)}], 0x4, &(0x7f0000001d40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001980)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000000840)=""/9, 0x9}, {&(0x7f0000001c00)=""/7, 0x7}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/207, 0xcf}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000001c40)}, {&(0x7f0000004e40)=""/204, 0xcc}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x8, &(0x7f0000006000)=""/179, 0xb3}, 0x8}, {{&(0x7f0000001c80)=@alg, 0x80, &(0x7f00000061c0)=[{&(0x7f00000060c0)=""/187, 0xbb}, {&(0x7f0000006180)=""/22, 0x16}], 0x2}, 0x800}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007540)=""/211, 0xd3}, 0xb}, {{0x0, 0x0, &(0x7f0000007640), 0x0, &(0x7f0000007680)=""/200, 0xc8}, 0x2}, {{&(0x7f0000007780)=@ax25={{0x3, @default}, [@bcast, @null, @remote, @netrom, @null, @remote, @null, @bcast]}, 0x80, 0x0}, 0xe44}], 0x8, 0x2, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)="434fa7", 0x3}, {0x0}], 0x2}}], 0x1, 0x1) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.428224][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.428242][ T29] audit: type=1400 audit(1737560802.480:76): avc: denied { transition } for pid=3177 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.432316][ T29] audit: type=1400 audit(1737560802.480:77): avc: denied { noatsecure } for pid=3177 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.435006][ T29] audit: type=1400 audit(1737560802.480:78): avc: denied { write } for pid=3177 comm="sh" path="pipe:[831]" dev="pipefs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.438116][ T29] audit: type=1400 audit(1737560802.480:79): avc: denied { rlimitinh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.440771][ T29] audit: type=1400 audit(1737560802.480:80): avc: denied { siginh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.056743][ T29] audit: type=1400 audit(1737560805.110:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 28.618600][ T29] audit: type=1400 audit(1737560811.670:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.619914][ T3288] cgroup: Unknown subsys name 'net' [ 28.641336][ T29] audit: type=1400 audit(1737560811.670:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.668747][ T29] audit: type=1400 audit(1737560811.700:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.806556][ T3288] cgroup: Unknown subsys name 'cpuset' [ 28.812980][ T3288] cgroup: Unknown subsys name 'rlimit' [ 29.003323][ T29] audit: type=1400 audit(1737560812.050:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.026610][ T29] audit: type=1400 audit(1737560812.050:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.047233][ T29] audit: type=1400 audit(1737560812.050:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.065168][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.067653][ T29] audit: type=1400 audit(1737560812.050:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.096472][ T29] audit: type=1400 audit(1737560812.070:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.117532][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.121353][ T29] audit: type=1400 audit(1737560812.070:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.121576][ T29] audit: type=1400 audit(1737560812.130:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.349674][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 30.364555][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 30.375634][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.393449][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.428577][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 30.507087][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.514182][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.521445][ T3298] bridge_slave_0: entered allmulticast mode [ 30.527825][ T3298] bridge_slave_0: entered promiscuous mode [ 30.553578][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.560730][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.568103][ T3298] bridge_slave_1: entered allmulticast mode [ 30.574689][ T3298] bridge_slave_1: entered promiscuous mode [ 30.580997][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.588090][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.595309][ T3297] bridge_slave_0: entered allmulticast mode [ 30.601759][ T3297] bridge_slave_0: entered promiscuous mode [ 30.626014][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.633078][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.640309][ T3297] bridge_slave_1: entered allmulticast mode [ 30.646713][ T3297] bridge_slave_1: entered promiscuous mode [ 30.652874][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.659966][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.667200][ T3303] bridge_slave_0: entered allmulticast mode [ 30.673502][ T3303] bridge_slave_0: entered promiscuous mode [ 30.679915][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.687086][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.694266][ T3305] bridge_slave_0: entered allmulticast mode [ 30.700796][ T3305] bridge_slave_0: entered promiscuous mode [ 30.707157][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.714231][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.721539][ T3300] bridge_slave_0: entered allmulticast mode [ 30.727987][ T3300] bridge_slave_0: entered promiscuous mode [ 30.743927][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.751093][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.758498][ T3303] bridge_slave_1: entered allmulticast mode [ 30.764860][ T3303] bridge_slave_1: entered promiscuous mode [ 30.771194][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.778387][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.785794][ T3305] bridge_slave_1: entered allmulticast mode [ 30.792248][ T3305] bridge_slave_1: entered promiscuous mode [ 30.798904][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.806034][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.813359][ T3300] bridge_slave_1: entered allmulticast mode [ 30.819806][ T3300] bridge_slave_1: entered promiscuous mode [ 30.832605][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.865275][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.875815][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.890852][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.900795][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.911177][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.925824][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.940065][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.950171][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.965084][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.983354][ T3298] team0: Port device team_slave_0 added [ 30.989945][ T3298] team0: Port device team_slave_1 added [ 31.013951][ T3297] team0: Port device team_slave_0 added [ 31.020591][ T3297] team0: Port device team_slave_1 added [ 31.035547][ T3303] team0: Port device team_slave_0 added [ 31.041842][ T3305] team0: Port device team_slave_0 added [ 31.048175][ T3305] team0: Port device team_slave_1 added [ 31.054512][ T3300] team0: Port device team_slave_0 added [ 31.061149][ T3300] team0: Port device team_slave_1 added [ 31.076537][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.083499][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.109478][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.120970][ T3303] team0: Port device team_slave_1 added [ 31.145745][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.152801][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.178869][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.194366][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.201371][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.227282][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.242743][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.249733][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.275747][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.289291][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.296304][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.322368][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.338619][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.345612][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.371610][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.382721][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.389710][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.415658][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.433916][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.441009][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.466985][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.481756][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.488906][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.514986][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.525986][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.532950][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.559068][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.603922][ T3300] hsr_slave_0: entered promiscuous mode [ 31.609990][ T3300] hsr_slave_1: entered promiscuous mode [ 31.625098][ T3298] hsr_slave_0: entered promiscuous mode [ 31.631195][ T3298] hsr_slave_1: entered promiscuous mode [ 31.637256][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.644810][ T3298] Cannot create hsr debugfs directory [ 31.671087][ T3303] hsr_slave_0: entered promiscuous mode [ 31.677475][ T3303] hsr_slave_1: entered promiscuous mode [ 31.683350][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.690965][ T3303] Cannot create hsr debugfs directory [ 31.704135][ T3297] hsr_slave_0: entered promiscuous mode [ 31.710302][ T3297] hsr_slave_1: entered promiscuous mode [ 31.716166][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.723713][ T3297] Cannot create hsr debugfs directory [ 31.752814][ T3305] hsr_slave_0: entered promiscuous mode [ 31.759114][ T3305] hsr_slave_1: entered promiscuous mode [ 31.765147][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.772786][ T3305] Cannot create hsr debugfs directory [ 31.942338][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.953739][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.962980][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.976554][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.002245][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.013740][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.023467][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.034427][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.052369][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.061532][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.070473][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.086281][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.114683][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.134047][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.143041][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.152151][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.189885][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.199324][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.208206][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.218903][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.257743][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.293583][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.311046][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.328417][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.339598][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.351928][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.365966][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.378208][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.385453][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.398361][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.405571][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.417786][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.429834][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.436978][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.447069][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.454230][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.463037][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.472824][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.479928][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.495093][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.502260][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.512306][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.527226][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.534275][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.542957][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.550091][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.566248][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.573308][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.598608][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.605700][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.644499][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.654925][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.671644][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.682156][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.749918][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.790785][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.814581][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.839422][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.851785][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.921544][ T3303] veth0_vlan: entered promiscuous mode [ 32.948052][ T3303] veth1_vlan: entered promiscuous mode [ 32.973900][ T3300] veth0_vlan: entered promiscuous mode [ 32.993523][ T3300] veth1_vlan: entered promiscuous mode [ 33.011484][ T3303] veth0_macvtap: entered promiscuous mode [ 33.040457][ T3303] veth1_macvtap: entered promiscuous mode [ 33.047029][ T3298] veth0_vlan: entered promiscuous mode [ 33.062033][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.077220][ T3297] veth0_vlan: entered promiscuous mode [ 33.084548][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.098445][ T3298] veth1_vlan: entered promiscuous mode [ 33.111666][ T3300] veth0_macvtap: entered promiscuous mode [ 33.119278][ T3297] veth1_vlan: entered promiscuous mode [ 33.125994][ T3300] veth1_macvtap: entered promiscuous mode [ 33.133892][ T3305] veth0_vlan: entered promiscuous mode [ 33.144442][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.153273][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.162071][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.170799][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.184177][ T3305] veth1_vlan: entered promiscuous mode [ 33.191564][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.202101][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.213329][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.235490][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.246031][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.257215][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.271099][ T3297] veth0_macvtap: entered promiscuous mode [ 33.279462][ T3297] veth1_macvtap: entered promiscuous mode [ 33.295076][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.303922][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.312739][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321525][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.334179][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.334314][ T3298] veth0_macvtap: entered promiscuous mode [ 33.360020][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.370534][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.380420][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.390877][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.401469][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.409624][ T3305] veth0_macvtap: entered promiscuous mode [ 33.422018][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.432591][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.442494][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.453039][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.463985][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.476141][ T3298] veth1_macvtap: entered promiscuous mode [ 33.485025][ T3305] veth1_macvtap: entered promiscuous mode [ 33.505163][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.514152][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.522968][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.531770][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566954][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.577494][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.587395][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.598049][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.608043][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.618547][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.629349][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.640386][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.651093][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.661015][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.671534][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.681452][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.691976][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.701876][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.712375][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.723330][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.736545][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.747111][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.756980][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.759120][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 33.759134][ T29] audit: type=1400 audit(1737560816.810:122): avc: denied { prog_load } for pid=3441 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.767447][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.767460][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.767498][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.773576][ T29] audit: type=1400 audit(1737560816.810:123): avc: denied { bpf } for pid=3441 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.794175][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.808633][ T3442] xt_hashlimit: size too large, truncated to 1048576 [ 33.936863][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.947494][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.957338][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.967904][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.977736][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.988184][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.998170][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.008634][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.027376][ T29] audit: type=1400 audit(1737560816.860:124): avc: denied { create } for pid=3441 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.046725][ T29] audit: type=1400 audit(1737560816.860:125): avc: denied { setopt } for pid=3441 comm="syz.0.1" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.106028][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.124308][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.133100][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.141850][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.150598][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.193885][ T29] audit: type=1400 audit(1737560817.200:126): avc: denied { perfmon } for pid=3441 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.213533][ T3446] loop0: detected capacity change from 0 to 512 [ 34.214525][ T29] audit: type=1400 audit(1737560817.200:127): avc: denied { prog_run } for pid=3441 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.255963][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.264762][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.273521][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.282346][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.373108][ T3448] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 34.406901][ T3446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.419711][ T3446] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.432401][ T29] audit: type=1400 audit(1737560817.470:128): avc: denied { mount } for pid=3441 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.468988][ T3453] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 34.474009][ T29] audit: type=1400 audit(1737560817.510:129): avc: denied { map_create } for pid=3447 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.495389][ T29] audit: type=1400 audit(1737560817.510:130): avc: denied { map_read map_write } for pid=3447 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.556945][ T3453] syz.2.6 (3453) used greatest stack depth: 10704 bytes left [ 34.589403][ T29] audit: type=1400 audit(1737560817.640:131): avc: denied { write } for pid=3441 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.632241][ T3460] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.664559][ T3463] loop1: detected capacity change from 0 to 128 [ 34.672315][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.679502][ T3464] loop4: detected capacity change from 0 to 512 [ 34.706202][ T3464] EXT4-fs: Ignoring removed i_version option [ 34.724915][ T3460] ipvlan2: entered promiscuous mode [ 34.751529][ T3460] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 34.758147][ T3463] syz.1.2: attempt to access beyond end of device [ 34.758147][ T3463] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 34.761480][ T3460] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 34.785952][ T3464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.787453][ T3463] syz.1.2: attempt to access beyond end of device [ 34.787453][ T3463] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 34.801510][ T3464] ext4 filesystem being mounted at /0/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.816003][ T3463] syz.1.2: attempt to access beyond end of device [ 34.816003][ T3463] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 34.850314][ T3474] syz.1.2: attempt to access beyond end of device [ 34.850314][ T3474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 34.854623][ T3468] netlink: 'syz.3.9': attribute type 21 has an invalid length. [ 34.863669][ T3474] syz.1.2: attempt to access beyond end of device [ 34.863669][ T3474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 34.870900][ T3468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 34.901008][ T3464] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 34.904588][ T3463] syz.1.2: attempt to access beyond end of device [ 34.904588][ T3463] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 34.922099][ T3474] syz.1.2: attempt to access beyond end of device [ 34.922099][ T3474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 34.957577][ T3464] syz_tun: entered promiscuous mode [ 34.965851][ T3479] loop2: detected capacity change from 0 to 512 [ 34.966618][ T3464] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 34.972293][ T3479] ======================================================= [ 34.972293][ T3479] WARNING: The mand mount option has been deprecated and [ 34.972293][ T3479] and is ignored by this kernel. Remove the mand [ 34.972293][ T3479] option from the mount to silence this warning. [ 34.972293][ T3479] ======================================================= [ 35.047730][ T3479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.110297][ T3479] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.127987][ T3484] ip6gretap0: entered promiscuous mode [ 35.134639][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.146630][ T3484] batadv_slave_0: entered promiscuous mode [ 35.157280][ T3484] ip6gretap0: left promiscuous mode [ 35.163156][ T3484] batadv_slave_0: left promiscuous mode [ 35.174990][ T3479] Process accounting resumed [ 35.183357][ T3479] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.224165][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.304073][ T3490] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 35.371311][ T3376] kernel write not supported for file /sg0 (pid: 3376 comm: kworker/1:5) [ 35.385616][ T3503] loop4: detected capacity change from 0 to 164 [ 35.408624][ T3501] loop1: detected capacity change from 0 to 512 [ 35.410021][ T3503] process 'syz.4.20' launched '/dev/fd/9' with NULL argv: empty string added [ 35.466320][ T3501] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.479441][ T3501] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.520377][ T3503] syz.4.20: attempt to access beyond end of device [ 35.520377][ T3503] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 35.544816][ T3501] EXT4-fs (loop1): 1 truncate cleaned up [ 35.552273][ T3501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.565566][ T3503] syz.4.20: attempt to access beyond end of device [ 35.565566][ T3503] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 35.648846][ T3514] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 35.650977][ T3511] netlink: 'syz.2.23': attribute type 27 has an invalid length. [ 35.662248][ T3514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.674422][ T3517] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 35.687531][ T3517] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 35.739325][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.746592][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.792179][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.802906][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.858335][ T3511] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.867498][ T3511] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.873307][ T3526] loop4: detected capacity change from 0 to 2048 [ 35.876664][ T3511] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.891677][ T3511] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.903944][ T3528] loop3: detected capacity change from 0 to 512 [ 35.911973][ T3526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.913977][ T3528] EXT4-fs: Ignoring removed oldalloc option [ 35.937074][ T3528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.953213][ T3528] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.006582][ T3528] EXT4-fs (loop3): 1 truncate cleaned up [ 36.018983][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.032486][ T3528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.035433][ T3526] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 36.054086][ T3526] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.054086][ T3526] [ 36.063972][ T3526] EXT4-fs (loop4): Total free blocks count 0 [ 36.070015][ T3526] EXT4-fs (loop4): Free/Dirty block details [ 36.076088][ T3526] EXT4-fs (loop4): free_blocks=0 [ 36.081059][ T3526] EXT4-fs (loop4): dirty_blocks=0 [ 36.086160][ T3526] EXT4-fs (loop4): Block reservation details [ 36.092268][ T3526] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 36.209438][ T3526] syz.4.26 (3526) used greatest stack depth: 10504 bytes left [ 36.218675][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.229387][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.247985][ T3549] loop0: detected capacity change from 0 to 512 [ 36.278884][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 36.378141][ T3561] loop0: detected capacity change from 0 to 2048 [ 36.414831][ T3563] netlink: 14 bytes leftover after parsing attributes in process `syz.1.39'. [ 36.437178][ T3561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.464119][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.499789][ T3300] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.526311][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.539617][ T3563] bond0 (unregistering): Released all slaves [ 36.589250][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.212301][ T3587] bridge0: port 3(vlan2) entered blocking state [ 37.218778][ T3587] bridge0: port 3(vlan2) entered disabled state [ 37.227163][ T3587] vlan2: entered allmulticast mode [ 37.232334][ T3587] team0: entered allmulticast mode [ 37.237586][ T3587] team_slave_0: entered allmulticast mode [ 37.243396][ T3587] team_slave_1: entered allmulticast mode [ 37.252343][ T3587] vlan2: entered promiscuous mode [ 37.257579][ T3587] team0: entered promiscuous mode [ 37.262641][ T3587] team_slave_0: entered promiscuous mode [ 37.268445][ T3587] team_slave_1: entered promiscuous mode [ 37.276653][ T3587] bridge0: port 3(vlan2) entered blocking state [ 37.283030][ T3587] bridge0: port 3(vlan2) entered forwarding state [ 37.385497][ T3591] loop3: detected capacity change from 0 to 1024 [ 37.418139][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.554706][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.560462][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.566179][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.571968][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.577717][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.583487][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.589219][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.595291][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.601086][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.606799][ T3601] blackhole_netdev_xmit(): Dropping skb. [ 37.750634][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.931117][ T3612] loop1: detected capacity change from 0 to 1024 [ 37.963041][ T3612] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.009559][ T3612] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.032288][ T3612] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.065276][ T3612] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 38.085167][ T3612] EXT4-fs (loop1): Remounting filesystem read-only [ 38.106247][ T3612] EXT4-fs (loop1): 1 orphan inode deleted [ 38.130082][ T3612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.168176][ T3612] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 38.190661][ T3612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.304110][ T3612] syz.1.53 (3612) used greatest stack depth: 9624 bytes left [ 38.487240][ T3622] loop4: detected capacity change from 0 to 512 [ 38.507170][ T3622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.521014][ T3622] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.545072][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.633770][ T3628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.700533][ T3628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.749215][ T3630] Illegal XDP return value 72192519 on prog (id 52) dev N/A, expect packet loss! [ 38.749507][ T3628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.800843][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 38.800857][ T29] audit: type=1400 audit(1737560821.850:336): avc: denied { cmd } for pid=3631 comm="syz.3.59" path="/14/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 38.838358][ T3628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.866000][ T3638] syzkaller0: entered allmulticast mode [ 38.866005][ T29] audit: type=1400 audit(1737560821.920:337): avc: denied { setopt } for pid=3637 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.898437][ T3628] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.908029][ T3638] syzkaller0 (unregistering): left allmulticast mode [ 38.948206][ T3628] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.960826][ T3628] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.972195][ T3628] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.020908][ T3642] loop2: detected capacity change from 0 to 512 [ 39.030323][ T3642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.037989][ T29] audit: type=1400 audit(1737560822.080:338): avc: denied { bind } for pid=3643 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.060250][ T29] audit: type=1400 audit(1737560822.100:339): avc: denied { listen } for pid=3643 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.061467][ T3642] EXT4-fs (loop2): 1 truncate cleaned up [ 39.079628][ T29] audit: type=1400 audit(1737560822.100:340): avc: denied { connect } for pid=3643 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.079658][ T29] audit: type=1400 audit(1737560822.100:341): avc: denied { write } for pid=3643 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.087543][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.168159][ T29] audit: type=1400 audit(1737560822.210:342): avc: denied { setattr } for pid=3641 comm="syz.2.63" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.195353][ T29] audit: type=1400 audit(1737560822.220:343): avc: denied { write } for pid=3641 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.216355][ T29] audit: type=1326 audit(1737560822.250:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 39.239649][ T29] audit: type=1326 audit(1737560822.250:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 39.342806][ T3652] syz.4.65 uses obsolete (PF_INET,SOCK_PACKET) [ 39.432818][ T3656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 39.442354][ T3656] bridge_slave_1: left allmulticast mode [ 39.448081][ T3656] bridge_slave_1: left promiscuous mode [ 39.453789][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.463955][ T3656] bridge_slave_0: left allmulticast mode [ 39.469693][ T3656] bridge_slave_0: left promiscuous mode [ 39.475506][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.668840][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.676486][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.684120][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.691619][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.699131][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.706600][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.714000][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.721520][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.728956][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.736400][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.743805][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.751250][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.758870][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.766444][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.773856][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.781339][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.788772][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.796205][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.803605][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.811111][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.818731][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.826171][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.833580][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.841258][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.848701][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.856210][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.863625][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.871087][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.878575][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.886045][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.893488][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.901074][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.908538][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.916748][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.924170][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.931692][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.939156][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.946619][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.954134][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.961654][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.969093][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.976620][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.984053][ T1052] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.992066][ T1052] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.232004][ T3642] syz.2.63 (3642) used greatest stack depth: 7176 bytes left [ 40.470574][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.669443][ T3673] loop2: detected capacity change from 0 to 512 [ 40.770478][ T3673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.73: bg 0: block 248: padding at end of block bitmap is not set [ 41.109509][ T3673] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.73: Failed to acquire dquot type 1 [ 41.175360][ T3673] EXT4-fs (loop2): 1 truncate cleaned up [ 41.196976][ T3673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.270754][ T3673] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.346801][ T3673] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 41.385550][ T3673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.499104][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.582016][ T3679] loop1: detected capacity change from 0 to 8192 [ 41.673038][ T3684] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.777281][ T3684] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.803257][ T3685] loop3: detected capacity change from 0 to 2048 [ 41.874975][ T3684] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.900403][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.940185][ T3684] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.987877][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.995379][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.002818][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.010333][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.017787][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.025252][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.032678][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.040203][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.047670][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.055077][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.062586][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.070015][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.077550][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.084964][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.092537][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.100004][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.107514][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.136926][ T3710] loop2: detected capacity change from 0 to 128 [ 42.495625][ T35] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.556788][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.689261][ T3726] macvlan2: entered promiscuous mode [ 42.694660][ T3726] bridge0: entered promiscuous mode [ 42.712853][ T3726] bridge0: port 3(macvlan2) entered blocking state [ 42.719511][ T3726] bridge0: port 3(macvlan2) entered disabled state [ 42.791413][ T3726] macvlan2: entered allmulticast mode [ 42.792594][ T3729] syz.1.91[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.796959][ T3726] bridge0: entered allmulticast mode [ 42.813610][ T3729] syz.1.91[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.813683][ T3729] syz.1.91[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.860986][ T3729] syz.1.91[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.020872][ T3717] loop2: detected capacity change from 0 to 32768 [ 43.040475][ T3726] macvlan2: left allmulticast mode [ 43.045708][ T3726] bridge0: left allmulticast mode [ 43.059890][ T3729] syz.1.91[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.059971][ T3729] syz.1.91[3729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.139180][ T3717] loop2: p1 p3 < p5 > [ 43.240106][ T3726] bridge0: left promiscuous mode [ 43.284129][ T3731] @: renamed from vlan0 (while UP) [ 43.373826][ T3738] block device autoloading is deprecated and will be removed. [ 43.382262][ T3738] syz.0.93: attempt to access beyond end of device [ 43.382262][ T3738] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 43.418132][ T3740] loop1: detected capacity change from 0 to 164 [ 43.440286][ T3740] Unable to read rock-ridge attributes [ 43.441383][ T3744] loop0: detected capacity change from 0 to 1024 [ 43.460422][ T3740] tipc: Started in network mode [ 43.465357][ T3740] tipc: Node identity ac14140f, cluster identity 4711 [ 43.481627][ T3740] tipc: New replicast peer: 10.1.1.2 [ 43.485902][ T3744] EXT4-fs: Ignoring removed orlov option [ 43.487102][ T3740] tipc: Enabled bearer , priority 10 [ 43.492683][ T3744] EXT4-fs: Ignoring removed orlov option [ 43.492703][ T3744] EXT4-fs: Ignoring removed oldalloc option [ 43.548508][ T3744] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.559546][ T3744] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 43.571274][ T3744] EXT4-fs (loop0): invalid journal inode [ 43.577015][ T3744] EXT4-fs (loop0): can't get journal size [ 43.587485][ T3744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.609759][ T3749] loop3: detected capacity change from 0 to 512 [ 43.616695][ T3744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.621594][ T3749] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.99: iget: bogus i_mode (0) [ 43.637769][ T3749] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.99: couldn't read orphan inode 17 (err -117) [ 43.650227][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.684521][ T3756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.100'. [ 43.729082][ T3759] loop0: detected capacity change from 0 to 2048 [ 43.733585][ T3761] loop1: detected capacity change from 0 to 2048 [ 43.742886][ T3759] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 43.752779][ T3759] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.764589][ T3759] EXT4-fs (loop0): failed to initialize system zone (-117) [ 43.773076][ T3759] EXT4-fs (loop0): mount failed [ 43.781976][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.789283][ T3761] Alternate GPT is invalid, using primary GPT. [ 43.797389][ T3761] loop1: p1 p2 p3 [ 43.902106][ T3684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.918725][ T3684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.929839][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 43.929852][ T29] audit: type=1326 audit(1737560826.980:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 43.932070][ T3684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.936140][ T29] audit: type=1326 audit(1737560826.980:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 43.982166][ T3684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.071021][ T29] audit: type=1326 audit(1737560827.050:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.094503][ T29] audit: type=1326 audit(1737560827.050:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.117789][ T29] audit: type=1326 audit(1737560827.050:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.141102][ T29] audit: type=1326 audit(1737560827.050:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.164432][ T29] audit: type=1326 audit(1737560827.050:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.188029][ T29] audit: type=1326 audit(1737560827.050:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.211562][ T29] audit: type=1326 audit(1737560827.050:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc52ffc5d29 code=0x7ffc0000 [ 44.235440][ T29] audit: type=1400 audit(1737560827.120:458): avc: denied { read } for pid=3774 comm="syz.4.106" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.393495][ T3783] netlink: 76 bytes leftover after parsing attributes in process `syz.2.108'. [ 44.487020][ T2963] tipc: Node number set to 2886997007 [ 44.568695][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.573118][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 44.747065][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 45.616779][ T3808] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 45.617148][ T3804] loop3: detected capacity change from 0 to 8192 [ 45.624989][ T3808] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 45.673116][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 45.688849][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.760986][ T3812] net_ratelimit: 595 callbacks suppressed [ 45.761003][ T3812] dccp_close: ABORT with 88 bytes unread [ 46.058500][ T3822] loop3: detected capacity change from 0 to 256 [ 46.110689][ T3822] FAT-fs (loop3): IO charset macturkish not found [ 46.963103][ T3832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.990585][ T3834] loop4: detected capacity change from 0 to 256 [ 47.048850][ T3834] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.079247][ T3832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.178800][ T3841] msdos: Unknown parameter '0x0000000000000000ÿÿ' [ 47.180757][ C1] hrtimer: interrupt took 31327 ns [ 47.204623][ T3832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.289071][ T3832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.380141][ T3832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.415946][ T3838] loop2: detected capacity change from 0 to 1024 [ 47.433479][ T3832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.498116][ T3832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.521339][ T3838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.575398][ T3832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.595786][ T3838] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.690647][ T3838] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.755583][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.900027][ T3855] loop2: detected capacity change from 0 to 512 [ 47.923674][ T3856] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.986905][ T3855] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 48.062152][ T3855] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.132: invalid indirect mapped block 2683928664 (level 1) [ 48.119644][ T3862] loop1: detected capacity change from 0 to 764 [ 48.139983][ T3855] EXT4-fs (loop2): Remounting filesystem read-only [ 48.147849][ T3862] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.153938][ T3855] EXT4-fs (loop2): 1 truncate cleaned up [ 48.162195][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.174775][ T3855] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 48.181633][ T3855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.214289][ T3862] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 48.387310][ T3834] syz.4.126 (3834) used greatest stack depth: 6320 bytes left [ 48.973146][ T3868] Set syz1 is full, maxelem 65536 reached [ 49.198640][ T3870] loop4: detected capacity change from 0 to 4096 [ 49.210587][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 49.210603][ T29] audit: type=1400 audit(1737560832.260:541): avc: denied { create } for pid=3873 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.269079][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.296812][ T29] audit: type=1400 audit(1737560832.290:542): avc: denied { ioctl } for pid=3873 comm="syz.3.140" path="socket:[6163]" dev="sockfs" ino=6163 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.321237][ T29] audit: type=1400 audit(1737560832.290:543): avc: denied { create } for pid=3873 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.340712][ T29] audit: type=1400 audit(1737560832.290:544): avc: denied { write } for pid=3873 comm="syz.3.140" path="socket:[6164]" dev="sockfs" ino=6164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.709873][ T3885] loop3: detected capacity change from 0 to 256 [ 49.760075][ T3885] FAT-fs (loop3): Directory bread(block 64) failed [ 49.771137][ T3887] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.785132][ T3885] FAT-fs (loop3): Directory bread(block 65) failed [ 49.815660][ T29] audit: type=1400 audit(1737560832.460:545): avc: denied { mount } for pid=3869 comm="syz.4.139" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.837286][ T29] audit: type=1400 audit(1737560832.460:546): avc: denied { write } for pid=3869 comm="syz.4.139" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.846994][ T3885] FAT-fs (loop3): Directory bread(block 66) failed [ 49.858807][ T29] audit: type=1400 audit(1737560832.460:547): avc: denied { add_name } for pid=3869 comm="syz.4.139" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.886051][ T29] audit: type=1400 audit(1737560832.460:548): avc: denied { create } for pid=3869 comm="syz.4.139" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.906293][ T29] audit: type=1400 audit(1737560832.460:549): avc: denied { read write } for pid=3869 comm="syz.4.139" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.928909][ T29] audit: type=1400 audit(1737560832.470:550): avc: denied { open } for pid=3869 comm="syz.4.139" path="/22/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.935131][ T3889] loop0: detected capacity change from 0 to 128 [ 49.951984][ T3885] FAT-fs (loop3): Directory bread(block 67) failed [ 49.964861][ T3885] FAT-fs (loop3): Directory bread(block 68) failed [ 49.971632][ T3885] FAT-fs (loop3): Directory bread(block 69) failed [ 49.978311][ T3885] FAT-fs (loop3): Directory bread(block 70) failed [ 49.984847][ T3885] FAT-fs (loop3): Directory bread(block 71) failed [ 49.997621][ T3885] FAT-fs (loop3): Directory bread(block 72) failed [ 50.004966][ T3885] FAT-fs (loop3): Directory bread(block 73) failed [ 50.017194][ T3887] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.084577][ T3885] Process accounting resumed [ 50.089970][ T3885] syz.3.142: attempt to access beyond end of device [ 50.089970][ T3885] loop3: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 50.108810][ T3885] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 326) [ 50.114494][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.116976][ T3885] FAT-fs (loop3): Filesystem has been set read-only [ 50.138273][ T3887] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.150102][ T3889] syz.0.144: attempt to access beyond end of device [ 50.150102][ T3889] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 50.178185][ T3887] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.285680][ T3900] loop2: detected capacity change from 0 to 256 [ 50.297942][ T3901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 50.317627][ T3901] vlan2: left allmulticast mode [ 50.322556][ T3901] team0: left allmulticast mode [ 50.327481][ T3901] team_slave_0: left allmulticast mode [ 50.332959][ T3901] team_slave_1: left allmulticast mode [ 50.338480][ T3901] vlan2: left promiscuous mode [ 50.343252][ T3901] team0: left promiscuous mode [ 50.348050][ T3901] team_slave_0: left promiscuous mode [ 50.353479][ T3901] team_slave_1: left promiscuous mode [ 50.359296][ T3901] bridge0: port 3(vlan2) entered disabled state [ 50.390710][ T3900] FAT-fs (loop2): IO charset macturkish not found [ 50.398320][ T3901] bridge_slave_1: left allmulticast mode [ 50.404012][ T3901] bridge_slave_1: left promiscuous mode [ 50.409813][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.410100][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 50.445963][ T3901] bridge_slave_0: left allmulticast mode [ 50.451712][ T3901] bridge_slave_0: left promiscuous mode [ 50.457520][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.899911][ T3912] loop0: detected capacity change from 0 to 512 [ 50.918580][ T3912] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.950044][ T3914] loop3: detected capacity change from 0 to 512 [ 50.967534][ T3912] EXT4-fs (loop0): 1 truncate cleaned up [ 50.973528][ T3914] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.982644][ T3914] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 50.991521][ T3912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.016568][ T3914] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 51.036632][ T3914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 51.055397][ T3914] System zones: 0-2, 18-18, 34-34 [ 51.067087][ T3914] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.112895][ T3914] EXT4-fs (loop3): 1 truncate cleaned up [ 51.120005][ T3914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.631062][ T3887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.648328][ T3887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.652606][ T3926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 51.660759][ T3887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.665396][ T3926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.154'. [ 51.696898][ T3887] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.080726][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.143545][ T3933] ip6gretap0: entered promiscuous mode [ 52.156855][ T3933] batadv_slave_0: entered promiscuous mode [ 52.166107][ T3933] ip6gretap0: left promiscuous mode [ 52.173372][ T3933] batadv_slave_0: left promiscuous mode [ 52.293948][ T3935] loop0: detected capacity change from 0 to 4096 [ 52.314871][ T3935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.479708][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.050792][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.562061][ T4016] Zero length message leads to an empty skb [ 53.673121][ T3989] loop0: detected capacity change from 0 to 2048 [ 54.046698][ T4030] loop1: detected capacity change from 0 to 256 [ 54.197665][ T4010] loop0: p1 < > p4 [ 54.324746][ T4010] loop0: p4 size 8388608 extends beyond EOD, truncated [ 54.339904][ T4030] FAT-fs (loop1): IO charset macturkish not found [ 54.670041][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 54.670055][ T29] audit: type=1326 audit(1737560837.720:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 54.699696][ T29] audit: type=1326 audit(1737560837.720:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 54.723058][ T29] audit: type=1326 audit(1737560837.720:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 54.746351][ T29] audit: type=1326 audit(1737560837.720:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 54.840474][ T4028] loop2: detected capacity change from 0 to 8192 [ 54.871653][ T3989] loop0: p1 < > p4 [ 54.876115][ T3989] loop0: p4 size 8388608 extends beyond EOD, truncated [ 55.024340][ T3989] loop0: p4 could not be added: -ENOMEM [ 55.536077][ T29] audit: type=1326 audit(1737560837.830:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 55.559351][ T29] audit: type=1326 audit(1737560837.830:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 55.582723][ T29] audit: type=1326 audit(1737560837.830:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 55.605895][ T29] audit: type=1326 audit(1737560837.830:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 55.629268][ T29] audit: type=1326 audit(1737560837.830:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 55.652568][ T29] audit: type=1326 audit(1737560837.860:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4034 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f04d4425d29 code=0x7ffc0000 [ 55.885032][ T4049] tipc: Started in network mode [ 55.890072][ T4049] tipc: Node identity ac14140f, cluster identity 4711 [ 55.898714][ T4049] tipc: New replicast peer: 10.1.1.2 [ 55.904122][ T4049] tipc: Enabled bearer , priority 10 [ 55.906751][ T4044] loop4: detected capacity change from 0 to 2048 [ 55.946387][ T4044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.049664][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.057219][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.064632][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.072081][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.079661][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.087192][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.094615][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.102094][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.109524][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.117010][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.124429][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.131912][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.139395][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.146880][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.154277][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.161769][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.169185][ T3373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.185581][ T3373] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 56.218864][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.361040][ T4069] loop4: detected capacity change from 0 to 512 [ 56.372485][ T4069] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 56.381851][ T4069] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.179: invalid indirect mapped block 2683928664 (level 1) [ 56.398003][ T4069] EXT4-fs (loop4): Remounting filesystem read-only [ 56.404633][ T4069] EXT4-fs (loop4): 1 truncate cleaned up [ 56.410897][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.424570][ T4069] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 56.471817][ T4069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.462600][ T3372] tipc: Node number set to 2886997007 [ 57.759859][ T4090] loop0: detected capacity change from 0 to 512 [ 57.797943][ T4090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.832688][ T4090] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.857040][ T4096] loop4: detected capacity change from 0 to 256 [ 57.865210][ T4095] syz.1.187[4095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.865355][ T4095] syz.1.187[4095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.907028][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 57.934080][ T4095] syz.1.187[4095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.990125][ T4099] pim6reg1: entered promiscuous mode [ 58.006895][ T4099] pim6reg1: entered allmulticast mode [ 58.154381][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.298407][ T4115] lo speed is unknown, defaulting to 1000 [ 58.304901][ T4115] lo speed is unknown, defaulting to 1000 [ 58.316460][ T4115] lo speed is unknown, defaulting to 1000 [ 58.434819][ T4115] infiniband syz0: set active [ 58.439704][ T4115] infiniband syz0: added lo [ 58.457980][ T4103] Set syz1 is full, maxelem 65536 reached [ 58.460407][ T3440] lo speed is unknown, defaulting to 1000 [ 58.487417][ T4115] RDS/IB: syz0: added [ 58.495282][ T4115] smc: adding ib device syz0 with port count 1 [ 58.508980][ T4115] smc: ib device syz0 port 1 has pnetid [ 58.518727][ T3373] lo speed is unknown, defaulting to 1000 [ 58.526796][ T4115] lo speed is unknown, defaulting to 1000 [ 58.603716][ T3305] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 58.645946][ T4115] lo speed is unknown, defaulting to 1000 [ 58.655322][ T3305] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 58.682034][ T4097] bond0: (slave syz_tun): Releasing backup interface [ 58.720195][ T4115] lo speed is unknown, defaulting to 1000 [ 58.754260][ T4115] lo speed is unknown, defaulting to 1000 [ 58.788616][ T4115] lo speed is unknown, defaulting to 1000 [ 58.822648][ T4115] lo speed is unknown, defaulting to 1000 [ 59.061015][ T4125] loop0: detected capacity change from 0 to 164 [ 59.151237][ T3977] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.172966][ T4125] syz.0.196: attempt to access beyond end of device [ 59.172966][ T4125] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 59.240228][ T4125] syz.0.196: attempt to access beyond end of device [ 59.240228][ T4125] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 59.272825][ T3977] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.283448][ T4130] xt_hashlimit: size too large, truncated to 1048576 [ 59.477662][ T3977] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.582879][ T3977] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.697399][ T4142] loop3: detected capacity change from 0 to 512 [ 59.829788][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 59.829811][ T29] audit: type=1326 audit(1737560842.880:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 59.861926][ T3977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.880647][ T4150] loop2: detected capacity change from 0 to 512 [ 59.896523][ T3977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.922481][ T4142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.925596][ T3977] bond0 (unregistering): Released all slaves [ 59.942700][ T29] audit: type=1326 audit(1737560842.910:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 59.966125][ T29] audit: type=1326 audit(1737560842.910:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 59.987037][ T3977] bond1 (unregistering): Released all slaves [ 59.989533][ T29] audit: type=1326 audit(1737560842.910:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.010756][ T3977] bond2 (unregistering): Released all slaves [ 60.018794][ T29] audit: type=1326 audit(1737560842.910:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.048206][ T29] audit: type=1326 audit(1737560842.910:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.071447][ T29] audit: type=1326 audit(1737560842.910:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.078422][ T4142] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.094727][ T29] audit: type=1326 audit(1737560842.910:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.128543][ T29] audit: type=1326 audit(1737560842.920:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.151854][ T29] audit: type=1326 audit(1737560842.930:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4149 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 60.207502][ T4131] lo speed is unknown, defaulting to 1000 [ 60.326091][ T4131] chnl_net:caif_netlink_parms(): no params data found [ 60.438851][ T3977] hsr_slave_0: left promiscuous mode [ 60.502972][ T3977] hsr_slave_1: left promiscuous mode [ 60.517588][ T3977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.525074][ T3977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.534348][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.546884][ T3977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.554333][ T3977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.610376][ T3977] veth1_macvtap: left promiscuous mode [ 60.615966][ T3977] veth0_macvtap: left promiscuous mode [ 60.621520][ T3977] veth1_vlan: left promiscuous mode [ 60.626852][ T3977] veth0_vlan: left promiscuous mode [ 60.773965][ T4176] loop3: detected capacity change from 0 to 512 [ 60.781576][ T4176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.792554][ T4176] EXT4-fs (loop3): 1 truncate cleaned up [ 60.798720][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.808203][ T4164] Set syz1 is full, maxelem 65536 reached [ 60.838632][ T4179] loop2: detected capacity change from 0 to 128 [ 60.865901][ T3977] team0 (unregistering): Port device team_slave_1 removed [ 60.876703][ T3977] team0 (unregistering): Port device team_slave_0 removed [ 60.921816][ T4179] syz.2.219: attempt to access beyond end of device [ 60.921816][ T4179] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 61.045263][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.052396][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.063962][ T4131] bridge_slave_0: entered allmulticast mode [ 61.070793][ T4131] bridge_slave_0: entered promiscuous mode [ 61.077736][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.084839][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.092057][ T4131] bridge_slave_1: entered allmulticast mode [ 61.098652][ T4131] bridge_slave_1: entered promiscuous mode [ 61.197070][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.211199][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.245906][ T4131] team0: Port device team_slave_0 added [ 61.253089][ T4131] team0: Port device team_slave_1 added [ 61.283577][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.290613][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.316698][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.414246][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.421258][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.447329][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.747790][ T4131] hsr_slave_0: entered promiscuous mode [ 61.768487][ T4131] hsr_slave_1: entered promiscuous mode [ 61.809289][ T4131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.840947][ T4131] Cannot create hsr debugfs directory [ 62.074511][ T4198] loop2: detected capacity change from 0 to 512 [ 62.097977][ T4131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.098080][ T4198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.207498][ T4198] EXT4-fs (loop2): 1 truncate cleaned up [ 62.211598][ T4131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.217188][ T4198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.273195][ T4203] lo speed is unknown, defaulting to 1000 [ 62.279185][ T4131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.299701][ T4131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.357110][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.399173][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.417867][ T3980] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.424958][ T3980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.466578][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.473676][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.510125][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.833767][ T4227] loop0: detected capacity change from 0 to 128 [ 62.868340][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.920282][ T4227] syz.0.223: attempt to access beyond end of device [ 62.920282][ T4227] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 62.943107][ T4227] syz.0.223: attempt to access beyond end of device [ 62.943107][ T4227] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 63.017007][ T4234] syz.0.223: attempt to access beyond end of device [ 63.017007][ T4234] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.039365][ T4227] syz.0.223: attempt to access beyond end of device [ 63.039365][ T4227] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.052776][ T4227] syz.0.223: attempt to access beyond end of device [ 63.052776][ T4227] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.066235][ T4227] syz.0.223: attempt to access beyond end of device [ 63.066235][ T4227] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.080058][ T4227] syz.0.223: attempt to access beyond end of device [ 63.080058][ T4227] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 63.337991][ T4131] veth0_vlan: entered promiscuous mode [ 63.404779][ T4131] veth1_vlan: entered promiscuous mode [ 63.424915][ T4131] veth0_macvtap: entered promiscuous mode [ 63.439482][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 63.445917][ T4131] veth1_macvtap: entered promiscuous mode [ 63.459066][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.469633][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.479572][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.490087][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.500108][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.510716][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.556035][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.566990][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.577519][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.587516][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.597988][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.608057][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.618570][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.661825][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.673102][ T4131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.682143][ T4131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.691054][ T4131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.699799][ T4131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.985465][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.742360][ T4266] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 64.905688][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 64.905707][ T29] audit: type=1400 audit(1737560847.920:882): avc: denied { bind } for pid=4269 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.949962][ T29] audit: type=1400 audit(1737560847.990:883): avc: denied { setopt } for pid=4269 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.952570][ T4274] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.969805][ T29] audit: type=1400 audit(1737560847.990:884): avc: denied { create } for pid=4272 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.978756][ T4274] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.997989][ T29] audit: type=1326 audit(1737560848.000:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 64.998023][ T29] audit: type=1326 audit(1737560848.000:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 64.998052][ T29] audit: type=1326 audit(1737560848.000:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 64.998081][ T29] audit: type=1326 audit(1737560848.000:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 64.998121][ T29] audit: type=1326 audit(1737560848.000:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 64.998152][ T29] audit: type=1326 audit(1737560848.000:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 64.998179][ T29] audit: type=1326 audit(1737560848.000:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0c965d29 code=0x7ffc0000 [ 65.006966][ T4274] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.007020][ T4274] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.007675][ T4274] vxlan0: entered promiscuous mode [ 65.192778][ T4274] vxlan0: entered allmulticast mode [ 65.205351][ T4274] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.214418][ T4274] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.223423][ T4274] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.232427][ T4274] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.258896][ T4282] loop1: detected capacity change from 0 to 512 [ 65.266984][ T4282] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.278860][ T4286] tipc: Started in network mode [ 65.283841][ T4286] tipc: Node identity ac14140f, cluster identity 4711 [ 65.289638][ T4282] EXT4-fs (loop1): 1 truncate cleaned up [ 65.291176][ T4286] tipc: New replicast peer: 10.1.1.2 [ 65.301621][ T4286] tipc: Enabled bearer , priority 10 [ 65.307858][ T4282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.504805][ T4294] loop2: detected capacity change from 0 to 8192 [ 65.609463][ T4294] ================================================================== [ 65.617614][ T4294] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 65.625718][ T4294] [ 65.628084][ T4294] write to 0xffff8881249820b0 of 8 bytes by task 4301 on cpu 0: [ 65.635820][ T4294] filemap_splice_read+0x6c4/0x910 [ 65.640971][ T4294] splice_direct_to_actor+0x269/0x670 [ 65.646398][ T4294] do_splice_direct+0xd7/0x150 [ 65.651199][ T4294] do_sendfile+0x398/0x660 [ 65.655639][ T4294] __x64_sys_sendfile64+0x110/0x150 [ 65.660858][ T4294] x64_sys_call+0xfbd/0x2dc0 [ 65.665462][ T4294] do_syscall_64+0xc9/0x1c0 [ 65.670003][ T4294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.675930][ T4294] [ 65.678264][ T4294] write to 0xffff8881249820b0 of 8 bytes by task 4294 on cpu 1: [ 65.686079][ T4294] filemap_splice_read+0x6c4/0x910 [ 65.691238][ T4294] splice_direct_to_actor+0x269/0x670 [ 65.696654][ T4294] do_splice_direct+0xd7/0x150 [ 65.701495][ T4294] do_sendfile+0x398/0x660 [ 65.705938][ T4294] __x64_sys_sendfile64+0x110/0x150 [ 65.711162][ T4294] x64_sys_call+0xfbd/0x2dc0 [ 65.715780][ T4294] do_syscall_64+0xc9/0x1c0 [ 65.720338][ T4294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.726284][ T4294] [ 65.728612][ T4294] value changed: 0x0000000000000067 -> 0x0000000000000068 [ 65.735728][ T4294] [ 65.738065][ T4294] Reported by Kernel Concurrency Sanitizer on: [ 65.744247][ T4294] CPU: 1 UID: 0 PID: 4294 Comm: syz.2.241 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 65.754589][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.764673][ T4294] ================================================================== [ 66.325400][ T8] tipc: Node number set to 2886997007 [ 66.348962][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.