last executing test programs: 1.451570213s ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 1.405643978s ago: executing program 4 (id=196): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.21642215s ago: executing program 2 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x0, 0x0, 0x80, 0x0, 0x2}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x890) 1.166660566s ago: executing program 0 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000200)="c67f0d7df974", 0x6}], 0x2) 1.156026127s ago: executing program 2 (id=215): prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1.12636168s ago: executing program 2 (id=217): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = epoll_create(0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.100091843s ago: executing program 0 (id=219): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.072780437s ago: executing program 0 (id=220): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 1.012029424s ago: executing program 0 (id=223): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000540)=0x100) 534.449479ms ago: executing program 1 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 522.3226ms ago: executing program 3 (id=243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xac, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 496.681723ms ago: executing program 1 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x4) 489.877504ms ago: executing program 4 (id=245): creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x500, 0x0, 0x0, r1, 0x0}]) 487.256064ms ago: executing program 3 (id=246): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x360, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) 405.671523ms ago: executing program 1 (id=247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r2}, 0x38) 376.630047ms ago: executing program 3 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) 372.688887ms ago: executing program 1 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e0000000000000000000000000040000000000000000000000000000000000000000000380002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000020000000000000000000000000000000000000000000000008"], 0xb0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 324.164423ms ago: executing program 4 (id=250): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2200c12, &(0x7f0000001180)=ANY=[@ANYBLOB="636865636b3d7374726963742c686964652c6d61703d6f66662c626c6f636b3d3078303030303030303030303030303430302c6f76657272696465726f636b7065726d2c756e686964652c00d2ac359f3e85f4cd8c0afa6a95c1bd7402d912e136047947a79d3b59eb5f964b02085c9bb9a0c029d4b056911eb3e79d9cb4ca775372a918bc293476c5c3e4ec6f73085cb1493ebd2d3299a206412d20805d4c5be231dc9a1520e74d3dab4abe7a22c59b03d14451876929575b71538a15a5b19ccfb890fa"], 0x1, 0x9f1, &(0x7f0000000180)="$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") mount$nfs(&(0x7f0000000100)='.*.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 314.330044ms ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) 308.325244ms ago: executing program 1 (id=252): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 291.936827ms ago: executing program 3 (id=253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) 260.97123ms ago: executing program 2 (id=254): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x32ac, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x26}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x1e) 225.331324ms ago: executing program 2 (id=255): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaabaaaaaaabbbfbbbbbbbb08004500005800000000062f"], 0x0) 217.221545ms ago: executing program 3 (id=256): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chdir(&(0x7f000009df00)='./file0\x00') syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz72twjAYBdCbl2cl6RiBNajSsQH7MANMQEvBhsgockAsgBDSOYWvr3+KL3zXZVrW/7eT8z1/SYaUpJQk422XOUm/PpinpPZJt5Rtef7bt3j1DH1K17abFsecxozrda05XD86GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8iEcAAAD//7J4CYI=") 152.724693ms ago: executing program 4 (id=257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 82.328611ms ago: executing program 1 (id=258): unshare(0x480) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x50) 76.146031ms ago: executing program 0 (id=259): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000001580)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1440}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) 65.358703ms ago: executing program 4 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x4000000000004}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 58.795183ms ago: executing program 2 (id=261): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x10000003, 0x7, 0x0, 0x9, 0x8b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 0s ago: executing program 0 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="45f7000000000000000032000000040006"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): [ 22.204549][ T29] audit: type=1400 audit(1730108448.299:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 27.578621][ T29] audit: type=1400 audit(1730108453.669:82): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.579889][ T3303] cgroup: Unknown subsys name 'net' [ 27.601366][ T29] audit: type=1400 audit(1730108453.679:83): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.628730][ T29] audit: type=1400 audit(1730108453.699:84): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.749921][ T3303] cgroup: Unknown subsys name 'cpuset' [ 27.756058][ T3303] cgroup: Unknown subsys name 'rlimit' [ 27.923390][ T29] audit: type=1400 audit(1730108454.019:85): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.948958][ T29] audit: type=1400 audit(1730108454.019:86): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.968363][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.969391][ T29] audit: type=1400 audit(1730108454.019:87): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.998336][ T29] audit: type=1400 audit(1730108454.019:88): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.000903][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.018707][ T29] audit: type=1400 audit(1730108454.029:89): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.052186][ T29] audit: type=1400 audit(1730108454.029:90): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.075620][ T29] audit: type=1400 audit(1730108454.069:91): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.158031][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.166818][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.226930][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.264420][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.271590][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.278943][ T3313] bridge_slave_0: entered allmulticast mode [ 29.285240][ T3313] bridge_slave_0: entered promiscuous mode [ 29.293067][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.300181][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.307527][ T3313] bridge_slave_1: entered allmulticast mode [ 29.313950][ T3313] bridge_slave_1: entered promiscuous mode [ 29.345791][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.352944][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.360168][ T3314] bridge_slave_0: entered allmulticast mode [ 29.366404][ T3314] bridge_slave_0: entered promiscuous mode [ 29.372989][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.380060][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.387192][ T3314] bridge_slave_1: entered allmulticast mode [ 29.393778][ T3314] bridge_slave_1: entered promiscuous mode [ 29.415685][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.445570][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.462011][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.471181][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.478250][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.485535][ T3319] bridge_slave_0: entered allmulticast mode [ 29.491947][ T3319] bridge_slave_0: entered promiscuous mode [ 29.498501][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.515302][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.524450][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.531536][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.538862][ T3319] bridge_slave_1: entered allmulticast mode [ 29.545384][ T3319] bridge_slave_1: entered promiscuous mode [ 29.568890][ T3313] team0: Port device team_slave_0 added [ 29.574645][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.595711][ T3313] team0: Port device team_slave_1 added [ 29.609796][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.622010][ T3314] team0: Port device team_slave_0 added [ 29.639340][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.646303][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.672334][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.683963][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.693313][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.700347][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.726331][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.739768][ T3314] team0: Port device team_slave_1 added [ 29.769234][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.776310][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.783459][ T3322] bridge_slave_0: entered allmulticast mode [ 29.789933][ T3322] bridge_slave_0: entered promiscuous mode [ 29.806592][ T3319] team0: Port device team_slave_0 added [ 29.816619][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.823704][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.830889][ T3322] bridge_slave_1: entered allmulticast mode [ 29.837420][ T3322] bridge_slave_1: entered promiscuous mode [ 29.854597][ T3319] team0: Port device team_slave_1 added [ 29.864826][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.871893][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.897880][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.909347][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.916336][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.942340][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.962168][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.969270][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.976441][ T3317] bridge_slave_0: entered allmulticast mode [ 29.982767][ T3317] bridge_slave_0: entered promiscuous mode [ 29.989726][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.996801][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.004009][ T3317] bridge_slave_1: entered allmulticast mode [ 30.010448][ T3317] bridge_slave_1: entered promiscuous mode [ 30.024044][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.031098][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.057112][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.074478][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.097382][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.104374][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.130373][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.145273][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.161426][ T3313] hsr_slave_0: entered promiscuous mode [ 30.167463][ T3313] hsr_slave_1: entered promiscuous mode [ 30.174658][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.185711][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.237532][ T3319] hsr_slave_0: entered promiscuous mode [ 30.243722][ T3319] hsr_slave_1: entered promiscuous mode [ 30.249631][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.257181][ T3319] Cannot create hsr debugfs directory [ 30.264856][ T3314] hsr_slave_0: entered promiscuous mode [ 30.271815][ T3314] hsr_slave_1: entered promiscuous mode [ 30.277711][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.285312][ T3314] Cannot create hsr debugfs directory [ 30.300985][ T3317] team0: Port device team_slave_0 added [ 30.307416][ T3322] team0: Port device team_slave_0 added [ 30.314007][ T3322] team0: Port device team_slave_1 added [ 30.331142][ T3317] team0: Port device team_slave_1 added [ 30.362185][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.369244][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.395249][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.413163][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.420231][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.446170][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.457257][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.464270][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.490281][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.507765][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.514772][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.540738][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.600339][ T3322] hsr_slave_0: entered promiscuous mode [ 30.606364][ T3322] hsr_slave_1: entered promiscuous mode [ 30.612410][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.620000][ T3322] Cannot create hsr debugfs directory [ 30.639558][ T3317] hsr_slave_0: entered promiscuous mode [ 30.645608][ T3317] hsr_slave_1: entered promiscuous mode [ 30.651744][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.659400][ T3317] Cannot create hsr debugfs directory [ 30.780540][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.788798][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.804532][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.820507][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.838164][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.846503][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.855669][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.866068][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.890784][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.903130][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.923381][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.932612][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.956313][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.976694][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.985794][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.995520][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.016790][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.028066][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.036976][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.051322][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.068117][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.111794][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.123544][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.136837][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.143943][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.153413][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.160518][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.194932][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.216863][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.231183][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.238331][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.247054][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.254117][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.267428][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.284954][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.292076][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.306580][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.315448][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.329847][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336950][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.355067][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.365510][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.391653][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.404200][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.414603][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.443794][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.463350][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.470530][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.479856][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.486981][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.514827][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.521926][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.533488][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.546112][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.554373][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.561565][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.575150][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.592052][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.709192][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.733563][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.765045][ T3319] veth0_vlan: entered promiscuous mode [ 31.797949][ T3319] veth1_vlan: entered promiscuous mode [ 31.832776][ T3313] veth0_vlan: entered promiscuous mode [ 31.845458][ T3319] veth0_macvtap: entered promiscuous mode [ 31.864050][ T3319] veth1_macvtap: entered promiscuous mode [ 31.873962][ T3313] veth1_vlan: entered promiscuous mode [ 31.885797][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.911385][ T3314] veth0_vlan: entered promiscuous mode [ 31.920906][ T3314] veth1_vlan: entered promiscuous mode [ 31.939001][ T3313] veth0_macvtap: entered promiscuous mode [ 31.946605][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.956186][ T3313] veth1_macvtap: entered promiscuous mode [ 31.968302][ T3322] veth0_vlan: entered promiscuous mode [ 31.975623][ T3319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.984460][ T3319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.993232][ T3319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.001950][ T3319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.027917][ T3317] veth0_vlan: entered promiscuous mode [ 32.036608][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.047095][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.058336][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.066554][ T3322] veth1_vlan: entered promiscuous mode [ 32.075115][ T3314] veth0_macvtap: entered promiscuous mode [ 32.085121][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.095669][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.106191][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.115536][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.124386][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.133121][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.141847][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.155651][ T3314] veth1_macvtap: entered promiscuous mode [ 32.165024][ T3317] veth1_vlan: entered promiscuous mode [ 32.186291][ T3322] veth0_macvtap: entered promiscuous mode [ 32.198030][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.198204][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.208504][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.208516][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.208555][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.210569][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.261954][ T3322] veth1_macvtap: entered promiscuous mode [ 32.289476][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.300269][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.310192][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.320688][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.330584][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.341097][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.343042][ T3453] loop1: detected capacity change from 0 to 8192 [ 32.355272][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.362570][ T3453] ======================================================= [ 32.362570][ T3453] WARNING: The mand mount option has been deprecated and [ 32.362570][ T3453] and is ignored by this kernel. Remove the mand [ 32.362570][ T3453] option from the mount to silence this warning. [ 32.362570][ T3453] ======================================================= [ 32.365505][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.409840][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.419711][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.421577][ T3453] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.430148][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.431594][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.477432][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.487979][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.497815][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.508258][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.518234][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.528844][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.541076][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.554786][ T3317] veth0_macvtap: entered promiscuous mode [ 32.561612][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.570430][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.579220][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588075][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.607219][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.616029][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.622946][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 32.623029][ T29] audit: type=1400 audit(1730108458.709:132): avc: denied { name_bind } for pid=3459 comm="syz.0.1" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.624754][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.630830][ T29] audit: type=1400 audit(1730108458.709:133): avc: denied { node_bind } for pid=3459 comm="syz.0.1" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.652132][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.664477][ T3460] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 32.687465][ T3317] veth1_macvtap: entered promiscuous mode [ 32.715678][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.726505][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.736415][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.746872][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.756712][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.767202][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.777082][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.787530][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.798305][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.806729][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.817300][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.827215][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.837889][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.848002][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.858616][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.868486][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.878995][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.889736][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.897068][ T3458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 32.905836][ T3458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 32.925839][ T3462] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 32.933465][ T3462] netlink: 'syz.0.8': attribute type 2 has an invalid length. [ 32.941885][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.950784][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.959626][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.968388][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.060687][ T29] audit: type=1400 audit(1730108459.159:134): avc: denied { create } for pid=3472 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.094529][ T3476] loop4: detected capacity change from 0 to 1024 [ 33.123060][ T3476] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 33.147873][ T29] audit: type=1400 audit(1730108459.169:135): avc: denied { map_create } for pid=3472 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.166813][ T29] audit: type=1400 audit(1730108459.169:136): avc: denied { map_read map_write } for pid=3472 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.186364][ T29] audit: type=1400 audit(1730108459.179:137): avc: denied { bind } for pid=3470 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.205435][ T29] audit: type=1400 audit(1730108459.179:138): avc: denied { node_bind } for pid=3470 comm="syz.1.12" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 33.226524][ T29] audit: type=1400 audit(1730108459.179:139): avc: denied { connect } for pid=3470 comm="syz.1.12" laddr=224.0.0.1 lport=34424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.248327][ T29] audit: type=1400 audit(1730108459.179:140): avc: denied { name_connect } for pid=3470 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 33.268258][ T29] audit: type=1400 audit(1730108459.179:141): avc: denied { create } for pid=3474 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.293904][ T3479] loop2: detected capacity change from 0 to 8192 [ 33.303502][ T3476] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5: Invalid block bitmap block 0 in block_group 0 [ 33.331513][ T3476] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.5: Failed to acquire dquot type 0 [ 33.349699][ T3476] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.5: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.367068][ T3476] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5: Invalid inode bitmap blk 0 in block_group 0 [ 33.380237][ T3425] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:7: Failed to release dquot type 0 [ 33.394958][ T3476] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 33.404417][ T3476] EXT4-fs (loop4): 1 orphan inode deleted [ 33.412041][ T3476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.459043][ T3476] syz.4.5 (3476) used greatest stack depth: 9672 bytes left [ 33.499272][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.574063][ T3500] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.582937][ T3500] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.647490][ T3513] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 33.647490][ T3513] program syz.2.26 not setting count and/or reply_len properly [ 33.698174][ T3517] loop4: detected capacity change from 0 to 1024 [ 33.738256][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.766713][ T3525] SELinux: policydb version 0 does not match my version range 15-33 [ 33.777775][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.781796][ T3525] SELinux: failed to load policy [ 33.824250][ T3532] tipc: Started in network mode [ 33.829207][ T3532] tipc: Node identity 7f000001, cluster identity 4711 [ 33.837504][ T3532] tipc: Enabled bearer , priority 10 [ 33.846337][ T3534] netlink: 68 bytes leftover after parsing attributes in process `syz.1.37'. [ 33.855282][ T3534] netlink: 68 bytes leftover after parsing attributes in process `syz.1.37'. [ 34.058764][ T3569] tipc: Started in network mode [ 34.063690][ T3569] tipc: Node identity 7f000001, cluster identity 4711 [ 34.071894][ T3569] tipc: Enabled bearer , priority 10 [ 34.197177][ T3588] netlink: 332 bytes leftover after parsing attributes in process `syz.2.63'. [ 34.210009][ T3588] netlink: 'syz.2.63': attribute type 9 has an invalid length. [ 34.217586][ T3588] netlink: 108 bytes leftover after parsing attributes in process `syz.2.63'. [ 34.226587][ T3588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.63'. [ 34.324640][ T3602] tipc: Started in network mode [ 34.329618][ T3602] tipc: Node identity 7f000001, cluster identity 4711 [ 34.336888][ T3602] tipc: Enabled bearer , priority 10 [ 34.373927][ T3612] loop4: detected capacity change from 0 to 128 [ 34.381168][ T3611] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 34.417417][ T3613] loop0: detected capacity change from 0 to 1024 [ 34.424890][ T3613] EXT4-fs: Ignoring removed nobh option [ 34.433359][ T3613] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.463513][ T3613] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.72: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 34.482971][ T3626] loop1: detected capacity change from 0 to 512 [ 34.490031][ T3626] EXT4-fs: Ignoring removed oldalloc option [ 34.493115][ T3613] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.72: couldn't read orphan inode 11 (err -117) [ 34.497993][ T3628] loop2: detected capacity change from 0 to 256 [ 34.514732][ T3626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.527350][ T3613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.527847][ T3626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.557214][ T3613] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.72: Invalid block bitmap block 0 in block_group 0 [ 34.571006][ T3613] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.72: Failed to acquire dquot type 0 [ 34.586340][ T3613] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.72: Invalid inode table block 8589934593 in block_group 0 [ 34.611412][ T3626] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.622084][ T3628] Process accounting resumed [ 34.630933][ T3626] EXT4-fs (loop1): 1 truncate cleaned up [ 34.636959][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.677516][ T266] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 34.684783][ T3639] loop3: detected capacity change from 0 to 512 [ 34.698204][ T3639] EXT4-fs: Ignoring removed oldalloc option [ 34.704941][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.714767][ T3639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.725478][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.741670][ T3639] EXT4-fs (loop3): 1 truncate cleaned up [ 34.748109][ T3639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.776796][ T3650] loop0: detected capacity change from 0 to 256 [ 34.780392][ T3648] tipc: Started in network mode [ 34.788017][ T3648] tipc: Node identity 7f000001, cluster identity 4711 [ 34.796199][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.796600][ T3648] tipc: Enabled bearer , priority 10 [ 34.805424][ T3645] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 34.817948][ T3645] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 34.825560][ T3645] vhci_hcd vhci_hcd.0: Device attached [ 34.848683][ T3651] vhci_hcd: connection closed [ 34.848932][ T28] vhci_hcd: stop threads [ 34.857973][ T28] vhci_hcd: release socket [ 34.862479][ T28] vhci_hcd: disconnect device [ 34.867497][ T3392] tipc: Node number set to 2130706433 [ 34.915020][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 34.974077][ T3677] netlink: 'syz.2.98': attribute type 13 has an invalid length. [ 35.005353][ T3683] tipc: Started in network mode [ 35.010347][ T3683] tipc: Node identity 7f000001, cluster identity 4711 [ 35.019190][ T3683] tipc: Enabled bearer , priority 10 [ 35.096285][ T3702] syz.3.113[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.096351][ T3702] syz.3.113[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.111468][ T3702] syz.3.113[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.176134][ T3716] syz.4.122[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.187924][ T3714] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in; [ 35.187924][ T3714] program syz.0.119 not setting count and/or reply_len properly [ 35.188612][ T3716] syz.4.122[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.199293][ T9] tipc: Node number set to 2130706433 [ 35.218128][ T3716] syz.4.122[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.251562][ T3718] vlan2: entered allmulticast mode [ 35.268275][ T3718] bond0: entered allmulticast mode [ 35.273460][ T3718] bond_slave_0: entered allmulticast mode [ 35.279327][ T3718] bond_slave_1: entered allmulticast mode [ 35.286683][ T3718] bridge0: port 3(vlan2) entered blocking state [ 35.293069][ T3718] bridge0: port 3(vlan2) entered disabled state [ 35.301014][ T3718] vlan2: entered promiscuous mode [ 35.306111][ T3718] bond0: entered promiscuous mode [ 35.311205][ T3718] bond_slave_0: entered promiscuous mode [ 35.317062][ T3718] bond_slave_1: entered promiscuous mode [ 35.330546][ T3718] bridge0: port 3(vlan2) entered blocking state [ 35.336853][ T3718] bridge0: port 3(vlan2) entered forwarding state [ 35.349498][ T24] tipc: Node number set to 2130706433 [ 35.412375][ T3735] loop1: detected capacity change from 0 to 2048 [ 35.442010][ T3735] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 35.453813][ T3735] System zones: 0-7 [ 35.458299][ T3735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.497325][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.531941][ T3756] SELinux: Context system_u:object_r:hald_dccm_exec_t:s0 is not valid (left unmapped). [ 35.560912][ T3755] xt_hashlimit: max too large, truncated to 1048576 [ 35.575797][ T3753] syz.1.137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.619112][ T3770] syz.3.145 uses obsolete (PF_INET,SOCK_PACKET) [ 35.727770][ T3790] mmap: syz.4.156 (3790): VmData 29093888 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 35.788383][ T3800] loop3: detected capacity change from 0 to 2048 [ 35.803175][ T3800] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.839472][ T3800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.908852][ T3389] tipc: Node number set to 2130706433 [ 36.075102][ T3820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.138664][ T9] tipc: Node number set to 2130706433 [ 36.241989][ T3800] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.161: bg 0: block 234: padding at end of block bitmap is not set [ 36.278282][ T3800] EXT4-fs (loop3): Remounting filesystem read-only [ 36.314109][ T3816] EXT4-fs (loop3): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 36.324466][ T3830] sctp: [Deprecated]: syz.0.172 (pid 3830) Use of int in max_burst socket option deprecated. [ 36.324466][ T3830] Use struct sctp_assoc_value instead [ 36.513415][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.614992][ T3863] Illegal XDP return value 4294967274 on prog (id 111) dev syz_tun, expect packet loss! [ 37.040157][ T3930] SELinux: Context Ü is not valid (left unmapped). [ 37.063541][ T3933] tipc: Enabling of bearer rejected, failed to enable media [ 37.640487][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 37.640505][ T29] audit: type=1400 audit(1730108462.890:339): avc: denied { mount } for pid=3984 comm="syz.1.244" name="/" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.672725][ T29] audit: type=1400 audit(1730108462.890:340): avc: denied { read } for pid=3984 comm="syz.1.244" name="/" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.694703][ T29] audit: type=1400 audit(1730108462.890:341): avc: denied { open } for pid=3984 comm="syz.1.244" path="/56/file0" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.717661][ T29] audit: type=1400 audit(1730108462.920:342): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.759722][ T3995] process 'syz.1.249' launched './file0' with NULL argv: empty string added [ 37.769155][ T29] audit: type=1400 audit(1730108463.020:343): avc: denied { execute_no_trans } for pid=3993 comm="syz.1.249" path="/58/file0" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.826638][ T3998] loop4: detected capacity change from 0 to 1764 [ 37.838882][ T29] audit: type=1400 audit(1730108463.080:344): avc: denied { mount } for pid=3996 comm="syz.4.250" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 37.870099][ T4001] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.879184][ T4001] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.888047][ T4001] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.896806][ T4001] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.902397][ T4009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.913166][ T4011] loop2: detected capacity change from 0 to 512 [ 37.914538][ T4001] vxlan0: entered promiscuous mode [ 37.925480][ T4001] vxlan0: entered allmulticast mode [ 37.931204][ T4009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.937865][ T4011] EXT4-fs: Ignoring removed oldalloc option [ 37.946584][ T4011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.970152][ T29] audit: type=1400 audit(1730108463.220:345): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 38.014240][ T4011] EXT4-fs (loop2): 1 truncate cleaned up [ 38.019062][ T4009] loop3: detected capacity change from 0 to 8192 [ 38.026030][ T4011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.038867][ T4015] netlink: 'syz.4.257': attribute type 4 has an invalid length. [ 38.065220][ T29] audit: type=1400 audit(1730108463.310:346): avc: denied { bind } for pid=4017 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.087346][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.088030][ T4009] loop3: p1 < > p2 < p5 > p4 [ 38.103079][ T4009] loop3: p4 size 16776960 extends beyond EOD, truncated [ 38.110620][ T4009] loop3: p5 size 16776960 extends beyond EOD, truncated [ 38.124508][ T3317] ================================================================== [ 38.132705][ T3317] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_block_update_hint_alloc [ 38.141438][ T3317] [ 38.143787][ T3317] read-write to 0xffffffff88be03ac of 4 bytes by task 3313 on cpu 1: [ 38.151856][ T3317] pcpu_block_update_hint_alloc+0x5db/0x6a0 [ 38.157769][ T3317] pcpu_alloc_area+0x488/0x4b0 [ 38.162545][ T3317] pcpu_alloc_noprof+0x4bb/0x10a0 [ 38.167586][ T3317] xt_percpu_counter_alloc+0x79/0x110 [ 38.172992][ T3317] translate_table+0x921/0xf70 [ 38.177785][ T3317] do_ipt_set_ctl+0x7bd/0x8b0 [ 38.182556][ T3317] nf_setsockopt+0x195/0x1b0 [ 38.187169][ T3317] ip_setsockopt+0xea/0x100 [ 38.191679][ T3317] tcp_setsockopt+0x93/0xb0 [ 38.196198][ T3317] sock_common_setsockopt+0x64/0x80 [ 38.201421][ T3317] __sys_setsockopt+0x1cc/0x240 [ 38.206292][ T3317] __x64_sys_setsockopt+0x66/0x80 [ 38.211332][ T3317] x64_sys_call+0x278d/0x2d60 [ 38.216023][ T3317] do_syscall_64+0xc9/0x1c0 [ 38.220547][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.226463][ T3317] [ 38.228788][ T3317] read to 0xffffffff88be03ac of 4 bytes by task 3317 on cpu 0: [ 38.236330][ T3317] pcpu_alloc_noprof+0x9b6/0x10a0 [ 38.241378][ T3317] xt_percpu_counter_alloc+0x79/0x110 [ 38.246773][ T3317] translate_table+0x921/0xf70 [ 38.251568][ T3317] do_ipt_set_ctl+0x7bd/0x8b0 [ 38.256247][ T3317] nf_setsockopt+0x195/0x1b0 [ 38.260864][ T3317] ip_setsockopt+0xea/0x100 [ 38.265374][ T3317] tcp_setsockopt+0x93/0xb0 [ 38.269889][ T3317] sock_common_setsockopt+0x64/0x80 [ 38.275097][ T3317] __sys_setsockopt+0x1cc/0x240 [ 38.279961][ T3317] __x64_sys_setsockopt+0x66/0x80 [ 38.285020][ T3317] x64_sys_call+0x278d/0x2d60 [ 38.289711][ T3317] do_syscall_64+0xc9/0x1c0 [ 38.294220][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.300132][ T3317] [ 38.302456][ T3317] value changed: 0x0000007a -> 0x00000079 [ 38.308168][ T3317] [ 38.310491][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 38.316645][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted 6.12.0-rc5-syzkaller #0 [ 38.325757][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.335813][ T3317] ================================================================== [ 38.758001][ T29] audit: type=1400 audit(1730108464.000:347): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1