last executing test programs: 4.0936186s ago: executing program 1 (id=11): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0xce22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) 2.407055773s ago: executing program 2 (id=49): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x800, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x58, 0x0, 0xffffffffffffffff, &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file1/file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) 2.316348007s ago: executing program 2 (id=52): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x1, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10300) 2.26134596s ago: executing program 2 (id=55): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.207596702s ago: executing program 2 (id=58): r0 = inotify_init() r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) close_range(r0, 0xffffffffffffffff, 0x0) 2.127757476s ago: executing program 2 (id=62): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1.821282661s ago: executing program 3 (id=70): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) 1.690685367s ago: executing program 4 (id=75): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 1.562555154s ago: executing program 4 (id=77): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) 1.43525474s ago: executing program 4 (id=79): syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x200000, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]}) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1.382443562s ago: executing program 1 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="92ddc31c3936"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.271084668s ago: executing program 3 (id=81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x7ffffffe) 1.246246649s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000002540)={[{@mode}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1.219696621s ago: executing program 1 (id=83): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f0000000380)='ceph\x00', 0x0, &(0x7f0000000640)="01", 0x1, 0xffffffffffffffff) 1.174262133s ago: executing program 3 (id=84): r0 = syz_io_uring_setup(0x499, &(0x7f00000000c0)={0x0, 0x79af, 0x3181, 0x9, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x14, 0x3, @fd, 0x7, 0x0, 0x0, 0x8, 0x1, {0x1}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.144260414s ago: executing program 4 (id=86): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.057908818s ago: executing program 2 (id=87): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x25) 1.050400859s ago: executing program 3 (id=88): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x8000000) r0 = semget(0x3, 0x1, 0x3c4) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x3800}], 0x1, 0x0) 926.183125ms ago: executing program 0 (id=92): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0xffff}}, 0x14) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x40000) 896.313236ms ago: executing program 0 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 863.052838ms ago: executing program 0 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 777.796892ms ago: executing program 0 (id=95): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x8917}, @val={0x3, 0x80, 0x4, 0xa465, 0x400, 0xa49a}, @ipv4=@tipc={{0x6, 0x4, 0x2, 0x5, 0x94, 0x66, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x844, 0x0, 0x0, 0x8d, 0x1, 0x2, 0x4e24, 0x4e21, 0x1, 0x2, 0x0, 0x0, 0x1}, [{0x0, 0x1000, 0x1e, 0xcf42, 0xbe13, 0x5, 0x6, 0xc7}, {0xffffff72, 0x1, 0x8, 0x9, 0x27, 0x7, 0x6, 0xffff}, {0xe30, 0x10, 0x5, 0x861, 0x6, 0x5, 0x8, 0x8000}]}}}, 0xa2) 254.803058ms ago: executing program 1 (id=96): mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x320c8d4, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@overriderock}, {@hide}, {@check_strict}, {}, {@gid}, {@cruft}, {@overriderock}, {@utf8}]}, 0x1, 0xa22, &(0x7f0000000dc0)="$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") move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 249.861228ms ago: executing program 4 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010027bd700403dcdf2500000000", @ANYRES32=r2, @ANYBLOB="30ce0600016803004c001280110001006272696467655f736c6176650000000034000580050009000000000005000600010000100500070201000000050008000000000005001b"], 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 207.67574ms ago: executing program 3 (id=98): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) lseek(r0, 0x2004, 0x0) 165.265552ms ago: executing program 0 (id=99): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 146.031963ms ago: executing program 1 (id=100): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000007ab0edc83b01000000100000", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 126.327874ms ago: executing program 4 (id=101): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) 110.077945ms ago: executing program 0 (id=102): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5de, &(0x7f00000011c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x6c140, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 0s ago: executing program 1 (id=103): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a6, 0x0, 0x0, 0x0, 0x1}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}, {0x85, 0x0, 0x0, 0xbba}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000140)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf") kernel console output (not intermixed with test programs): [ 25.901616][ T28] audit: type=1400 audit(1773831943.315:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.924230][ T28] audit: type=1400 audit(1773831943.315:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.948306][ T28] audit: type=1400 audit(1773831943.315:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.973067][ T28] audit: type=1400 audit(1773831943.315:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.999310][ T28] audit: type=1400 audit(1773831943.325:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 32.681531][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 32.681555][ T28] audit: type=1400 audit(1773831950.095:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.712055][ T28] audit: type=1400 audit(1773831950.125:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.714745][ T3298] cgroup: Unknown subsys name 'net' [ 32.740978][ T28] audit: type=1400 audit(1773831950.155:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.837431][ T3298] cgroup: Unknown subsys name 'cpuset' [ 32.844093][ T3298] cgroup: Unknown subsys name 'rlimit' [ 32.954971][ T28] audit: type=1400 audit(1773831950.365:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.979774][ T28] audit: type=1400 audit(1773831950.365:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.013771][ T28] audit: type=1400 audit(1773831950.365:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.034869][ T28] audit: type=1400 audit(1773831950.365:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.056778][ T28] audit: type=1400 audit(1773831950.365:77): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.056877][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.087586][ T28] audit: type=1400 audit(1773831950.405:78): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.113112][ T28] audit: type=1400 audit(1773831950.405:79): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.148772][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.117722][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.155769][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.215304][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.252171][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.287178][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.294885][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.302440][ T3312] bridge_slave_0: entered allmulticast mode [ 35.309476][ T3312] bridge_slave_0: entered promiscuous mode [ 35.319122][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.326494][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.333990][ T3312] bridge_slave_1: entered allmulticast mode [ 35.340746][ T3312] bridge_slave_1: entered promiscuous mode [ 35.357923][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.369541][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.377810][ T3314] bridge_slave_0: entered allmulticast mode [ 35.384822][ T3314] bridge_slave_0: entered promiscuous mode [ 35.391859][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.416695][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.424104][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.431733][ T3314] bridge_slave_1: entered allmulticast mode [ 35.438389][ T3314] bridge_slave_1: entered promiscuous mode [ 35.481779][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.498763][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.506675][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.516064][ T3311] bridge_slave_0: entered allmulticast mode [ 35.524574][ T3311] bridge_slave_0: entered promiscuous mode [ 35.536000][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.548318][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.562550][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.571203][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.579836][ T3311] bridge_slave_1: entered allmulticast mode [ 35.588357][ T3311] bridge_slave_1: entered promiscuous mode [ 35.600783][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.640058][ T3312] team0: Port device team_slave_0 added [ 35.660526][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.668821][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.676338][ T3318] bridge_slave_0: entered allmulticast mode [ 35.683415][ T3318] bridge_slave_0: entered promiscuous mode [ 35.695763][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.703551][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.712021][ T3318] bridge_slave_1: entered allmulticast mode [ 35.720251][ T3318] bridge_slave_1: entered promiscuous mode [ 35.728832][ T3312] team0: Port device team_slave_1 added [ 35.735514][ T3314] team0: Port device team_slave_0 added [ 35.744771][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.765755][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.773711][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.784158][ T3317] bridge_slave_0: entered allmulticast mode [ 35.790820][ T3317] bridge_slave_0: entered promiscuous mode [ 35.803287][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.811236][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.820613][ T3317] bridge_slave_1: entered allmulticast mode [ 35.827246][ T3317] bridge_slave_1: entered promiscuous mode [ 35.835597][ T3314] team0: Port device team_slave_1 added [ 35.848055][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.874216][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.881705][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.912924][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.931991][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.939391][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.968418][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.987400][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.002891][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.010360][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.039062][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.059302][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.074679][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.085868][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.106642][ T3317] team0: Port device team_slave_0 added [ 36.113285][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.120680][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.147554][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.160764][ T3311] team0: Port device team_slave_0 added [ 36.171551][ T3317] team0: Port device team_slave_1 added [ 36.197438][ T3311] team0: Port device team_slave_1 added [ 36.204350][ T3318] team0: Port device team_slave_0 added [ 36.216300][ T3318] team0: Port device team_slave_1 added [ 36.229335][ T3312] hsr_slave_0: entered promiscuous mode [ 36.235801][ T3312] hsr_slave_1: entered promiscuous mode [ 36.261797][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.269449][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.297018][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.309109][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.316239][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.344418][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.370299][ T3314] hsr_slave_0: entered promiscuous mode [ 36.376955][ T3314] hsr_slave_1: entered promiscuous mode [ 36.383438][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.389764][ T3314] Cannot create hsr debugfs directory [ 36.401800][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.409140][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.435987][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.447520][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.454957][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.483111][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.496045][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.503566][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.532202][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.546524][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.553610][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.581129][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.620805][ T3317] hsr_slave_0: entered promiscuous mode [ 36.627779][ T3317] hsr_slave_1: entered promiscuous mode [ 36.634635][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.640967][ T3317] Cannot create hsr debugfs directory [ 36.676608][ T3318] hsr_slave_0: entered promiscuous mode [ 36.683421][ T3318] hsr_slave_1: entered promiscuous mode [ 36.690398][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.696549][ T3318] Cannot create hsr debugfs directory [ 36.708453][ T3311] hsr_slave_0: entered promiscuous mode [ 36.714740][ T3311] hsr_slave_1: entered promiscuous mode [ 36.721134][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.726900][ T3311] Cannot create hsr debugfs directory [ 36.939634][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.949557][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.959543][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.971095][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.997823][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.017595][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.031014][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.040740][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.063437][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.080614][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.093282][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.103272][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.147380][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.158112][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.168132][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.190105][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.198583][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.234959][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.249797][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.268415][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.276873][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.287100][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.296533][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.320380][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.329472][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.336889][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.347143][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.354453][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.375508][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.383124][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.401287][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.409815][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.416994][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.444100][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.458044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.466281][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.489763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.497590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.538610][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.583204][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.610028][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.624442][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.639283][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.653486][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.662015][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.676350][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.702498][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.714559][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.722914][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.745823][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.753262][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.783041][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.790574][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.804671][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.822158][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.834007][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.867948][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.971199][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.001853][ T3314] veth0_vlan: entered promiscuous mode [ 38.034288][ T3314] veth1_vlan: entered promiscuous mode [ 38.064707][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.089398][ T3318] veth0_vlan: entered promiscuous mode [ 38.099093][ T3318] veth1_vlan: entered promiscuous mode [ 38.109991][ T3314] veth0_macvtap: entered promiscuous mode [ 38.145739][ T3314] veth1_macvtap: entered promiscuous mode [ 38.154149][ T3318] veth0_macvtap: entered promiscuous mode [ 38.164912][ T3318] veth1_macvtap: entered promiscuous mode [ 38.196559][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.210193][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.231198][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.242857][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.256247][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.271581][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.291370][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.307474][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.321444][ T3312] veth0_vlan: entered promiscuous mode [ 38.328881][ T3317] veth0_vlan: entered promiscuous mode [ 38.344498][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.356841][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.366869][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.377904][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.401569][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.401586][ T28] audit: type=1400 audit(1773831955.815:90): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.4PWSG7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.434887][ T28] audit: type=1400 audit(1773831955.845:91): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.458925][ T3317] veth1_vlan: entered promiscuous mode [ 38.462389][ T28] audit: type=1400 audit(1773831955.845:92): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.4PWSG7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.477717][ T3312] veth1_vlan: entered promiscuous mode [ 38.496407][ T28] audit: type=1400 audit(1773831955.845:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.519770][ T28] audit: type=1400 audit(1773831955.855:94): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.F9Uaxv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.547929][ T3311] veth0_vlan: entered promiscuous mode [ 38.555098][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.558968][ T3311] veth1_vlan: entered promiscuous mode [ 38.595704][ T3312] veth0_macvtap: entered promiscuous mode [ 38.601625][ T28] audit: type=1400 audit(1773831955.855:95): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.F9Uaxv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.634982][ T28] audit: type=1400 audit(1773831955.855:96): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.643904][ T3317] veth0_macvtap: entered promiscuous mode [ 38.661010][ T28] audit: type=1400 audit(1773831955.915:97): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.670245][ T3312] veth1_macvtap: entered promiscuous mode [ 38.694978][ T28] audit: type=1400 audit(1773831955.915:98): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.726521][ T3317] veth1_macvtap: entered promiscuous mode [ 38.739131][ T28] audit: type=1400 audit(1773831956.145:99): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.799465][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.821978][ T3311] veth0_macvtap: entered promiscuous mode [ 38.843058][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.858639][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.875009][ T3311] veth1_macvtap: entered promiscuous mode [ 38.889933][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.936787][ T351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.953038][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.966638][ T351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977472][ T351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.019344][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.027956][ T351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.038877][ T351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.049623][ T3494] loop2: detected capacity change from 0 to 256 [ 39.068020][ T351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.080428][ T351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.097591][ T3494] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.135550][ T351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.140811][ T3494] FAT-fs (loop2): Directory bread(block 64) failed [ 39.152905][ T3494] FAT-fs (loop2): Directory bread(block 65) failed [ 39.178520][ T1625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.196095][ T1625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.196139][ T3494] FAT-fs (loop2): Directory bread(block 66) failed [ 39.205244][ T1625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.233993][ T3494] FAT-fs (loop2): Directory bread(block 67) failed [ 39.244070][ T3503] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.257763][ T3494] FAT-fs (loop2): Directory bread(block 68) failed [ 39.264906][ T3494] FAT-fs (loop2): Directory bread(block 69) failed [ 39.275760][ T3494] FAT-fs (loop2): Directory bread(block 70) failed [ 39.282768][ T3494] FAT-fs (loop2): Directory bread(block 71) failed [ 39.290869][ T3494] FAT-fs (loop2): Directory bread(block 72) failed [ 39.298383][ T3494] FAT-fs (loop2): Directory bread(block 73) failed [ 39.366590][ T1625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.528135][ T3513] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 39.584895][ T3515] batman_adv: batadv0: Adding interface: dummy0 [ 39.603352][ T3515] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.703880][ T3515] batman_adv: batadv0: Interface activated: dummy0 [ 40.089380][ T3537] netlink: 556 bytes leftover after parsing attributes in process `syz.0.25'. [ 40.174809][ T3544] loop0: detected capacity change from 0 to 128 [ 40.197414][ T3544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 40.224559][ T3544] System zones: 1-3, 19-19, 35-36 [ 40.231537][ T3544] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.282800][ T3544] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.353348][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.386658][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 40.556219][ T3566] ======================================================= [ 40.556219][ T3566] WARNING: The mand mount option has been deprecated and [ 40.556219][ T3566] and is ignored by this kernel. Remove the mand [ 40.556219][ T3566] option from the mount to silence this warning. [ 40.556219][ T3566] ======================================================= [ 40.625569][ T3571] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 40.716055][ T3578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 40.729940][ T3575] syz.2.42 (3575) used greatest stack depth: 9344 bytes left [ 40.738699][ T3578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 40.815094][ T3587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.179543][ T3620] loop3: detected capacity change from 0 to 4096 [ 41.222668][ T3620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.389881][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.453728][ T3639] loop0: detected capacity change from 0 to 256 [ 41.567272][ T3649] loop0: detected capacity change from 0 to 512 [ 41.721655][ T3654] loop0: detected capacity change from 0 to 512 [ 41.777346][ T3654] EXT4-fs: Ignoring removed oldalloc option [ 41.827812][ T3654] EXT4-fs (loop0): 1 truncate cleaned up [ 41.851861][ T3654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.071466][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.071747][ T3674] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 42.489743][ T3698] sg_write: data in/out 294879/120 bytes for SCSI command 0x0-- guessing data in; [ 42.489743][ T3698] program syz.0.95 not setting count and/or reply_len properly [ 42.985802][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 42.998689][ T3701] loop1: detected capacity change from 0 to 1764 [ 43.018822][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.114211][ T3713] loop0: detected capacity change from 0 to 1024 [ 43.123146][ T3713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.143629][ T3713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 43.156116][ T3713] System zones: 0-1, 3-36 [ 43.164604][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.179898][ T3711] loop4: detected capacity change from 0 to 8192 [ 43.208041][ T3001] ================================================================== [ 43.216630][ T3001] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 43.224265][ T3001] [ 43.227236][ T3001] read-write to 0xffff8881080eb180 of 4 bytes by task 3305 on cpu 0: [ 43.235426][ T3001] d_delete+0xbe/0xe0 [ 43.239505][ T3001] d_delete_notify+0x32/0x100 [ 43.242773][ T3713] Invalid ELF header magic: != ELF [ 43.244399][ T3001] vfs_unlink+0x289/0x490 [ 43.254224][ T3001] filename_unlinkat+0x1e2/0x410 [ 43.259399][ T3001] __se_sys_unlink+0x2b/0xe0 [ 43.264491][ T3001] __x64_sys_unlink+0x1f/0x30 [ 43.269785][ T3001] x64_sys_call+0x2eb6/0x3020 [ 43.274616][ T3001] do_syscall_64+0x12c/0x370 [ 43.279574][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.286270][ T3001] [ 43.288616][ T3001] read to 0xffff8881080eb180 of 4 bytes by task 3001 on cpu 1: [ 43.296692][ T3001] step_into_slowpath+0xea/0x4c0 [ 43.302312][ T3001] path_lookupat+0x330/0x500 [ 43.307305][ T3001] filename_lookup+0x190/0x390 [ 43.312402][ T3001] do_readlinkat+0x74/0x2f0 [ 43.317743][ T3001] __x64_sys_readlink+0x47/0x60 [ 43.323093][ T3001] x64_sys_call+0x2b51/0x3020 [ 43.327990][ T3001] do_syscall_64+0x12c/0x370 [ 43.333687][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.340764][ T3001] [ 43.343740][ T3001] value changed: 0x00300180 -> 0x00004080 [ 43.350552][ T3001] [ 43.353264][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 43.359772][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 43.369544][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.381176][ T3001] ================================================================== [ 43.405518][ T3711] syz.4.101: attempt to access beyond end of device [ 43.405518][ T3711] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 43.430186][ T3711] Buffer I/O error on dev loop4, logical block 57847, async page read [ 43.444422][ T3711] syz.4.101: attempt to access beyond end of device [ 43.444422][ T3711] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 43.460247][ T3711] Buffer I/O error on dev loop4, logical block 57847, async page read [ 43.469829][ T3711] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 43.478668][ T3711] FAT-fs (loop4): Filesystem has been set read-only [ 43.486717][ T3711] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 43.488807][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.206375][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.208451][ T3682] Bluetooth: hci0: command 0x1003 tx timeout