last executing test programs: 1.440812426s ago: executing program 2 (id=3): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) clock_settime(0xfffffffb, &(0x7f0000000140)) set_mempolicy(0x4000, &(0x7f0000000040), 0x8) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8c7751b1d4986a52}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x4, 0x1, 0x0, 0x0, 0x7, 0x57be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x5}, 0x1000, 0x10000, 0x8, 0x1, 0x5, 0x2020022, 0xb, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.116159296s ago: executing program 3 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x609, 0xe, 0x0, &(0x7f0000001240)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000240012800c0001006d6163766c616e00140002800800030003000000080001000800000008000500", @ANYRES32=r2, @ANYBLOB="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"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) 1.018887001s ago: executing program 4 (id=5): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]}, 0x78) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0x5b) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c0002400000000000000001"], 0x80}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000100000000000000000000000000000000000000000000000000000feffffff0000000000000000000020000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) io_uring_enter(r12, 0x706a, 0xc499, 0x2, &(0x7f0000000280)={[0x6]}, 0x8) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000c748aa0b1c001a8018000a8014000700200100000000000000000000000000001400350077673100000000000000000000000000080004"], 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004051}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x200, 0x10000, 0x8, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x12000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 957.726595ms ago: executing program 1 (id=2): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) sendmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@canfd={{0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "60d66442c383b99ff8958c81f27a361bbd10d1bf5b654e6534620a6356df58324595c1a2161da843ee2fdf1707b95fa88dc9627cd4d9e73e95020997942fbf64"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000095) sendmsg$can_raw(r1, 0x0, 0x8005) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) r2 = io_uring_setup(0x1133, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x119}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x11, &(0x7f00000002c0), 0x2) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x10}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000580)) sendmsg$ETHTOOL_MSG_WOL_GET(r6, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x100000000000000) 887.353459ms ago: executing program 2 (id=9): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x10890) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fcntl$setstatus(r0, 0x4, 0x42c00) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000002c0)={0x7, 0x7, 0xf78, 0xff, 0x1, 0x3}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 883.365539ms ago: executing program 3 (id=10): r0 = socket(0xa, 0x3, 0xff) r1 = syz_socket_connect_nvme_tcp() r2 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r2, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)={0x33, 0xc, 0x1, 0xc7, 0x0, [@mcast2, @mcast2, @empty, @rand_addr=' \x01\x00', @local, @loopback]}, 0x68) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [], "554001294af7376b"}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) 877.774149ms ago: executing program 1 (id=11): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x300000000000000) 675.226012ms ago: executing program 2 (id=14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xff4}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4, 0x0, 0x7}, 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000400)) 583.834317ms ago: executing program 0 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x5e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffe, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) 484.342922ms ago: executing program 3 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x34c}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xffffffff80000019, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4004}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) 450.107874ms ago: executing program 1 (id=18): syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x18002}, 0x20000010) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x448, &(0x7f0000000e40)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000889}, 0x4c004) 364.487239ms ago: executing program 3 (id=19): semop(0x0, &(0x7f0000000000)=[{0x4, 0x3, 0x1800}], 0x1) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800fff80400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 363.807379ms ago: executing program 0 (id=20): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f000000a300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000009040)={0x0, 0x40, 0x4, 0x4c, 0x9, 0xb6e}, 0x14) r0 = socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a000000000000ffffff80000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 349.999581ms ago: executing program 3 (id=21): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)='%pB \x00'}, 0x20) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df4, 0x40, 0x0, 0x132}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r2, 0xffffffffffffffff, 0x0) open$dir(0x0, 0xc402, 0x0) 131.404523ms ago: executing program 3 (id=22): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000808000240000000030c000480070001005b0000000c000380050001007b0000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f00000027c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) 84.606376ms ago: executing program 0 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000040000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f"], 0xb0}}, 0x80) 860.38µs ago: executing program 0 (id=24): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xb88}}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000b00)=""/71, 0x43, 0x47, 0x1, 0x746}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x4, 0x1, 0x7, 0xa, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x20, 0x1, 0x80000000}}) setrlimit(0x0, &(0x7f0000000100)={0x9, 0xe9f}) 140.06µs ago: executing program 0 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x2400c081) 0s ago: executing program 0 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x2e, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): [ 23.163762][ T29] audit: type=1400 audit(1769780715.467:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.185769][ T29] audit: type=1400 audit(1769780715.467:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.208359][ T29] audit: type=1400 audit(1769780715.467:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.231642][ T29] audit: type=1400 audit(1769780715.467:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.254746][ T29] audit: type=1400 audit(1769780715.477:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. [ 27.482997][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 27.483014][ T29] audit: type=1400 audit(1769780719.787:70): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.512167][ T29] audit: type=1400 audit(1769780719.817:71): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.514470][ T3281] cgroup: Unknown subsys name 'net' [ 27.540023][ T29] audit: type=1400 audit(1769780719.847:72): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.636031][ T3281] cgroup: Unknown subsys name 'cpuset' [ 27.642318][ T3281] cgroup: Unknown subsys name 'rlimit' [ 27.773740][ T29] audit: type=1400 audit(1769780720.077:73): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.802496][ T29] audit: type=1400 audit(1769780720.087:74): avc: denied { create } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.823004][ T29] audit: type=1400 audit(1769780720.087:75): avc: denied { write } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.843413][ T29] audit: type=1400 audit(1769780720.087:76): avc: denied { read } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.855324][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.863845][ T29] audit: type=1400 audit(1769780720.107:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.893265][ T29] audit: type=1400 audit(1769780720.107:78): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.918084][ T29] audit: type=1400 audit(1769780720.107:79): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.979110][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.131009][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.166337][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.232359][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.239628][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.247141][ T3312] bridge_slave_0: entered allmulticast mode [ 29.253598][ T3312] bridge_slave_0: entered promiscuous mode [ 29.265909][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.278980][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.286098][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.295114][ T3312] bridge_slave_1: entered allmulticast mode [ 29.301924][ T3312] bridge_slave_1: entered promiscuous mode [ 29.330377][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.373001][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.399787][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.406996][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.414327][ T3308] bridge_slave_0: entered allmulticast mode [ 29.421108][ T3308] bridge_slave_0: entered promiscuous mode [ 29.428684][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.451648][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.458819][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.466173][ T3308] bridge_slave_1: entered allmulticast mode [ 29.472688][ T3308] bridge_slave_1: entered promiscuous mode [ 29.488470][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.510765][ T3312] team0: Port device team_slave_0 added [ 29.516438][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.523540][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.530754][ T3315] bridge_slave_0: entered allmulticast mode [ 29.537515][ T3315] bridge_slave_0: entered promiscuous mode [ 29.547889][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.565300][ T3312] team0: Port device team_slave_1 added [ 29.571042][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.578160][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.585502][ T3315] bridge_slave_1: entered allmulticast mode [ 29.592050][ T3315] bridge_slave_1: entered promiscuous mode [ 29.608018][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.654872][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.662044][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.669285][ T3313] bridge_slave_0: entered allmulticast mode [ 29.675741][ T3313] bridge_slave_0: entered promiscuous mode [ 29.683206][ T3308] team0: Port device team_slave_0 added [ 29.692472][ T3308] team0: Port device team_slave_1 added [ 29.699263][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.708926][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.715976][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.741994][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.752772][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.759874][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.767151][ T3313] bridge_slave_1: entered allmulticast mode [ 29.773600][ T3313] bridge_slave_1: entered promiscuous mode [ 29.787935][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.802102][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.809102][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.835072][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.856108][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.863180][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.889192][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.904966][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.912002][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.937999][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.969154][ T3315] team0: Port device team_slave_0 added [ 29.976136][ T3315] team0: Port device team_slave_1 added [ 29.983621][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.994001][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.001131][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.008486][ T3307] bridge_slave_0: entered allmulticast mode [ 30.015031][ T3307] bridge_slave_0: entered promiscuous mode [ 30.022496][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.029699][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.036985][ T3307] bridge_slave_1: entered allmulticast mode [ 30.043686][ T3307] bridge_slave_1: entered promiscuous mode [ 30.065552][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.082710][ T3312] hsr_slave_0: entered promiscuous mode [ 30.088909][ T3312] hsr_slave_1: entered promiscuous mode [ 30.120524][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.130004][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.137289][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.163291][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.191831][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.204397][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.211506][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.237487][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.251346][ T3313] team0: Port device team_slave_0 added [ 30.262043][ T3308] hsr_slave_0: entered promiscuous mode [ 30.268141][ T3308] hsr_slave_1: entered promiscuous mode [ 30.274041][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.279841][ T3308] Cannot create hsr debugfs directory [ 30.295521][ T3313] team0: Port device team_slave_1 added [ 30.317647][ T3307] team0: Port device team_slave_0 added [ 30.329842][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.336875][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.362886][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.375000][ T3307] team0: Port device team_slave_1 added [ 30.395696][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.402705][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.428884][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.465549][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.472578][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.498780][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.512941][ T3315] hsr_slave_0: entered promiscuous mode [ 30.519161][ T3315] hsr_slave_1: entered promiscuous mode [ 30.525133][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.530863][ T3315] Cannot create hsr debugfs directory [ 30.566446][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.573429][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.599432][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.649867][ T3313] hsr_slave_0: entered promiscuous mode [ 30.655939][ T3313] hsr_slave_1: entered promiscuous mode [ 30.661862][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 30.667634][ T3313] Cannot create hsr debugfs directory [ 30.707907][ T3307] hsr_slave_0: entered promiscuous mode [ 30.713948][ T3307] hsr_slave_1: entered promiscuous mode [ 30.719957][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 30.725834][ T3307] Cannot create hsr debugfs directory [ 30.807833][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.816923][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.833847][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.850348][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.901890][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.911186][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.921429][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.930555][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.976734][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.985747][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.998967][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.009108][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.047768][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.057911][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.070383][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.077959][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.087110][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.112633][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.126196][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.146104][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.153267][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.170150][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.178663][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.185771][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.195928][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.214092][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.223107][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.235930][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.243074][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.258168][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.276659][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.283738][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.354155][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.367891][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.379331][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.396028][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.409189][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.416373][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.426193][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.433298][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.464899][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.472040][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.482677][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.489802][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.513792][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.546321][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.556115][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.579332][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.594534][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.622658][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.629866][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.648525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.655626][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.715032][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.729842][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.812972][ T3312] veth0_vlan: entered promiscuous mode [ 31.836172][ T3312] veth1_vlan: entered promiscuous mode [ 31.856902][ T3308] veth0_vlan: entered promiscuous mode [ 31.870834][ T3308] veth1_vlan: entered promiscuous mode [ 31.881833][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.894695][ T3312] veth0_macvtap: entered promiscuous mode [ 31.912798][ T3312] veth1_macvtap: entered promiscuous mode [ 31.955503][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.974996][ T3313] veth0_vlan: entered promiscuous mode [ 31.985521][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.008380][ T3313] veth1_vlan: entered promiscuous mode [ 32.014865][ T3308] veth0_macvtap: entered promiscuous mode [ 32.023623][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.046096][ T3308] veth1_macvtap: entered promiscuous mode [ 32.059600][ T3313] veth0_macvtap: entered promiscuous mode [ 32.079418][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.094040][ T3307] veth0_vlan: entered promiscuous mode [ 32.101757][ T3313] veth1_macvtap: entered promiscuous mode [ 32.122170][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.131877][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.145190][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.164330][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.181042][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.189738][ T3307] veth1_vlan: entered promiscuous mode [ 32.212087][ T3315] veth0_vlan: entered promiscuous mode [ 32.219385][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.229787][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.246092][ T3315] veth1_vlan: entered promiscuous mode [ 32.254338][ T3453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.277957][ T3479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.302772][ T3307] veth0_macvtap: entered promiscuous mode [ 32.309868][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.335507][ T3307] veth1_macvtap: entered promiscuous mode [ 32.343801][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353333][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362576][ T3315] veth0_macvtap: entered promiscuous mode [ 32.371041][ T3315] veth1_macvtap: entered promiscuous mode [ 32.378789][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.398668][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.432636][ T3326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.441765][ T3481] loop0: detected capacity change from 0 to 512 [ 32.448248][ T3326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.458680][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.467789][ T3481] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.481375][ T3481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.515416][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.537868][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.546965][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.556070][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.572281][ T3481] EXT4-fs (loop0): 1 truncate cleaned up [ 32.579552][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.582486][ T3481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.598393][ T3489] loop3: detected capacity change from 0 to 1024 [ 32.612315][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 32.612409][ T29] audit: type=1400 audit(1769780724.917:114): avc: denied { mount } for pid=3480 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.626966][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.650404][ T3489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.668011][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.674158][ T3490] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 32.714525][ T3494] netlink: 'syz.0.6': attribute type 30 has an invalid length. [ 32.724897][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.724906][ T29] audit: type=1400 audit(1769780725.007:115): avc: denied { create } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 32.734139][ T29] audit: type=1400 audit(1769780725.007:116): avc: denied { write } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 32.734172][ T29] audit: type=1400 audit(1769780725.007:117): avc: denied { add_name } for pid=3487 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.756107][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.774676][ T29] audit: type=1400 audit(1769780725.007:118): avc: denied { create } for pid=3487 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.823666][ T29] audit: type=1400 audit(1769780725.017:119): avc: denied { read write open } for pid=3487 comm="syz.3.4" path="/0/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.846959][ T29] audit: type=1400 audit(1769780725.017:120): avc: denied { lock } for pid=3487 comm="syz.3.4" path="/0/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.850822][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.869007][ T29] audit: type=1400 audit(1769780725.017:121): avc: denied { setattr } for pid=3487 comm="syz.3.4" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.869042][ T29] audit: type=1400 audit(1769780725.017:122): avc: denied { remove_name } for pid=3487 comm="syz.3.4" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.921647][ T29] audit: type=1400 audit(1769780725.017:123): avc: denied { rename } for pid=3487 comm="syz.3.4" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.956609][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.971801][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.982545][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.037860][ T3495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.101531][ T3500] Illegal XDP return value 4294967262 on prog (id 3) dev N/A, expect packet loss! [ 33.121360][ T3497] loop0: detected capacity change from 0 to 512 [ 33.147029][ T3504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.155415][ T3497] Zero length message leads to an empty skb [ 33.186152][ T3508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.251220][ T3508] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 33.281146][ T3516] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 33.290190][ T3514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.296143][ T3517] loop2: detected capacity change from 0 to 4096 [ 33.332153][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.333979][ T3521] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 33.376620][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.383884][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.422261][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.424058][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.438984][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.496860][ T3514] vlan2: entered allmulticast mode [ 33.502055][ T3514] vlan1: entered allmulticast mode [ 33.507250][ T3514] veth0_vlan: entered allmulticast mode [ 33.517666][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.537438][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.575532][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.598615][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.621114][ T3504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.709794][ T3541] loop1: detected capacity change from 0 to 512 [ 33.729193][ T3541] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.749410][ T3541] EXT4-fs (loop1): 1 truncate cleaned up [ 33.768137][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.771730][ C0] hrtimer: interrupt took 93096 ns [ 33.804253][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.848879][ T3559] ip6_vti0: entered allmulticast mode [ 34.023250][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 34.023660][ T3574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 34.101245][ T3582] loop3: detected capacity change from 0 to 1024 [ 34.108740][ T3582] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.120124][ T3582] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.130900][ T3582] JBD2: no valid journal superblock found [ 34.136781][ T3582] EXT4-fs (loop3): Could not load journal inode [ 34.152738][ T3000] ================================================================== [ 34.160887][ T3000] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 34.168932][ T3000] [ 34.171288][ T3000] write to 0xffff888107a501b0 of 8 bytes by task 3511 on cpu 0: [ 34.178942][ T3000] dentry_unlink_inode+0x65/0x260 [ 34.183990][ T3000] d_delete+0xc8/0xe0 [ 34.187990][ T3000] d_delete_notify+0x32/0x100 [ 34.192675][ T3000] vfs_unlink+0x331/0x440 [ 34.197007][ T3000] do_unlinkat+0x1e2/0x4b0 [ 34.201464][ T3000] __x64_sys_unlink+0x2e/0x40 [ 34.206149][ T3000] x64_sys_call+0x2f48/0x3000 [ 34.210858][ T3000] do_syscall_64+0xc0/0x2a0 [ 34.215418][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.221483][ T3000] [ 34.223837][ T3000] read to 0xffff888107a501b0 of 8 bytes by task 3000 on cpu 1: [ 34.231391][ T3000] step_into_slowpath+0x12c/0x4c0 [ 34.236474][ T3000] path_lookupat+0x330/0x500 [ 34.241112][ T3000] filename_lookup+0x190/0x390 [ 34.245920][ T3000] do_readlinkat+0x7d/0x340 [ 34.250446][ T3000] __x64_sys_readlink+0x47/0x60 [ 34.255343][ T3000] x64_sys_call+0x2af1/0x3000 [ 34.260042][ T3000] do_syscall_64+0xc0/0x2a0 [ 34.264571][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.270475][ T3000] [ 34.272804][ T3000] value changed: 0xffff88811b3651f0 -> 0x0000000000000000 [ 34.280260][ T3000] [ 34.282680][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 34.288934][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.298236][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.308332][ T3000] ================================================================== [ 34.325535][ T3504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.569607][ T3504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.662572][ T3326] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.683544][ T3326] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.702097][ T3326] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.715932][ T3326] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.915061][ T3490] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 36.656616][ T3541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.697477][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.