last executing test programs: 1.470577513s ago: executing program 3 (id=361): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000041c0)='net/packet\x00') preadv(r0, &(0x7f0000004300)=[{&(0x7f0000004200)=""/221, 0xdd}], 0x1, 0x10001, 0xfffffffd) 1.364614304s ago: executing program 3 (id=366): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x10a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x42, 0x0}}, 0x10) 1.309600809s ago: executing program 3 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={0x44, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x44}}, 0x400c800) 1.239549346s ago: executing program 3 (id=372): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) 1.206443559s ago: executing program 3 (id=375): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000440)={0x8, 0x9, 0x4, 0x9, 0x7, "efc64a26a83c8ffa332b3a5419e8ab2543c4ec"}) 506.388759ms ago: executing program 4 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x24000810) 473.544693ms ago: executing program 4 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 442.141826ms ago: executing program 0 (id=404): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x81}, 0x2012, 0x0, 0x80002, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 425.745437ms ago: executing program 4 (id=405): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, 0x0}]) 347.308935ms ago: executing program 1 (id=408): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/258, 0x102}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000004300)=""/4045, 0xfcd}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000b40)=""/200, 0xc8}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/198, 0xc6}], 0x8}, 0x40012100) 293.96061ms ago: executing program 0 (id=409): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x228001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) 292.751011ms ago: executing program 3 (id=410): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 288.895961ms ago: executing program 2 (id=411): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x77359400}}, 0x0) 286.924671ms ago: executing program 1 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 282.345311ms ago: executing program 4 (id=413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) 249.856064ms ago: executing program 2 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x6200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 247.569095ms ago: executing program 4 (id=415): rt_sigaction(0x11, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x41000004, 0x0) 238.334866ms ago: executing program 0 (id=416): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x87f0b9f9769e8818, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) 191.545641ms ago: executing program 2 (id=417): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x50}, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x4008b100, 0x0) 184.876931ms ago: executing program 1 (id=418): unshare(0x20000400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) 155.182994ms ago: executing program 2 (id=419): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigpending(0x0, 0x0) 141.488606ms ago: executing program 1 (id=420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 133.193526ms ago: executing program 0 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x0, {0xa}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) 86.613121ms ago: executing program 0 (id=422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) 78.922352ms ago: executing program 2 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) 57.151444ms ago: executing program 1 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) 30.228627ms ago: executing program 4 (id=425): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setuid(0xee01) tgkill(r0, r0, 0x21) 25.785757ms ago: executing program 0 (id=426): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) 19.689768ms ago: executing program 2 (id=427): unshare(0x24040600) r0 = socket$key(0xf, 0x3, 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 0s ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='t', @ANYRESHEX]) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave:7-']) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. [ 31.534002][ T29] audit: type=1400 audit(1763003261.078:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.557054][ T29] audit: type=1400 audit(1763003261.108:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.558059][ T3302] cgroup: Unknown subsys name 'net' [ 31.584835][ T29] audit: type=1400 audit(1763003261.138:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.705046][ T3302] cgroup: Unknown subsys name 'cpuset' [ 31.711624][ T3302] cgroup: Unknown subsys name 'rlimit' [ 31.863388][ T29] audit: type=1400 audit(1763003261.408:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.886723][ T29] audit: type=1400 audit(1763003261.418:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.907216][ T29] audit: type=1400 audit(1763003261.418:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.935147][ T29] audit: type=1400 audit(1763003261.418:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.955547][ T29] audit: type=1400 audit(1763003261.428:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.965050][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.980344][ T29] audit: type=1400 audit(1763003261.428:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.012395][ T29] audit: type=1400 audit(1763003261.548:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.058720][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.812952][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 33.869459][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 33.910482][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.917664][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.925700][ T3314] bridge_slave_0: entered allmulticast mode [ 33.932365][ T3314] bridge_slave_0: entered promiscuous mode [ 33.941412][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.948559][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.955795][ T3314] bridge_slave_1: entered allmulticast mode [ 33.962256][ T3314] bridge_slave_1: entered promiscuous mode [ 33.981074][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 34.014668][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.027637][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.041585][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.048748][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.055924][ T3312] bridge_slave_0: entered allmulticast mode [ 34.062481][ T3312] bridge_slave_0: entered promiscuous mode [ 34.072303][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.096041][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.103251][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.110434][ T3312] bridge_slave_1: entered allmulticast mode [ 34.116974][ T3312] bridge_slave_1: entered promiscuous mode [ 34.126978][ T3314] team0: Port device team_slave_0 added [ 34.145886][ T3314] team0: Port device team_slave_1 added [ 34.166667][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.189314][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.223238][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.230287][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.256308][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.279878][ T3312] team0: Port device team_slave_0 added [ 34.286027][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.292989][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.318960][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.339522][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.346653][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.353777][ T3313] bridge_slave_0: entered allmulticast mode [ 34.360151][ T3313] bridge_slave_0: entered promiscuous mode [ 34.367505][ T3312] team0: Port device team_slave_1 added [ 34.373238][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.380415][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.387620][ T3313] bridge_slave_1: entered allmulticast mode [ 34.394011][ T3313] bridge_slave_1: entered promiscuous mode [ 34.430471][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.439655][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.446743][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.453875][ T3317] bridge_slave_0: entered allmulticast mode [ 34.460485][ T3317] bridge_slave_0: entered promiscuous mode [ 34.473103][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.480175][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.506100][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.516943][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 34.526896][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.543006][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.550201][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.557520][ T3317] bridge_slave_1: entered allmulticast mode [ 34.563983][ T3317] bridge_slave_1: entered promiscuous mode [ 34.575703][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.582705][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.608678][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.656658][ T3314] hsr_slave_0: entered promiscuous mode [ 34.662773][ T3314] hsr_slave_1: entered promiscuous mode [ 34.679542][ T3313] team0: Port device team_slave_0 added [ 34.687004][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.710040][ T3312] hsr_slave_0: entered promiscuous mode [ 34.716241][ T3312] hsr_slave_1: entered promiscuous mode [ 34.722106][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 34.728009][ T3312] Cannot create hsr debugfs directory [ 34.736689][ T3313] team0: Port device team_slave_1 added [ 34.748620][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.791708][ T3317] team0: Port device team_slave_0 added [ 34.804965][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.811943][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.837899][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.848770][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.856033][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.863388][ T3323] bridge_slave_0: entered allmulticast mode [ 34.869935][ T3323] bridge_slave_0: entered promiscuous mode [ 34.878975][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.886073][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.893200][ T3323] bridge_slave_1: entered allmulticast mode [ 34.899857][ T3323] bridge_slave_1: entered promiscuous mode [ 34.911870][ T3317] team0: Port device team_slave_1 added [ 34.918417][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.925485][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.951648][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.996973][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.003939][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.030143][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.041866][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.048857][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.074925][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.089089][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.115281][ T3313] hsr_slave_0: entered promiscuous mode [ 35.121635][ T3313] hsr_slave_1: entered promiscuous mode [ 35.127592][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 35.133365][ T3313] Cannot create hsr debugfs directory [ 35.142715][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.193341][ T3317] hsr_slave_0: entered promiscuous mode [ 35.199510][ T3317] hsr_slave_1: entered promiscuous mode [ 35.205580][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 35.211309][ T3317] Cannot create hsr debugfs directory [ 35.222777][ T3323] team0: Port device team_slave_0 added [ 35.232405][ T3323] team0: Port device team_slave_1 added [ 35.281563][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.288638][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.314557][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.327936][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.334989][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.360917][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.429650][ T3323] hsr_slave_0: entered promiscuous mode [ 35.435722][ T3323] hsr_slave_1: entered promiscuous mode [ 35.441746][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 35.447510][ T3323] Cannot create hsr debugfs directory [ 35.476570][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.487425][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.509847][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.526504][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.580124][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.595537][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.610627][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.619808][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.635278][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.643969][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.654371][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.667740][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.708717][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.725900][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.745121][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.754224][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.763316][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.782789][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.810024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.817163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.828143][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.845651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.852780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.860911][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.870547][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.880430][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.889172][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.915730][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.928066][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.948737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.955896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.975810][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.982892][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.002295][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.019510][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.032779][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.039921][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.048947][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.056104][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.073030][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.099990][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.107191][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.116230][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.123391][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.193149][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.212616][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.233146][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.266829][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.274100][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.291831][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.299057][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.316272][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.333442][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.376757][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.520827][ T3317] veth0_vlan: entered promiscuous mode [ 36.548775][ T3317] veth1_vlan: entered promiscuous mode [ 36.558102][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.566597][ T3313] veth0_vlan: entered promiscuous mode [ 36.572332][ T3314] veth0_vlan: entered promiscuous mode [ 36.581978][ T3312] veth0_vlan: entered promiscuous mode [ 36.588863][ T3314] veth1_vlan: entered promiscuous mode [ 36.625145][ T3317] veth0_macvtap: entered promiscuous mode [ 36.632946][ T3314] veth0_macvtap: entered promiscuous mode [ 36.640508][ T3312] veth1_vlan: entered promiscuous mode [ 36.647548][ T3313] veth1_vlan: entered promiscuous mode [ 36.664815][ T3312] veth0_macvtap: entered promiscuous mode [ 36.671460][ T3317] veth1_macvtap: entered promiscuous mode [ 36.689640][ T3314] veth1_macvtap: entered promiscuous mode [ 36.697708][ T3323] veth0_vlan: entered promiscuous mode [ 36.703692][ T3312] veth1_macvtap: entered promiscuous mode [ 36.718245][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.731603][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.741730][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.752173][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.761103][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.769041][ T3323] veth1_vlan: entered promiscuous mode [ 36.788971][ T3462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.798599][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.807195][ T3313] veth0_macvtap: entered promiscuous mode [ 36.815787][ T3462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.828350][ T3462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.841884][ T3313] veth1_macvtap: entered promiscuous mode [ 36.848786][ T3462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.859401][ T3462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.870763][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 36.870777][ T29] audit: type=1400 audit(1763003266.428:81): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.f6DwXg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.903070][ T29] audit: type=1400 audit(1763003266.428:82): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.909117][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.925096][ T29] audit: type=1400 audit(1763003266.428:83): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.f6DwXg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.938144][ T3323] veth0_macvtap: entered promiscuous mode [ 36.957444][ T29] audit: type=1400 audit(1763003266.428:84): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.972834][ T3323] veth1_macvtap: entered promiscuous mode [ 36.984989][ T29] audit: type=1400 audit(1763003266.428:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.f6DwXg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.017214][ T29] audit: type=1400 audit(1763003266.428:86): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.f6DwXg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.044580][ T29] audit: type=1400 audit(1763003266.428:87): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.064230][ T29] audit: type=1400 audit(1763003266.448:88): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.087066][ T29] audit: type=1400 audit(1763003266.448:89): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=3689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.111977][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.126809][ T3462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.138243][ T3462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.151424][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.161640][ T3462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.180749][ T29] audit: type=1400 audit(1763003266.718:90): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.215436][ T3462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.244572][ T3462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.257765][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.277773][ T3462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.303714][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.323482][ T3462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.342336][ T3488] loop1: detected capacity change from 0 to 512 [ 37.359696][ T3462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.372738][ T3488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.385955][ T3488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.405934][ T3462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.423348][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.423622][ T3488] EXT4-fs (loop1): 1 truncate cleaned up [ 37.450014][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.475180][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.487866][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.521074][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.543603][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.572156][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.597715][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.662151][ T3516] bridge_slave_0: left allmulticast mode [ 37.668051][ T3516] bridge_slave_0: left promiscuous mode [ 37.673769][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.692043][ T3516] bridge_slave_1: left allmulticast mode [ 37.698087][ T3516] bridge_slave_1: left promiscuous mode [ 37.703827][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.721008][ T3516] bond0: (slave bond_slave_0): Releasing backup interface [ 37.732644][ T3516] bond0: (slave bond_slave_1): Releasing backup interface [ 37.745408][ T3516] team0: Port device team_slave_0 removed [ 37.773844][ T3516] team0: Port device team_slave_1 removed [ 37.782472][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.790084][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.798216][ T3531] loop4: detected capacity change from 0 to 512 [ 37.812258][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.819782][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.829760][ T3516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 37.872719][ T3531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.905530][ T3531] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.970013][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.018252][ T3549] loop2: detected capacity change from 0 to 512 [ 38.038394][ T3549] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 38.086443][ T3549] unsupported nla_type 46065 [ 38.194979][ T3570] Illegal XDP return value 4294967274 on prog (id 1) dev N/A, expect packet loss! [ 38.238439][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 38.291622][ T3578] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.43'. [ 38.380881][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 38.389715][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 38.398559][ T3584] netlink: 'syz.2.46': attribute type 19 has an invalid length. [ 38.406239][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 38.419547][ T3572] syz.1.40 (3572) used greatest stack depth: 10160 bytes left [ 38.689718][ T3604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.56'. [ 38.757807][ T3609] tipc: Enabling of bearer rejected, failed to enable media [ 38.767285][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 38.786929][ T3610] ip6gretap0: entered promiscuous mode [ 38.795198][ T3610] ip6gretap0: left promiscuous mode [ 38.833650][ T3616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.843243][ T3616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.087931][ T3558] syz.3.33 (3558) used greatest stack depth: 7160 bytes left [ 39.248591][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 39.308845][ T3668] loop3: detected capacity change from 0 to 1024 [ 39.344994][ T3668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.387838][ T3681] tmpfs: Bad value for 'mpol' [ 39.401002][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.488530][ T36] IPVS: starting estimator thread 0... [ 39.511503][ T3693] loop4: detected capacity change from 0 to 1024 [ 39.566375][ T3708] netlink: 'syz.1.106': attribute type 3 has an invalid length. [ 39.574342][ T3697] IPVS: using max 1920 ests per chain, 96000 per kthread [ 39.602045][ T3693] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.628558][ T3713] loop0: detected capacity change from 0 to 512 [ 39.650373][ T3693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.684870][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.714774][ T3725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.113'. [ 39.723960][ T3713] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.736383][ T3693] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.772021][ T3713] EXT4-fs error (device loop0): ext4_get_first_dir_block:3552: inode #12: comm syz.0.108: directory missing '..' [ 39.805266][ T3713] EXT4-fs (loop0): Remounting filesystem read-only [ 39.812272][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.883388][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.894775][ T181] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.897951][ T3736] loop4: detected capacity change from 0 to 164 [ 39.963533][ T3744] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 39.974575][ T3736] rock: directory entry would overflow storage [ 39.980761][ T3736] rock: sig=0x66, size=4, remaining=3 [ 39.985686][ T3742] loop0: detected capacity change from 0 to 2048 [ 39.993157][ T3742] EXT4-fs: Ignoring removed bh option [ 40.016213][ T3742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.052671][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.112590][ T3756] loop0: detected capacity change from 0 to 256 [ 40.127897][ T3756] ======================================================= [ 40.127897][ T3756] WARNING: The mand mount option has been deprecated and [ 40.127897][ T3756] and is ignored by this kernel. Remove the mand [ 40.127897][ T3756] option from the mount to silence this warning. [ 40.127897][ T3756] ======================================================= [ 40.169825][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 40.234807][ T3756] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.280392][ T3768] loop4: detected capacity change from 0 to 164 [ 40.384149][ T3776] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.515415][ T3790] tipc: Started in network mode [ 40.520463][ T3790] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 40.527683][ T3790] tipc: Enabled bearer , priority 10 [ 40.535403][ T3792] netlink: 'syz.0.144': attribute type 11 has an invalid length. [ 40.624127][ T3806] loop4: detected capacity change from 0 to 512 [ 40.678489][ T3806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.705721][ T3806] EXT4-fs (loop4): 1 truncate cleaned up [ 40.718960][ T3806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.776288][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.848454][ T3839] netlink: 'syz.4.163': attribute type 6 has an invalid length. [ 41.041902][ T3871] capability: warning: `syz.4.181' uses deprecated v2 capabilities in a way that may be insecure [ 41.061488][ T3874] loop1: detected capacity change from 0 to 764 [ 41.087747][ T3874] Symlink component flag not implemented [ 41.093440][ T3874] Symlink component flag not implemented [ 41.108728][ T3879] tipc: Enabling of bearer rejected, failed to enable media [ 41.178990][ T3886] unsupported nlmsg_type 40 [ 41.191673][ T3892] loop3: detected capacity change from 0 to 512 [ 41.204606][ T3892] EXT4-fs: Ignoring removed nobh option [ 41.220546][ T3892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.244089][ T3892] EXT4-fs (loop3): 1 truncate cleaned up [ 41.254110][ T3892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.270047][ T3892] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 41.294973][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.449428][ T3929] loop3: detected capacity change from 0 to 128 [ 41.524784][ T3929] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.644299][ T2966] tipc: Node number set to 10136234 [ 41.669336][ T3929] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.724068][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.733572][ T3964] loop4: detected capacity change from 0 to 512 [ 41.743796][ T3964] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 41.779285][ T3462] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 41.890640][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 41.890658][ T29] audit: type=1400 audit(1763003271.438:218): avc: denied { create } for pid=3982 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.981281][ T29] audit: type=1400 audit(1763003271.488:219): avc: denied { getopt } for pid=3982 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 42.017086][ T29] audit: type=1400 audit(1763003271.558:220): avc: denied { getopt } for pid=3991 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.070465][ T29] audit: type=1400 audit(1763003271.568:221): avc: denied { nlmsg_read } for pid=3997 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.091464][ T29] audit: type=1326 audit(1763003271.618:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa182d9f6c9 code=0x7ffc0000 [ 42.115018][ T29] audit: type=1326 audit(1763003271.618:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa182d9f6c9 code=0x7ffc0000 [ 42.138357][ T29] audit: type=1326 audit(1763003271.618:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa182d9f6c9 code=0x7ffc0000 [ 42.159515][ T4015] gretap0: entered promiscuous mode [ 42.161963][ T29] audit: type=1326 audit(1763003271.618:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa182d9f6c9 code=0x7ffc0000 [ 42.190670][ T29] audit: type=1326 audit(1763003271.618:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4005 comm="syz.3.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa182d9f6c9 code=0x7ffc0000 [ 42.214333][ T29] audit: type=1400 audit(1763003271.618:227): avc: denied { create } for pid=4007 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 42.225430][ T4004] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 42.235653][ T4015] gretap0: left promiscuous mode [ 42.341097][ T4026] loop3: detected capacity change from 0 to 256 [ 42.410239][ T4034] loop4: detected capacity change from 0 to 1024 [ 42.433447][ T4034] EXT4-fs: Ignoring removed bh option [ 42.442329][ T4034] EXT4-fs: inline encryption not supported [ 42.451958][ T4034] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.488192][ T4034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 42.508947][ T4034] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.250: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.524604][ T4034] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.250: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.540061][ T4034] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.250: Failed to acquire dquot type 0 [ 42.552398][ T4034] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 42.566619][ T4053] loop0: detected capacity change from 0 to 128 [ 42.573430][ T4034] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.250: mark_inode_dirty error [ 42.585383][ T4053] EXT4-fs: Ignoring removed nobh option [ 42.591721][ T4034] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.602234][ T4034] EXT4-fs (loop4): 1 orphan inode deleted [ 42.603095][ T4053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.608401][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.621656][ T181] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.636383][ T4053] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.650215][ T181] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 42.691083][ T4058] random: crng reseeded on system resumption [ 42.699685][ T4034] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.250: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.700124][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.738970][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.995974][ T4096] loop3: detected capacity change from 0 to 256 [ 43.004116][ T4098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.050217][ T4102] loop0: detected capacity change from 0 to 128 [ 43.077828][ T4102] FAT-fs (loop0): Invalid FSINFO signature: 0x00005252, 0x61417272 (sector = 7) [ 43.092124][ T4104] loop4: detected capacity change from 0 to 512 [ 43.127162][ T4104] EXT4-fs (loop4): too many log groups per flexible block group [ 43.136218][ T4104] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 43.150224][ T4104] EXT4-fs (loop4): mount failed [ 43.163887][ T4114] loop2: detected capacity change from 0 to 764 [ 43.173420][ T4114] Symlink component flag not implemented [ 43.179212][ T4114] Symlink component flag not implemented [ 43.207523][ T4114] Symlink component flag not implemented (129) [ 43.213831][ T4114] Symlink component flag not implemented (6) [ 43.223359][ T4114] rock: directory entry would overflow storage [ 43.229578][ T4114] rock: sig=0x4f50, size=4, remaining=3 [ 43.235197][ T4114] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 43.290659][ T4126] __nla_validate_parse: 13 callbacks suppressed [ 43.290677][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 43.293379][ T4128] loop0: detected capacity change from 0 to 512 [ 43.309275][ T4130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 43.374449][ T4128] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 43.395866][ T4136] syz.3.296 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.407405][ T4128] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.463734][ T4145] raw_sendmsg: syz.1.300 forgot to set AF_INET. Fix it! [ 43.493486][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 43.515073][ T4152] loop2: detected capacity change from 0 to 512 [ 43.522134][ T4128] FAT-fs (loop0): FAT read failed (blocknr 128) [ 43.607508][ T4152] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.676361][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.689833][ T4164] loop4: detected capacity change from 0 to 2048 [ 43.725357][ T4164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.747606][ T4172] loop3: detected capacity change from 0 to 512 [ 43.753909][ T4164] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.765747][ T4172] EXT4-fs: inline encryption not supported [ 43.766521][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 43.804677][ T4172] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 43.822466][ T4172] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.312: invalid indirect mapped block 2683928664 (level 1) [ 43.837152][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 43.837365][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.868795][ T4172] EXT4-fs (loop3): 1 truncate cleaned up [ 43.875447][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 43.888800][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.936178][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 43.960245][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.976365][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 44.000601][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 44.032099][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.053141][ T4152] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.303: lblock 23 mapped to illegal pblock 18 (length 1) [ 44.056357][ T4190] loop3: detected capacity change from 0 to 256 [ 44.070718][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 44.076310][ T4190] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.096398][ T4152] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 20: comm syz.2.303: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 44.440388][ T4220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.333'. [ 44.450172][ T3312] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.479050][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.919575][ T4286] netlink: 136 bytes leftover after parsing attributes in process `syz.1.364'. [ 44.943863][ T4288] ip6t_srh: unknown srh match flags 4000 [ 44.962134][ T4292] loop0: detected capacity change from 0 to 764 [ 45.007487][ T4294] can0: slcan on ptm0. [ 45.076388][ T4293] can0 (unregistered): slcan off ptm0. [ 45.129585][ T4308] loop1: detected capacity change from 0 to 512 [ 45.130807][ T4308] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 45.189775][ T4313] tipc: Started in network mode [ 45.189815][ T4313] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.204367][ T4313] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.212767][ T4313] tipc: Enabled bearer , priority 10 [ 45.316543][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 45.355170][ T4326] Cannot find add_set index 46338 as target [ 45.427182][ T4331] team0: Device vxcan3 is up. Set it down before adding it as a team port [ 45.558038][ T4340] loop0: detected capacity change from 0 to 256 [ 45.576712][ T4342] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.391'. [ 45.970357][ T4376] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 45.990529][ T4376] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 46.095256][ T4393] loop0: detected capacity change from 0 to 256 [ 46.151367][ T4381] loop3: detected capacity change from 0 to 8192 [ 46.204466][ T3394] tipc: Node number set to 1 [ 46.320560][ T3003] ================================================================== [ 46.328704][ T3003] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 46.335428][ T3003] [ 46.337777][ T3003] read-write to 0xffff888106f010c0 of 4 bytes by task 3857 on cpu 1: [ 46.345880][ T3003] dont_mount+0x2a/0x40 [ 46.350073][ T3003] vfs_unlink+0x28f/0x420 [ 46.354432][ T3003] do_unlinkat+0x24e/0x480 [ 46.358869][ T3003] __x64_sys_unlink+0x2e/0x40 [ 46.363556][ T3003] x64_sys_call+0x2dcf/0x3000 [ 46.368360][ T3003] do_syscall_64+0xd2/0x200 [ 46.372875][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.378779][ T3003] [ 46.381114][ T3003] read to 0xffff888106f010c0 of 4 bytes by task 3003 on cpu 0: [ 46.388678][ T3003] lookup_fast+0xf0/0x320 [ 46.393027][ T3003] walk_component+0x3f/0x220 [ 46.397646][ T3003] path_lookupat+0xfe/0x2a0 [ 46.402178][ T3003] filename_lookup+0x147/0x340 [ 46.406968][ T3003] do_readlinkat+0x7d/0x320 [ 46.411489][ T3003] __x64_sys_readlink+0x47/0x60 [ 46.416349][ T3003] x64_sys_call+0x28de/0x3000 [ 46.421038][ T3003] do_syscall_64+0xd2/0x200 [ 46.425636][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.431540][ T3003] [ 46.433871][ T3003] value changed: 0x00300080 -> 0x00000080 [ 46.439592][ T3003] [ 46.441916][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 46.448082][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.457382][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.467445][ T3003] ================================================================== [ 46.481585][ T4419] tmpfs: Bad value for 'mpol'