last executing test programs: 2.520833133s ago: executing program 3 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000380)) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 2.485062564s ago: executing program 3 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) r1 = dup(r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 2.427506488s ago: executing program 0 (id=611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x4d, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.421696339s ago: executing program 0 (id=612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 1.867713841s ago: executing program 1 (id=614): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001300), 0x0, 0x0, 0x0) read$hiddev(r1, &(0x7f0000001100)=""/234, 0xea) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.800435865s ago: executing program 1 (id=616): r0 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = epoll_create1(0x80000) r4 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.71053064s ago: executing program 1 (id=617): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r0) 1.522334051s ago: executing program 3 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000ac0)=ANY=[], 0xffffff6a) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) 1.457519965s ago: executing program 0 (id=620): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1.124804554s ago: executing program 0 (id=624): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"a2e3ad21ed0d09f91b5f090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f090063090890e0878f0e1ac6e7049b336c959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3c2b802181acfc90c41bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e74130d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b12d94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14007693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) socket(0x10, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 886.323028ms ago: executing program 2 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 825.113562ms ago: executing program 4 (id=627): fsopen(0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) shutdown(r1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0xffffffff, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 788.757303ms ago: executing program 2 (id=628): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00009c0000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ae, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 788.216904ms ago: executing program 2 (id=629): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x4, 0x1, 0x6) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = syz_io_uring_setup(0x5ddf, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x1037a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 755.486945ms ago: executing program 0 (id=630): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 678.28736ms ago: executing program 3 (id=631): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xfffffffd}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 632.386682ms ago: executing program 1 (id=632): prctl$PR_SET_SECUREBITS(0x1c, 0xc) setfsuid(0xee00) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0xfffffffffffffcf7, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="180000000f14010027007000fcdbdf25080045"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) lseek(r0, 0x10001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2d, 'cpu'}]}, 0x5) sendmsg$kcm(r2, 0x0, 0x20000080) 631.686843ms ago: executing program 4 (id=633): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000080)=0x200020) 629.661693ms ago: executing program 2 (id=634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 583.393156ms ago: executing program 0 (id=635): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 565.903037ms ago: executing program 3 (id=636): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 519.589129ms ago: executing program 4 (id=637): r0 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0x21, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 508.17948ms ago: executing program 2 (id=638): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x1, 0x5, 0x6, 0x6, 0x1}, {0x0, 0x0, 0x21, 0x9, 0x400, 0xea}, 0x8, 0x8, 0x14de}}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 490.330461ms ago: executing program 1 (id=639): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x404880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 435.556034ms ago: executing program 4 (id=640): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000005c0)) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) close(0xffffffffffffffff) 216.773547ms ago: executing program 4 (id=641): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x2800810, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) timer_create(0x0, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="100000"], 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) 195.999058ms ago: executing program 2 (id=642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) connect(r3, &(0x7f00000000c0)=@hci={0x1f, 0x4, 0x1}, 0x80) 90.939185ms ago: executing program 3 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x4001, 0x3, 0x1e0, 0x0, 0x700001b, 0x148, 0xf8, 0x148, 0x190, 0x206, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0xb0, 0x0, {0x390, 0x8f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x14, "f5610af832c7950a0a2f474efda0d250f3bd7a072c3560a6980acef16694"}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'vlan1\x00', 'wg0\x00', {}, {0xff}, 0x33, 0x1, 0x10}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 35.477437ms ago: executing program 1 (id=644): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x9}, 0x808, 0x10000, 0x0, 0x6, 0x8, 0x20205, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4c8c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c805}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 0s ago: executing program 4 (id=645): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') socket(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) kernel console output (not intermixed with test programs): rocess permissive=1 [ 17.977426][ T29] audit: type=1400 audit(1770028266.837:61): avc: denied { siginh } for pid=3189 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.881736][ T29] audit: type=1400 audit(1770028269.757:62): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.904027][ T29] audit: type=1400 audit(1770028269.757:63): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.927131][ T29] audit: type=1400 audit(1770028269.757:64): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.950143][ T29] audit: type=1400 audit(1770028269.757:65): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.973330][ T29] audit: type=1400 audit(1770028269.757:66): avc: denied { read open } for pid=3196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 25.890584][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.890603][ T29] audit: type=1400 audit(1770028274.767:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.919884][ T29] audit: type=1400 audit(1770028274.797:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.920605][ T3299] cgroup: Unknown subsys name 'net' [ 25.947938][ T29] audit: type=1400 audit(1770028274.817:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.089444][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.095682][ T3299] cgroup: Unknown subsys name 'rlimit' [ 26.225575][ T29] audit: type=1400 audit(1770028275.097:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.248883][ T29] audit: type=1400 audit(1770028275.097:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.269765][ T29] audit: type=1400 audit(1770028275.097:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.275642][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.290655][ T29] audit: type=1400 audit(1770028275.097:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.320176][ T29] audit: type=1400 audit(1770028275.107:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.341607][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.345993][ T29] audit: type=1400 audit(1770028275.107:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.378044][ T29] audit: type=1400 audit(1770028275.127:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.511507][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.522802][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.557549][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.580020][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.661880][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.687995][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.695204][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.702515][ T3313] bridge_slave_0: entered allmulticast mode [ 27.709152][ T3313] bridge_slave_0: entered promiscuous mode [ 27.722161][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.729452][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.736720][ T3321] bridge_slave_0: entered allmulticast mode [ 27.743433][ T3321] bridge_slave_0: entered promiscuous mode [ 27.754152][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.761418][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.768585][ T3313] bridge_slave_1: entered allmulticast mode [ 27.775060][ T3313] bridge_slave_1: entered promiscuous mode [ 27.781556][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.788802][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.795891][ T3317] bridge_slave_0: entered allmulticast mode [ 27.802405][ T3317] bridge_slave_0: entered promiscuous mode [ 27.813188][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.820270][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.827481][ T3317] bridge_slave_1: entered allmulticast mode [ 27.834172][ T3317] bridge_slave_1: entered promiscuous mode [ 27.840568][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.847715][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.855011][ T3321] bridge_slave_1: entered allmulticast mode [ 27.861504][ T3321] bridge_slave_1: entered promiscuous mode [ 27.887421][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.894584][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.901965][ T3316] bridge_slave_0: entered allmulticast mode [ 27.908520][ T3316] bridge_slave_0: entered promiscuous mode [ 27.935209][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.942407][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.949557][ T3316] bridge_slave_1: entered allmulticast mode [ 27.955913][ T3316] bridge_slave_1: entered promiscuous mode [ 27.963372][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.973819][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.987021][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.997254][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.011202][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.025464][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.052721][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.074684][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.081798][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.089169][ T3314] bridge_slave_0: entered allmulticast mode [ 28.095633][ T3314] bridge_slave_0: entered promiscuous mode [ 28.103027][ T3313] team0: Port device team_slave_0 added [ 28.109724][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.131889][ T3317] team0: Port device team_slave_0 added [ 28.138178][ T3316] team0: Port device team_slave_0 added [ 28.144703][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.151890][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.159315][ T3314] bridge_slave_1: entered allmulticast mode [ 28.165822][ T3314] bridge_slave_1: entered promiscuous mode [ 28.173197][ T3313] team0: Port device team_slave_1 added [ 28.183839][ T3321] team0: Port device team_slave_0 added [ 28.190323][ T3316] team0: Port device team_slave_1 added [ 28.196770][ T3321] team0: Port device team_slave_1 added [ 28.203267][ T3317] team0: Port device team_slave_1 added [ 28.227400][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.234623][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.260589][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.281247][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.295294][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.302297][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.328432][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.349658][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.359000][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.365952][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.392496][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.406367][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.413890][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.439829][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.451045][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.457997][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.484087][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.499797][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.507007][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.533269][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.547359][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.554692][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.581011][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.592040][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.599105][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.625450][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.657903][ T3314] team0: Port device team_slave_0 added [ 28.673339][ T3313] hsr_slave_0: entered promiscuous mode [ 28.679357][ T3313] hsr_slave_1: entered promiscuous mode [ 28.698115][ T3314] team0: Port device team_slave_1 added [ 28.706149][ T3317] hsr_slave_0: entered promiscuous mode [ 28.712334][ T3317] hsr_slave_1: entered promiscuous mode [ 28.718292][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.724074][ T3317] Cannot create hsr debugfs directory [ 28.745730][ T3321] hsr_slave_0: entered promiscuous mode [ 28.752026][ T3321] hsr_slave_1: entered promiscuous mode [ 28.757959][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 28.763718][ T3321] Cannot create hsr debugfs directory [ 28.798149][ T3316] hsr_slave_0: entered promiscuous mode [ 28.804522][ T3316] hsr_slave_1: entered promiscuous mode [ 28.810770][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.816795][ T3316] Cannot create hsr debugfs directory [ 28.830311][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.837275][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.863487][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.875230][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.882363][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.908648][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.992241][ T3314] hsr_slave_0: entered promiscuous mode [ 28.998393][ T3314] hsr_slave_1: entered promiscuous mode [ 29.004523][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.010572][ T3314] Cannot create hsr debugfs directory [ 29.130415][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.141811][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.150917][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.162061][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.190702][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.206572][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.215160][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.224307][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.246491][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.255828][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.265261][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.278164][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.311123][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.324030][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.334442][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.343004][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.386919][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.394698][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.404331][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.413640][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.425619][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.452610][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.477523][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.484782][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.500938][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.508009][ T1938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.518199][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.537405][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.550362][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.562974][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.591944][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.599198][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.609176][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.616259][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.627155][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.636230][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.653000][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.660232][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.686398][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.693534][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.703096][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.710275][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.723242][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.730357][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.753820][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.764279][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.793794][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.818978][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.835640][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.855526][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.862645][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.880488][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.900217][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.907549][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.943019][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.963046][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.984311][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.020463][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.044193][ T3313] veth0_vlan: entered promiscuous mode [ 30.079534][ T3313] veth1_vlan: entered promiscuous mode [ 30.106374][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.153009][ T3316] veth0_vlan: entered promiscuous mode [ 30.168932][ T3313] veth0_macvtap: entered promiscuous mode [ 30.183379][ T3316] veth1_vlan: entered promiscuous mode [ 30.194325][ T3313] veth1_macvtap: entered promiscuous mode [ 30.204367][ T3317] veth0_vlan: entered promiscuous mode [ 30.230980][ T3317] veth1_vlan: entered promiscuous mode [ 30.253249][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.277420][ T3314] veth0_vlan: entered promiscuous mode [ 30.289489][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.307519][ T3316] veth0_macvtap: entered promiscuous mode [ 30.319658][ T2563] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.330540][ T3317] veth0_macvtap: entered promiscuous mode [ 30.337686][ T3314] veth1_vlan: entered promiscuous mode [ 30.344435][ T908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.354054][ T3316] veth1_macvtap: entered promiscuous mode [ 30.363170][ T908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.376201][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.385080][ T3317] veth1_macvtap: entered promiscuous mode [ 30.398363][ T3314] veth0_macvtap: entered promiscuous mode [ 30.410757][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.430197][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.445429][ T3314] veth1_macvtap: entered promiscuous mode [ 30.458222][ T908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.473850][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.484871][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.488359][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.509640][ T3321] veth0_vlan: entered promiscuous mode [ 30.515978][ T908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.532848][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.544251][ T908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.559391][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.575193][ T3321] veth1_vlan: entered promiscuous mode [ 30.586627][ T908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.597227][ T908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.629401][ T908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.669797][ T908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.687226][ T908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.701504][ T908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.711065][ T908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.736154][ T3321] veth0_macvtap: entered promiscuous mode [ 30.744495][ T3321] veth1_macvtap: entered promiscuous mode [ 30.752352][ T908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.774401][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.791479][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.802682][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.912680][ T314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.979180][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 30.979199][ T29] audit: type=1400 audit(1770028279.857:129): avc: denied { write } for pid=3490 comm="syz.3.7" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.038633][ T314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.055441][ T29] audit: type=1400 audit(1770028279.927:130): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.080286][ T314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.089866][ T314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.166280][ T29] audit: type=1400 audit(1770028280.037:131): avc: denied { create } for pid=3490 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.201213][ T3506] loop1: detected capacity change from 0 to 1024 [ 31.217562][ T3506] ======================================================= [ 31.217562][ T3506] WARNING: The mand mount option has been deprecated and [ 31.217562][ T3506] and is ignored by this kernel. Remove the mand [ 31.217562][ T3506] option from the mount to silence this warning. [ 31.217562][ T3506] ======================================================= [ 31.261118][ T3506] EXT4-fs: Ignoring removed nobh option [ 31.280005][ T3509] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 31.287017][ T29] audit: type=1400 audit(1770028280.157:132): avc: denied { create } for pid=3508 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.321567][ T29] audit: type=1400 audit(1770028280.197:133): avc: denied { create } for pid=3508 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.341399][ T29] audit: type=1400 audit(1770028280.197:134): avc: denied { write } for pid=3508 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.360752][ T29] audit: type=1400 audit(1770028280.197:135): avc: denied { read } for pid=3508 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.416115][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.438847][ T29] audit: type=1400 audit(1770028280.317:136): avc: denied { mount } for pid=3505 comm="syz.1.8" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.470151][ T29] audit: type=1400 audit(1770028280.337:137): avc: denied { add_name } for pid=3505 comm="syz.1.8" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.490852][ T29] audit: type=1400 audit(1770028280.337:138): avc: denied { create } for pid=3505 comm="syz.1.8" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.512087][ T3506] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.8: Allocating blocks 385-513 which overlap fs metadata [ 31.579542][ T3517] EXT4-fs (loop1): pa ffff888107e9c0e0: logic 16, phys. 129, len 24 [ 31.587730][ T3517] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 31.715401][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.731054][ T3523] Illegal XDP return value 4294967294 on prog (id 1) dev syz_tun, expect packet loss! [ 32.035148][ T3543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 32.043204][ T3543] IPv6: NLM_F_CREATE should be set when creating new route [ 32.119807][ T3547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 32.245985][ C0] hrtimer: interrupt took 57449 ns [ 32.338796][ T3495] syz.0.1 (3495) used greatest stack depth: 10056 bytes left [ 32.357358][ T3496] syz.0.1 (3496) used greatest stack depth: 7432 bytes left [ 32.642838][ T3565] loop4: detected capacity change from 0 to 512 [ 32.677235][ T3565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.695509][ T3559] loop3: detected capacity change from 0 to 8192 [ 32.743066][ T3565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.768278][ T3565] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.894731][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.944050][ T3583] loop2: detected capacity change from 0 to 2048 [ 33.022687][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.051570][ T3595] loop1: detected capacity change from 0 to 512 [ 33.151772][ T3595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.164917][ T3595] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.199906][ T3598] loop4: detected capacity change from 0 to 1024 [ 33.232437][ T3598] EXT4-fs: Ignoring removed nobh option [ 33.250568][ T3598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.265771][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.269057][ T3598] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.41: Allocating blocks 497-513 which overlap fs metadata [ 33.399698][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.418058][ T3313] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 33.426325][ T3313] FAT-fs (loop3): Filesystem has been set read-only [ 33.455267][ T3606] loop4: detected capacity change from 0 to 1024 [ 33.478046][ T3606] EXT4-fs: Ignoring removed orlov option [ 33.528076][ T3613] mmap: syz.0.45 (3613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.557115][ T3606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.661125][ T3622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.670270][ T3622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.725931][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.885467][ T3639] program syz.1.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.885957][ T3632] syzkaller0: entered promiscuous mode [ 33.900727][ T3632] syzkaller0: entered allmulticast mode [ 34.044230][ T3648] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 34.074234][ T3650] loop1: detected capacity change from 0 to 128 [ 34.087363][ T3650] syz.1.58: attempt to access beyond end of device [ 34.087363][ T3650] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 34.103969][ T3652] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 34.111589][ T3652] netlink: 'syz.0.59': attribute type 2 has an invalid length. [ 34.438271][ T3672] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 34.480431][ T3672] SELinux: failed to load policy [ 34.489970][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.616148][ T3687] loop2: detected capacity change from 0 to 512 [ 34.624066][ T3687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.637180][ T3687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.679583][ T3687] EXT4-fs (loop2): 1 truncate cleaned up [ 34.702066][ T3687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.869362][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.416032][ T3739] loop2: detected capacity change from 0 to 512 [ 35.448115][ T3739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.474864][ T3739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.498317][ T3739] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.567112][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.591725][ T3743] EXT4-fs: Ignoring removed nobh option [ 35.600928][ T3743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.613776][ T3743] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.638839][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.678224][ T3747] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.693982][ T3747] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.730423][ T2563] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.700789][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 36.700857][ T29] audit: type=1400 audit(1770028285.577:203): avc: denied { map } for pid=3763 comm="syz.2.97" path="socket:[5915]" dev="sockfs" ino=5915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 37.066133][ T3778] capability: warning: `syz.3.102' uses 32-bit capabilities (legacy support in use) [ 37.076684][ T29] audit: type=1400 audit(1770028285.947:204): avc: denied { connect } for pid=3777 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.392129][ T3788] set_capacity_and_notify: 2 callbacks suppressed [ 37.392147][ T3788] loop3: detected capacity change from 0 to 512 [ 37.415541][ T3788] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.106: bad orphan inode 15 [ 37.426814][ T3788] ext4_test_bit(bit=14, block=5) = 0 [ 37.432793][ T3788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.456905][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.480047][ T29] audit: type=1400 audit(1770028286.357:205): avc: denied { execute } for pid=3791 comm="syz.3.107" path="/31/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.607376][ T3684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.648959][ T3797] loop4: detected capacity change from 0 to 512 [ 37.666812][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.698419][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 37.728441][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.741179][ T29] audit: type=1400 audit(1770028286.617:206): avc: denied { bind } for pid=3804 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.860282][ T29] audit: type=1400 audit(1770028286.727:207): avc: denied { name_bind } for pid=3814 comm="syz.3.116" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 37.892889][ T29] audit: type=1400 audit(1770028286.767:208): avc: denied { setopt } for pid=3818 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.919860][ T29] audit: type=1400 audit(1770028286.797:209): avc: denied { write } for pid=3818 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.928853][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 37.939259][ T29] audit: type=1326 audit(1770028286.797:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3820 comm="syz.1.119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b8aeb9 code=0x0 [ 37.984344][ T3817] loop3: detected capacity change from 0 to 512 [ 37.995454][ T3817] ext4: Unknown parameter 'uid' [ 38.102662][ T3832] loop4: detected capacity change from 0 to 2048 [ 38.219584][ T3813] loop0: detected capacity change from 0 to 2048 [ 38.226328][ T3830] SELinux: failed to load policy [ 38.251006][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.265923][ T3832] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.123'. [ 38.327702][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.348157][ T29] audit: type=1400 audit(1770028287.217:211): avc: denied { create } for pid=3840 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.405966][ T29] audit: type=1400 audit(1770028287.247:212): avc: denied { create } for pid=3842 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.825112][ T3860] netlink: 'syz.3.133': attribute type 13 has an invalid length. [ 38.833624][ T3862] loop1: detected capacity change from 0 to 512 [ 38.863981][ T3862] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.908109][ T3862] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 38.940791][ T3862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.134: bg 0: block 248: padding at end of block bitmap is not set [ 38.958355][ T3862] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.134: Failed to acquire dquot type 1 [ 38.972210][ T3862] EXT4-fs (loop1): 1 truncate cleaned up [ 38.979340][ T3862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 38.995817][ T3870] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 39.004767][ T3870] pim6reg1: entered promiscuous mode [ 39.010192][ T3870] pim6reg1: entered allmulticast mode [ 39.023527][ T3862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 39.035716][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 39.045447][ T3873] Zero length message leads to an empty skb [ 39.111358][ T3877] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.250162][ T3884] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.280207][ T3882] loop1: detected capacity change from 0 to 1024 [ 39.301118][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.316225][ T3882] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.390577][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.436044][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.443309][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.514571][ T3902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 39.545588][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.556094][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.640148][ T314] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.658855][ T314] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.680757][ T314] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.708189][ T314] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.807662][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 39.836355][ T3919] loop3: detected capacity change from 0 to 128 [ 39.848095][ T3919] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 40.013167][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 40.030092][ T3939] sg_write: process 56 (syz.4.164) changed security contexts after opening file descriptor, this is not allowed. [ 40.153716][ T3946] loop0: detected capacity change from 0 to 1024 [ 40.161284][ T3946] EXT4-fs: Ignoring removed orlov option [ 40.189568][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.239786][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.248736][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.425097][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 40.452607][ T3962] gretap1: entered promiscuous mode [ 40.552939][ T3970] loop4: detected capacity change from 0 to 2048 [ 40.603464][ T3980] netlink: 104 bytes leftover after parsing attributes in process `syz.3.183'. [ 40.614324][ T3980] netlink: 104 bytes leftover after parsing attributes in process `syz.3.183'. [ 40.625509][ T3305] Alternate GPT is invalid, using primary GPT. [ 40.632164][ T3305] loop4: p1 p2 p3 [ 40.635961][ T3305] loop4: partition table partially beyond EOD, truncated [ 40.663915][ T3970] Alternate GPT is invalid, using primary GPT. [ 40.670671][ T3970] loop4: p1 p2 p3 [ 40.674625][ T3970] loop4: partition table partially beyond EOD, truncated [ 40.731644][ T3996] IPv6: Can't replace route, no match found [ 40.753573][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.764940][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.765417][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.791956][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.792095][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.803124][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.835367][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.226412][ T4028] EXT4-fs: Ignoring removed orlov option [ 41.241047][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.273470][ T4035] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.286508][ T4035] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.294543][ T4028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.305404][ T4028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.321202][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.408065][ T4038] syzkaller0: entered promiscuous mode [ 41.414091][ T4038] syzkaller0: entered allmulticast mode [ 41.808898][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 41.808915][ T29] audit: type=1400 audit(1770028290.687:253): avc: denied { write } for pid=4052 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.917559][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.022177][ T29] audit: type=1400 audit(1770028290.897:254): avc: denied { read } for pid=4082 comm="syz.1.214" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.045564][ T29] audit: type=1400 audit(1770028290.897:255): avc: denied { open } for pid=4082 comm="syz.1.214" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.068685][ T29] audit: type=1400 audit(1770028290.897:256): avc: denied { ioctl } for pid=4082 comm="syz.1.214" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.438996][ T4134] set_capacity_and_notify: 2 callbacks suppressed [ 42.439016][ T4134] loop0: detected capacity change from 0 to 1024 [ 42.455970][ T4134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.483071][ T4134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 42.491667][ T4134] System zones: 0-1, 3-36 [ 42.497992][ T4134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.514489][ T29] audit: type=1400 audit(1770028291.387:257): avc: denied { setattr } for pid=4132 comm="syz.0.218" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.540219][ T4134] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.609658][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.167177][ T29] audit: type=1400 audit(1770028292.037:258): avc: denied { create } for pid=4235 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 43.200523][ T4236] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 43.271009][ T4238] loop1: detected capacity change from 0 to 8192 [ 43.512667][ T4241] capability: warning: `syz.1.227' uses deprecated v2 capabilities in a way that may be insecure [ 43.533609][ T29] audit: type=1400 audit(1770028292.407:259): avc: denied { bind } for pid=4240 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.558714][ T29] audit: type=1400 audit(1770028292.407:260): avc: denied { write } for pid=4240 comm="syz.1.227" path="socket:[6389]" dev="sockfs" ino=6389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.723908][ T3993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.735942][ T4248] loop1: detected capacity change from 0 to 128 [ 43.964368][ T4267] __nla_validate_parse: 2 callbacks suppressed [ 43.964389][ T4267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.237'. [ 44.435071][ T29] audit: type=1400 audit(1770028293.307:261): avc: denied { read } for pid=4277 comm="syz.4.241" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.458022][ T29] audit: type=1400 audit(1770028293.307:262): avc: denied { open } for pid=4277 comm="syz.4.241" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.611190][ T4288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 44.690381][ T4294] loop4: detected capacity change from 0 to 512 [ 44.730556][ T4294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.762782][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.828740][ T4294] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.900467][ T4294] EXT4-fs (loop4): shut down requested (2) [ 44.924446][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.031484][ T4302] batman_adv: batadv0: Adding interface: ipvlan2 [ 45.038433][ T4302] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.067087][ T4329] netlink: 7 bytes leftover after parsing attributes in process `syz.3.262'. [ 45.067103][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.087300][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.097684][ T4302] batman_adv: batadv0: Interface activated: ipvlan2 [ 45.277107][ T4339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.436433][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 45.601709][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.628657][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.660308][ T4393] bridge_slave_0: left allmulticast mode [ 45.660399][ T4393] bridge_slave_0: left promiscuous mode [ 45.660571][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.776902][ T4411] loop1: detected capacity change from 0 to 128 [ 45.785922][ T4411] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 45.800030][ T4411] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.812582][ T4411] ext2 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.928630][ T4397] SELinux: failed to load policy [ 45.969611][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.640007][ T4448] syz.0.306 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 46.651228][ T4448] CPU: 1 UID: 0 PID: 4448 Comm: syz.0.306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.651258][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.651274][ T4448] Call Trace: [ 46.651281][ T4448] [ 46.651289][ T4448] __dump_stack+0x1d/0x30 [ 46.651316][ T4448] dump_stack_lvl+0x95/0xd0 [ 46.651343][ T4448] dump_stack+0x15/0x1b [ 46.651367][ T4448] dump_header+0x80/0x240 [ 46.651429][ T4448] oom_kill_process+0x295/0x350 [ 46.651455][ T4448] out_of_memory+0x97d/0xb80 [ 46.651482][ T4448] try_charge_memcg+0x62e/0xa10 [ 46.651527][ T4448] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 46.651616][ T4448] __read_swap_cache_async+0x17b/0x2d0 [ 46.651703][ T4448] swap_cluster_readahead+0x262/0x3c0 [ 46.651830][ T4448] swapin_readahead+0xde/0x840 [ 46.651866][ T4448] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 46.651907][ T4448] ? lruvec_stat_mod_folio+0xd2/0x110 [ 46.651939][ T4448] ? __rcu_read_unlock+0x4e/0x70 [ 46.652060][ T4448] ? swap_cache_get_folio+0x26f/0x280 [ 46.652107][ T4448] do_swap_page+0x59b/0x2a50 [ 46.652149][ T4448] ? __rcu_read_lock+0x36/0x50 [ 46.652233][ T4448] ? __pfx_default_wake_function+0x10/0x10 [ 46.652269][ T4448] handle_mm_fault+0xb40/0x3030 [ 46.652304][ T4448] ? vma_start_read+0x1c7/0x2c0 [ 46.652416][ T4448] do_user_addr_fault+0x62f/0x1050 [ 46.652448][ T4448] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 46.652483][ T4448] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 46.652585][ T4448] ? irqentry_exit+0x3c/0x510 [ 46.652647][ T4448] exc_page_fault+0x62/0xa0 [ 46.652670][ T4448] asm_exc_page_fault+0x26/0x30 [ 46.652690][ T4448] RIP: 0033:0x7f21ab6160b8 [ 46.652729][ T4448] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 46.652751][ T4448] RSP: 002b:00007fff62089890 EFLAGS: 00010246 [ 46.652807][ T4448] RAX: 0000000000000000 RBX: 000055556dd70500 RCX: 00007f21ab61b78e [ 46.652838][ T4448] RDX: 00007fff620898e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.652852][ T4448] RBP: 00007f21ab8d7da0 R08: 0000000000000000 R09: 0000000000000000 [ 46.652866][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000b886 [ 46.652882][ T4448] R13: 00007f21ab8d609c R14: 000000000000b5c1 R15: 00007f21ab8d6090 [ 46.652934][ T4448] [ 46.653011][ T4448] memory: usage 307200kB, limit 307200kB, failcnt 743 [ 46.894341][ T4448] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 46.902708][ T4448] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 46.910041][ T4448] Memory cgroup stats for /syz0: [ 46.918779][ T4448] cache 0 [ 46.926967][ T4448] rss 0 [ 46.930110][ T4448] shmem 0 [ 46.933076][ T4448] mapped_file 0 [ 46.936574][ T4448] dirty 0 [ 46.939658][ T4448] writeback 0 [ 46.943036][ T4448] workingset_refault_anon 103 [ 46.947715][ T4448] workingset_refault_file 454 [ 46.952458][ T4448] swap 188416 [ 46.955742][ T4448] swapcached 4096 [ 46.959411][ T4448] pgpgin 13574 [ 46.962778][ T4448] pgpgout 13573 [ 46.966235][ T4448] pgfault 20647 [ 46.969760][ T4448] pgmajfault 62 [ 46.973227][ T4448] inactive_anon 0 [ 46.976875][ T4448] active_anon 4096 [ 46.980715][ T4448] inactive_file 0 [ 46.984446][ T4448] active_file 0 [ 46.987913][ T4448] unevictable 0 [ 46.991567][ T4448] hierarchical_memory_limit 314572800 [ 46.997058][ T4448] hierarchical_memsw_limit 9223372036854771712 [ 47.003398][ T4448] total_cache 0 [ 47.007178][ T4448] total_rss 0 [ 47.010666][ T4448] total_shmem 0 [ 47.014266][ T4448] total_mapped_file 0 [ 47.018333][ T4448] total_dirty 0 [ 47.022002][ T4448] total_writeback 0 [ 47.025818][ T4448] total_workingset_refault_anon 103 [ 47.031229][ T4448] total_workingset_refault_file 454 [ 47.036612][ T4448] total_swap 188416 [ 47.040532][ T4448] total_swapcached 4096 [ 47.044713][ T4448] total_pgpgin 13574 [ 47.048849][ T4448] total_pgpgout 13573 [ 47.052955][ T4448] total_pgfault 20647 [ 47.056957][ T4448] total_pgmajfault 62 [ 47.061059][ T4448] total_inactive_anon 0 [ 47.065231][ T4448] total_active_anon 4096 [ 47.069819][ T4448] total_inactive_file 0 [ 47.074106][ T4448] total_active_file 0 [ 47.078572][ T4448] total_unevictable 0 [ 47.082618][ T4448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.306,pid=4448,uid=0 [ 47.097435][ T4448] Memory cgroup out of memory: Killed process 4448 (syz.0.306) total-vm:94132kB, anon-rss:1204kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 47.264003][ T4474] syzkaller0: entered promiscuous mode [ 47.388515][ T37] nci: nci_ntf_packet: unknown ntf opcode 0xe15 [ 47.732863][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 47.732881][ T29] audit: type=1400 audit(1770028296.597:309): avc: denied { cmd } for pid=4511 comm="syz.3.327" path="socket:[6739]" dev="sockfs" ino=6739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.845104][ T29] audit: type=1400 audit(1770028296.667:310): avc: denied { name_bind } for pid=4515 comm="syz.2.329" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.866985][ T29] audit: type=1400 audit(1770028296.697:311): avc: denied { wake_alarm } for pid=4517 comm="syz.3.330" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.968034][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 47.987495][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.995164][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.019201][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.026640][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.405850][ T4535] loop1: detected capacity change from 0 to 1024 [ 48.461199][ T4535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.499582][ T4535] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.598035][ T4535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.866798][ T29] audit: type=1400 audit(1770028297.737:312): avc: denied { watch } for pid=4551 comm="syz.3.342" path="/92" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.037240][ T4560] loop1: detected capacity change from 0 to 4096 [ 49.048686][ T4560] EXT4-fs: Ignoring removed bh option [ 49.054265][ T4560] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.069838][ T4560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.104204][ T29] audit: type=1400 audit(1770028297.967:313): avc: denied { add_name } for pid=4559 comm="syz.1.346" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.128527][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.310355][ T4478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.567621][ T4606] loop4: detected capacity change from 0 to 256 [ 50.649830][ T4615] batman_adv: batadv0: Adding interface: ipvlan3 [ 50.656239][ T4615] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.681983][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.692571][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.702859][ T4615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 50.712882][ T4615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.723163][ T4615] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 50.740675][ T4614] tipc: Enabling of bearer rejected, failed to enable media [ 51.019374][ T4624] gtp0: entered promiscuous mode [ 51.157045][ T29] audit: type=1326 audit(1770028300.027:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.3.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd138b2aeb9 code=0x0 [ 51.209688][ T4643] unsupported nlmsg_type 40 [ 51.214804][ T29] audit: type=1400 audit(1770028300.087:315): avc: denied { write } for pid=4639 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.258666][ T29] audit: type=1400 audit(1770028300.117:316): avc: denied { read } for pid=4639 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.304487][ T4647] VFS: Mount too revealing [ 51.310774][ T29] audit: type=1400 audit(1770028300.157:317): avc: denied { ioctl } for pid=4639 comm="syz.3.379" path="socket:[7889]" dev="sockfs" ino=7889 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.336017][ T29] audit: type=1400 audit(1770028300.177:318): avc: denied { mount } for pid=4645 comm="syz.1.382" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.441048][ T4653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.649618][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 51.984109][ T4693] loop0: detected capacity change from 0 to 512 [ 52.019535][ T4693] EXT4-fs: Ignoring removed orlov option [ 52.025360][ T4693] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.087066][ T4693] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.399: corrupted in-inode xattr: e_value size too large [ 52.121138][ T4693] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.399: couldn't read orphan inode 15 (err -117) [ 52.147930][ T4693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.270763][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.610169][ T4716] tipc: Enabling of bearer rejected, failed to enable media [ 52.867772][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 52.867832][ T29] audit: type=1400 audit(1770028301.737:368): avc: denied { connect } for pid=4729 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.893635][ T29] audit: type=1400 audit(1770028301.767:369): avc: denied { read } for pid=4729 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.933608][ T29] audit: type=1400 audit(1770028301.807:370): avc: denied { create } for pid=4734 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.971012][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 52.992350][ T29] audit: type=1326 audit(1770028301.817:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ab65aeb9 code=0x7ffc0000 [ 53.016511][ T29] audit: type=1326 audit(1770028301.817:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ab65aeb9 code=0x7ffc0000 [ 53.040053][ T29] audit: type=1326 audit(1770028301.817:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21ab65aeb9 code=0x7ffc0000 [ 53.064065][ T29] audit: type=1326 audit(1770028301.817:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ab65aeb9 code=0x7ffc0000 [ 53.087909][ T29] audit: type=1326 audit(1770028301.817:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f21ab65aeb9 code=0x7ffc0000 [ 53.112243][ T29] audit: type=1400 audit(1770028301.817:376): avc: denied { bind } for pid=4732 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.131741][ T29] audit: type=1326 audit(1770028301.817:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ab65aeb9 code=0x7ffc0000 [ 53.136315][ T4735] infiniband !yz!: set down [ 53.160038][ T4735] infiniband !yz!: added team_slave_0 [ 53.177957][ T4735] RDS/IB: !yz!: added [ 53.184362][ T4735] smc: adding ib device !yz! with port count 1 [ 53.206522][ T4735] smc: ib device !yz! port 1 has no pnetid [ 53.346728][ T4745] process 'syz.3.422' launched './file0' with NULL argv: empty string added [ 53.571725][ T4751] loop1: detected capacity change from 0 to 4096 [ 53.589638][ T4751] EXT4-fs: Ignoring removed bh option [ 53.595149][ T4751] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.613942][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 53.670925][ T4751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.784499][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.814507][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 53.871213][ T4789] team0: Port device vlan2 added [ 53.927267][ T4793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 54.029402][ T4802] loop1: detected capacity change from 0 to 512 [ 54.044851][ T4802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.058696][ T4802] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.117334][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.184570][ T4814] loop1: detected capacity change from 0 to 1024 [ 54.226305][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 54.236193][ T4814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.265463][ T4814] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.289994][ T4814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.444: bg 0: block 112: padding at end of block bitmap is not set [ 54.306265][ T4814] EXT4-fs (loop1): Remounting filesystem read-only [ 54.324204][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.470927][ T4836] syzkaller0: entered promiscuous mode [ 54.476542][ T4836] syzkaller0: entered allmulticast mode [ 55.334820][ T4868] syz_tun: entered allmulticast mode [ 55.745870][ T4884] tipc: Enabling of bearer rejected, failed to enable media [ 55.774062][ T4888] loop1: detected capacity change from 0 to 512 [ 55.797809][ T4888] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.472: inode has both inline data and extents flags [ 55.813298][ T4888] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.472: couldn't read orphan inode 15 (err -117) [ 55.826301][ T4888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.902683][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.972333][ T4916] loop1: detected capacity change from 0 to 512 [ 55.982412][ T4916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.995855][ T4916] EXT4-fs (loop1): 1 truncate cleaned up [ 56.002264][ T4916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.063944][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.288710][ T3698] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.339433][ T4946] loop0: detected capacity change from 0 to 512 [ 56.356610][ T4946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.371293][ T4946] EXT4-fs (loop0): 1 truncate cleaned up [ 56.394144][ T4946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.452668][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 56.473104][ T4946] C: renamed from team_slave_0 (while UP) [ 56.482164][ T4946] netlink: 'syz.0.490': attribute type 3 has an invalid length. [ 56.490008][ T4946] netlink: 152 bytes leftover after parsing attributes in process `syz.0.490'. [ 56.499087][ T4946] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 56.609494][ T4983] netlink: 'syz.4.500': attribute type 21 has an invalid length. [ 56.617561][ T4983] netlink: 100 bytes leftover after parsing attributes in process `syz.4.500'. [ 56.669193][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.717177][ T4994] serio: Serial port ptm0 [ 56.868343][ T4994] serio: Serial port ptm0 [ 57.051260][ T5017] loop4: detected capacity change from 0 to 512 [ 57.083468][ T5017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.100044][ T5017] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.123156][ T5017] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.511: corrupted inode contents [ 57.135690][ T5017] EXT4-fs (loop4): Remounting filesystem read-only [ 57.142412][ T5017] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 57.181181][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.202015][ T5031] netlink: 'syz.3.514': attribute type 21 has an invalid length. [ 57.210032][ T5031] netlink: 100 bytes leftover after parsing attributes in process `syz.3.514'. [ 57.264093][ T5035] SELinux: failed to load policy [ 57.377538][ T5043] syzkaller0: entered promiscuous mode [ 57.383364][ T5043] syzkaller0: entered allmulticast mode [ 57.782306][ T5096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.920148][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 57.920167][ T29] audit: type=1400 audit(1770028306.797:464): avc: denied { bind } for pid=5102 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.951682][ T29] audit: type=1400 audit(1770028306.797:465): avc: denied { setopt } for pid=5102 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.963766][ T5103] loop1: detected capacity change from 0 to 512 [ 57.979376][ T5103] EXT4-fs: Ignoring removed nobh option [ 58.000268][ T5103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.013009][ T5103] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.056757][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.209357][ T29] audit: type=1326 audit(1770028307.077:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.232954][ T29] audit: type=1326 audit(1770028307.077:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.238162][ T1042] IPVS: starting estimator thread 0... [ 58.256482][ T29] audit: type=1326 audit(1770028307.077:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.285470][ T29] audit: type=1326 audit(1770028307.077:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.308787][ T29] audit: type=1326 audit(1770028307.077:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.332132][ T29] audit: type=1326 audit(1770028307.077:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.355562][ T29] audit: type=1326 audit(1770028307.077:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.379252][ T29] audit: type=1326 audit(1770028307.087:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b8aeb9 code=0x7ffc0000 [ 58.408578][ T5121] IPVS: using max 2352 ests per chain, 117600 per kthread [ 58.580513][ T5145] lo: entered allmulticast mode [ 58.663663][ T5152] tipc: Started in network mode [ 58.668800][ T5152] tipc: Node identity 9ece809cd794, cluster identity 4711 [ 58.676072][ T5152] tipc: Enabled bearer , priority 0 [ 58.738402][ T5146] tipc: Resetting bearer [ 58.743034][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 58.767612][ T5146] tipc: Disabling bearer [ 60.769325][ T5293] loop0: detected capacity change from 0 to 1024 [ 60.782047][ T5293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.807759][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.773345][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 61.782502][ T5322] netlink: 196 bytes leftover after parsing attributes in process `syz.0.620'. [ 61.791899][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 61.801224][ T5322] netlink: 196 bytes leftover after parsing attributes in process `syz.0.620'. [ 62.236501][ T5329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.276204][ T5329] team0: Port device bond1 added [ 62.286122][ T5332] lo speed is unknown, defaulting to 1000 [ 62.295606][ T5332] lo speed is unknown, defaulting to 1000 [ 62.303859][ T5332] lo speed is unknown, defaulting to 1000 [ 62.318583][ T5332] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.333233][ T5332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.349745][ T5332] lo speed is unknown, defaulting to 1000 [ 62.356067][ T5332] lo speed is unknown, defaulting to 1000 [ 62.362749][ T5332] lo speed is unknown, defaulting to 1000 [ 62.369251][ T5332] lo speed is unknown, defaulting to 1000 [ 62.375937][ T5332] lo speed is unknown, defaulting to 1000 [ 62.509053][ T5350] syzkaller0: entered promiscuous mode [ 62.514600][ T5350] syzkaller0: entered allmulticast mode [ 62.614890][ T5359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'. [ 62.672050][ T5359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5359 comm=syz.2.634 [ 62.769660][ T5373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 62.795491][ T5372] syzkaller0: entered promiscuous mode [ 62.801222][ T5372] syzkaller0: entered allmulticast mode [ 62.922196][ T5363] lo speed is unknown, defaulting to 1000 [ 63.032187][ T5383] loop4: detected capacity change from 0 to 128 [ 63.041332][ T5383] msdos: Unknown parameter '18446744073709551615' [ 63.067458][ T5383] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.088637][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 63.088656][ T29] audit: type=1400 audit(1770028311.937:495): avc: denied { create } for pid=5382 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.115093][ T29] audit: type=1400 audit(1770028311.937:496): avc: denied { write } for pid=5382 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.184825][ T5390] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 63.234442][ T3002] ================================================================== [ 63.242674][ T3002] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 63.251050][ T3002] [ 63.253398][ T3002] write to 0xffff888121577250 of 8 bytes by task 3305 on cpu 0: [ 63.261140][ T3002] inode_set_ctime_current+0x592/0x810 [ 63.266637][ T3002] simple_unlink+0x2d/0x80 [ 63.271108][ T3002] shmem_unlink+0x12d/0x140 [ 63.275731][ T3002] vfs_unlink+0x28b/0x440 [ 63.280115][ T3002] do_unlinkat+0x1e2/0x4b0 [ 63.284850][ T3002] __x64_sys_unlink+0x2e/0x40 [ 63.289668][ T3002] x64_sys_call+0x2f48/0x3000 [ 63.294393][ T3002] do_syscall_64+0xc0/0x2a0 [ 63.299009][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.305026][ T3002] [ 63.307380][ T3002] read to 0xffff888121577250 of 8 bytes by task 3002 on cpu 1: [ 63.314948][ T3002] atime_needs_update+0x2ef/0x3e0 [ 63.320015][ T3002] touch_atime+0x4a/0x340 [ 63.324657][ T3002] do_readlinkat+0x13d/0x340 [ 63.329290][ T3002] __x64_sys_readlink+0x47/0x60 [ 63.334180][ T3002] x64_sys_call+0x2af1/0x3000 [ 63.339152][ T3002] do_syscall_64+0xc0/0x2a0 [ 63.343780][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.349700][ T3002] [ 63.352039][ T3002] value changed: 0x0000000069807d17 -> 0x0000000069807d18 [ 63.359258][ T3002] [ 63.361656][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 63.368352][ T3002] CPU: 1 UID: 0 PID: 3002 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.377663][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.387837][ T3002] ==================================================================