last executing test programs: 40.477622505s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 40.316410153s ago: executing program 2 (id=6): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x12021) close(0x4) 39.41479257s ago: executing program 2 (id=21): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe70, 0x1}}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) 36.156224719s ago: executing program 2 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r3, &(0x7f0000000d40)=""/43, 0x2b) 35.241616437s ago: executing program 2 (id=41): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)}, 0xc854) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 35.227334328s ago: executing program 32 (id=41): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)}, 0xc854) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.530086648s ago: executing program 4 (id=488): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 2.446492523s ago: executing program 4 (id=491): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) io_submit(0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0x7, {"a2e3ad21ed0d52f91b5d500987f70e06d038e7ff7fc6e5539b0d47078b089b34073b68090890e0878f0e1ac6e7049b344a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b33070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b67dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b000029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490c41bdb114f6b76383709d8f5c554305000000039aec54a1236e80f6a8abadea7662496bddbb02be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560803f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a60100000000000000d06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c07000000db1c332d86d8734143275086603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a97370614060005ea6f1783e287b3bee96e847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70c73a5e69b3df3495903f06572e1067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa452b4f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb5168aa8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dde832de29827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de243717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a1f7ffffffffffffffa5678a654dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd665fc48cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d000000004dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884a34d928ac25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6dd46fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc73400020000605b0000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d37cd7007ad1519ad5470de3dd6d6080cafcc009fc074eb3b700737f7839620a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f02000000000000000f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df05461aa2c82e07855b1ed54acb5741259e8c5426efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eedfd9dfdfea72f9e107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee35133b785f2f47b90e29389f22fc5b59a70efaeb2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531430912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac8c67584f5dc4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed5e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb11a96ea2c4d4ca0398c2235980a9f07b3d0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96d06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bc2409ea1b39b367d58fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f394bdbc10360a1a49500d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000f6ffffffffffffff00", 0x1000}}, 0x1006) 2.357547487s ago: executing program 1 (id=495): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = shmget(0x2, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r1, 0x0, 0x0, 0x20000080, &(0x7f0000000340)=@llc={0x1a, 0x311, 0x80, 0x8, 0x9, 0x2, @random="182a7a58767d"}, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x86) fchdir(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}]}, 0x58}}, 0x0) 2.267556372s ago: executing program 1 (id=498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20044080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00e20405000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 2.151619068s ago: executing program 0 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000180)={'bond_slave_0\x00', @ifru_addrs=@hci={0x1f, 0x4, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1b80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r4], 0x44}}, 0x40000c0) 2.135264469s ago: executing program 1 (id=507): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 2.129988909s ago: executing program 3 (id=508): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000013c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) finit_module(r0, 0x0, 0x1) 2.10087747s ago: executing program 0 (id=509): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80006}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000028c0)={@broadcast, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x4, 0x6, "698ce9", 0x1c, 0x3a, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @mlv2_query={0x82, 0x0, 0x0, 0xd, 0x80, @loopback, 0x1, 0x1}}}}}}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 2.084909701s ago: executing program 0 (id=510): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) open_tree(0xffffffffffffff9c, 0x0, 0x1900) 1.950221588s ago: executing program 3 (id=511): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8000, 0x7fffffff}, 0x4, 0x80, 0xfffe, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x140, 0x200}, 0x0, 0x0, 0x1, 0xfffffff000000000, 0x152f, 0x3, 0x7, 0x0, 0xf7, 0x8, 0xffffffffffffffff}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 1.792891446s ago: executing program 4 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040003000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) 1.285511913s ago: executing program 1 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000200), 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="1f0000001000b16a0093e7d7c5", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.215234666s ago: executing program 0 (id=525): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) open(0x0, 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 1.090899303s ago: executing program 3 (id=527): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x565, &(0x7f0000000280)="$eJzs3U9rXFUbAPDnTpI2bd/XplCKupBAF1ZqJ03inwou6lK0WNB9HZLbUDLplMykNLFgu7AbN1IEEQviB3DvsvgF/BQFLRQpQRduInfmTjpNZpJJOk2mzu8HNznnnjs598yZc+bceW6YAAbWePajEPFKRHyTRBxtKRuOvHC8cdzq45sz2ZbE2tqnfyaR5Puaxyf57yN55uWI+PWriNOFzfVWl1fmS+VyupjnJ2oL1yaqyytnriyU5tK59OrU9PS5t6en3nv3nZ619Y2Lf3//yf0Pz319cvW7nx8eu5vE+fhfXtbajmdwKyI+a2bGYzx/Tkbi/IYDJ3tQWT9J9vsE2JWhfJyPRDYHHI2hfNQD/31fRsQaMKAS4x8GVHMd0Ly279F18Avj0QeNC6DN7R9ufDYSo/Vro8OryVNXRtn17lgP6s/q+OWPe3ezLXr3OQTAtm7djoizw8Ob578kn/9272wXx2ysw/wHe+d+tv55s936p7C+/ok2658jbcbubmw//gsPe1BNR9n67/2269/1oNXYUJ77f33NN5JcvlJOs7ntpYg4FSMHs/xW8Zxzqw/WOpW1rv+yLau/uRbMz+Ph8MGnHzNbqpWepc2tHt2OeLXt+jdZ7//k6f6vh7Ky5+Nil3WcSO+91qls+/ZHHp14PtZ+ini9bf8/iWglW8cnJ+qvh4nmq2Kzv+6c+K1T/d21//nJ+v/w1u0fS1rjtdWd1/Hj6D9pp7Kdvv6b8doDSSPMeiDP3yjVaouT2f6PN++fevL4Zr55fNb+Uye3nv+SNvPfoYj4vMv23zl+p+Oh/dD/szvq/50nHnz0xQ+d6u+u/9+qp07le7qZ/7o9wWd57gAAAAAAAKDfFOox1aRQXE8XCsVi4/6O43G4UK5Ua6cvV5auzjZir2MxUmhGuo+23A8xmd8P28xPbchPR8SxiPh26FA9X5yplGf3u/EAAAAAAAAAAAAAAAAAAADQJ45EjLb7///M70P7fXbAc+crv2FwdR7/eUkvvukJ6Eve/2FwGf8wuIx/GFzGPwwu4x8G14bxP7pf5wHsPe//MLiMfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOipixcuZNva6uObM1l+9vry0nzl+pnZtDpfXFiaKc5UFq8V5yqVuXJanKksbPf3ypXKtcmpWLoxUUurtYnq8sqlhcrS1dqlKwulufRSOrInrQIAAAAAAAAAAAAAAAAAAIAXS3V5Zb5ULqeLEhK7Sgz3x2lI9Dix3zMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzxbwAAAP//yr431g==") r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) 1.060542894s ago: executing program 5 (id=528): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_buf(r1, 0x1, 0x37, 0xffffffffffffffff, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x0, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) 1.041456736s ago: executing program 3 (id=529): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 983.445429ms ago: executing program 5 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000180)={0x1, 0x0, 0x9b, 0x7fffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x2) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext={0x8, 0x20000000000000}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r4, 0x0) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 960.11897ms ago: executing program 5 (id=531): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x300c}]}, 0x40}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 937.217951ms ago: executing program 4 (id=532): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x8}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000100)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) 632.960617ms ago: executing program 5 (id=533): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x2000, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x4000, 0x5, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 557.727991ms ago: executing program 5 (id=534): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x4008894) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 553.259441ms ago: executing program 1 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x83}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x66f51723ebf194b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 383.80562ms ago: executing program 1 (id=536): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) 183.65846ms ago: executing program 3 (id=537): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) migrate_pages(0x0, 0xfff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000020000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a000000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 182.75318ms ago: executing program 0 (id=547): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 148.842122ms ago: executing program 3 (id=538): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 131.678833ms ago: executing program 0 (id=539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17.678609ms ago: executing program 4 (id=540): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 14.755789ms ago: executing program 4 (id=541): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 0s ago: executing program 5 (id=542): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffbff, 0x81, 0x4, 0x4}}]}]}}}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x20c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xa, 0x1a, 'netem\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x90}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '.\x00'}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x18a}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x88}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4a}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff5}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x20c}, 0x1, 0x0, 0x0, 0x14}, 0x20000001) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 31.803346][ T28] audit: type=1400 audit(1776749170.114:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.830394][ T28] audit: type=1400 audit(1776749170.144:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.831163][ T3308] cgroup: Unknown subsys name 'net' [ 31.860922][ T28] audit: type=1400 audit(1776749170.174:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.000116][ T3308] cgroup: Unknown subsys name 'cpuset' [ 32.006802][ T3308] cgroup: Unknown subsys name 'rlimit' [ 32.136494][ T28] audit: type=1400 audit(1776749170.444:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.163910][ T28] audit: type=1400 audit(1776749170.444:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.188006][ T28] audit: type=1400 audit(1776749170.444:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.194671][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.212300][ T28] audit: type=1400 audit(1776749170.444:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.245038][ T28] audit: type=1400 audit(1776749170.454:69): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.245429][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.272269][ T28] audit: type=1400 audit(1776749170.454:70): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.309054][ T28] audit: type=1400 audit(1776749170.474:71): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.074237][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 34.131601][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 34.143536][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 34.165445][ T3332] chnl_net:caif_netlink_parms(): no params data found [ 34.219060][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.226895][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.234907][ T3320] bridge_slave_0: entered allmulticast mode [ 34.241973][ T3320] bridge_slave_0: entered promiscuous mode [ 34.261565][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.269029][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.277046][ T3320] bridge_slave_1: entered allmulticast mode [ 34.284389][ T3320] bridge_slave_1: entered promiscuous mode [ 34.319522][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.327701][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.335741][ T3328] bridge_slave_0: entered allmulticast mode [ 34.342738][ T3328] bridge_slave_0: entered promiscuous mode [ 34.359822][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.367356][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.375014][ T3321] bridge_slave_0: entered allmulticast mode [ 34.382628][ T3321] bridge_slave_0: entered promiscuous mode [ 34.392576][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.400202][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.407912][ T3328] bridge_slave_1: entered allmulticast mode [ 34.415052][ T3328] bridge_slave_1: entered promiscuous mode [ 34.422620][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.432782][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 34.442542][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.450418][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.457791][ T3321] bridge_slave_1: entered allmulticast mode [ 34.464450][ T3321] bridge_slave_1: entered promiscuous mode [ 34.480762][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.517184][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.525557][ T3332] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.534432][ T3332] bridge_slave_0: entered allmulticast mode [ 34.541627][ T3332] bridge_slave_0: entered promiscuous mode [ 34.549608][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.568834][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.579430][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.588112][ T3332] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.596691][ T3332] bridge_slave_1: entered allmulticast mode [ 34.604364][ T3332] bridge_slave_1: entered promiscuous mode [ 34.612322][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.624268][ T3320] team0: Port device team_slave_0 added [ 34.634367][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.653786][ T3320] team0: Port device team_slave_1 added [ 34.687094][ T3332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.698401][ T3328] team0: Port device team_slave_0 added [ 34.714514][ T3321] team0: Port device team_slave_0 added [ 34.721722][ T3321] team0: Port device team_slave_1 added [ 34.729256][ T3332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.740902][ T3328] team0: Port device team_slave_1 added [ 34.751633][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.759642][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.790694][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.820865][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.829146][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.857782][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.870638][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.878131][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.885973][ T3327] bridge_slave_0: entered allmulticast mode [ 34.892996][ T3327] bridge_slave_0: entered promiscuous mode [ 34.908505][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.916543][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.945580][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.961511][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.970108][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.977815][ T3327] bridge_slave_1: entered allmulticast mode [ 34.985038][ T3327] bridge_slave_1: entered promiscuous mode [ 34.998163][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.006776][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.035911][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.049271][ T3332] team0: Port device team_slave_0 added [ 35.055704][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.063929][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.095290][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.115830][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.124449][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.154142][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.167224][ T3332] team0: Port device team_slave_1 added [ 35.188112][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.212148][ T3328] hsr_slave_0: entered promiscuous mode [ 35.219189][ T3328] hsr_slave_1: entered promiscuous mode [ 35.226448][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.252752][ T3320] hsr_slave_0: entered promiscuous mode [ 35.258940][ T3320] hsr_slave_1: entered promiscuous mode [ 35.265432][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 35.271845][ T3320] Cannot create hsr debugfs directory [ 35.288307][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.298508][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.328249][ T3332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.355667][ T3327] team0: Port device team_slave_0 added [ 35.362841][ T3327] team0: Port device team_slave_1 added [ 35.369623][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.376763][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.405465][ T3332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.419295][ T3321] hsr_slave_0: entered promiscuous mode [ 35.426167][ T3321] hsr_slave_1: entered promiscuous mode [ 35.432558][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 35.438785][ T3321] Cannot create hsr debugfs directory [ 35.468389][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.475813][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.502759][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.514273][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.522007][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.551872][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.604994][ T3332] hsr_slave_0: entered promiscuous mode [ 35.612344][ T3332] hsr_slave_1: entered promiscuous mode [ 35.619441][ T3332] debugfs: 'hsr0' already exists in 'hsr' [ 35.625845][ T3332] Cannot create hsr debugfs directory [ 35.663606][ T3327] hsr_slave_0: entered promiscuous mode [ 35.671552][ T3327] hsr_slave_1: entered promiscuous mode [ 35.678304][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 35.685472][ T3327] Cannot create hsr debugfs directory [ 35.821065][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.830784][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.843287][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.852293][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.865752][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.875488][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.886447][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.896271][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.914056][ T3328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.924577][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.933884][ T3328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.943229][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.951510][ T3328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.961280][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.977555][ T3328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.986557][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.009414][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.018991][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.031608][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.041276][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.050664][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.060879][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.070393][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.079313][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.122011][ T3332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.132391][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.141465][ T3332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.151223][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.160471][ T3332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.169984][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.184239][ T3332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.193169][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.226730][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.236270][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.244556][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.253739][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.262016][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.271547][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.281070][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.291114][ T3327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.315740][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.325843][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.350981][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.361415][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.369119][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.380192][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.391396][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.405546][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.413103][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.427180][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.434964][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.448349][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.462541][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.470159][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.491008][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.498345][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.518335][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.526649][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.550862][ T3332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.587662][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.598626][ T3332] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.616055][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.623979][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.645306][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.652779][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.672112][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.689380][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.698321][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.712127][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.719818][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.735192][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.743313][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.757724][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.782582][ T3332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.890606][ T3332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.923471][ T3321] veth0_vlan: entered promiscuous mode [ 36.945911][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.956743][ T3321] veth1_vlan: entered promiscuous mode [ 36.990546][ T3328] veth0_vlan: entered promiscuous mode [ 37.001267][ T3321] veth0_macvtap: entered promiscuous mode [ 37.016015][ T3321] veth1_macvtap: entered promiscuous mode [ 37.033306][ T3328] veth1_vlan: entered promiscuous mode [ 37.040980][ T3320] veth0_vlan: entered promiscuous mode [ 37.053554][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.071139][ T3320] veth1_vlan: entered promiscuous mode [ 37.080647][ T3332] veth0_vlan: entered promiscuous mode [ 37.088102][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.105420][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.114923][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.129088][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.138977][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.149279][ T3332] veth1_vlan: entered promiscuous mode [ 37.166528][ T3320] veth0_macvtap: entered promiscuous mode [ 37.173843][ T3328] veth0_macvtap: entered promiscuous mode [ 37.181846][ T3328] veth1_macvtap: entered promiscuous mode [ 37.197734][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 37.197749][ T28] audit: type=1400 audit(1776749175.504:85): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.sccxyG/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.233851][ T3320] veth1_macvtap: entered promiscuous mode [ 37.238022][ T28] audit: type=1400 audit(1776749175.544:86): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.255011][ T3332] veth0_macvtap: entered promiscuous mode [ 37.265371][ T28] audit: type=1400 audit(1776749175.544:87): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.sccxyG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.282455][ T3327] veth0_vlan: entered promiscuous mode [ 37.305880][ T28] audit: type=1400 audit(1776749175.544:88): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.317405][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.332566][ T28] audit: type=1400 audit(1776749175.544:89): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.sccxyG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.341586][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.366701][ T28] audit: type=1400 audit(1776749175.544:90): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.sccxyG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.377880][ T3327] veth1_vlan: entered promiscuous mode [ 37.411572][ T28] audit: type=1400 audit(1776749175.544:91): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.432532][ T28] audit: type=1400 audit(1776749175.614:92): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.458398][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.467197][ T3332] veth1_macvtap: entered promiscuous mode [ 37.475588][ T28] audit: type=1400 audit(1776749175.614:93): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="gadgetfs" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.484843][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.517880][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.527696][ T28] audit: type=1400 audit(1776749175.834:94): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.561191][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.571272][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.592621][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.603692][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.616042][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.624742][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.632899][ T3490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.636827][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.656788][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.670473][ T3327] veth0_macvtap: entered promiscuous mode [ 37.681181][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.695817][ T3327] veth1_macvtap: entered promiscuous mode [ 37.702733][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.720491][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.740683][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.752639][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.768302][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.784535][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.813988][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.832297][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.843017][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.860670][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.883374][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.898813][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 37.907812][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.222517][ T3525] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 38.325456][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 38.352432][ T3529] bridge: RTM_NEWNEIGH with invalid ether address [ 38.368098][ T3533] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 38.370699][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 38.389414][ T3531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3531 comm=syz.0.13 [ 38.422998][ T3533] 8021q: VLANs not supported on ip6_vti0 [ 38.474818][ T3543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18'. [ 38.523697][ T3547] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.20'. [ 38.538155][ T3547] netlink: 3074 bytes leftover after parsing attributes in process `syz.0.20'. [ 38.550010][ T3543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3543 comm=syz.4.18 [ 38.664817][ T3552] loop2: detected capacity change from 0 to 8192 [ 38.680159][ T3552] ======================================================= [ 38.680159][ T3552] WARNING: The mand mount option has been deprecated and [ 38.680159][ T3552] and is ignored by this kernel. Remove the mand [ 38.680159][ T3552] option from the mount to silence this warning. [ 38.680159][ T3552] ======================================================= [ 38.705393][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 38.790558][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 38.832055][ T3558] syz.0.23 (3558) used greatest stack depth: 10368 bytes left [ 40.124003][ T3583] mmap: syz.0.29 (3583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.608647][ T3579] veth0_macvtap: left promiscuous mode [ 41.619255][ T3562] loop2: detected capacity change from 8192 to 0 [ 41.619323][ T3552] Buffer I/O error on dev loop2, logical block 33, lost sync page write [ 41.639616][ T3552] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 41.655275][ T3552] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 41.665729][ T3552] Buffer I/O error on dev loop2, logical block 199, lost async page write [ 41.689289][ T3552] Buffer I/O error on dev loop2, logical block 201, lost async page write [ 41.709528][ T3552] Buffer I/O error on dev loop2, logical block 203, lost async page write [ 41.739900][ T3552] Buffer I/O error on dev loop2, logical block 204, lost async page write [ 41.754948][ T3552] Buffer I/O error on dev loop2, logical block 205, lost async page write [ 41.764323][ T3552] Buffer I/O error on dev loop2, logical block 206, lost async page write [ 41.774738][ T3552] Buffer I/O error on dev loop2, logical block 208, lost async page write [ 41.785482][ T3552] Buffer I/O error on dev loop2, logical block 210, lost async page write [ 41.800885][ T3591] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.839720][ T3321] FAT-fs (loop2): Directory bread(block 65) failed [ 41.852667][ T3321] FAT-fs (loop2): Directory bread(block 66) failed [ 41.871360][ T3321] FAT-fs (loop2): Directory bread(block 67) failed [ 41.888845][ T3321] FAT-fs (loop2): Directory bread(block 68) failed [ 41.902324][ T3321] FAT-fs (loop2): Directory bread(block 69) failed [ 41.916856][ T3321] FAT-fs (loop2): Directory bread(block 70) failed [ 41.933429][ T3321] FAT-fs (loop2): Directory bread(block 71) failed [ 41.975480][ T3597] loop3: detected capacity change from 0 to 256 [ 42.023811][ T3597] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.042204][ T30] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 42.127061][ T3607] loop0: detected capacity change from 0 to 1024 [ 42.191698][ T3321] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 42.209558][ T3321] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 42.228018][ T3607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.250446][ T3321] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 42.363583][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 42.363605][ T28] audit: type=1400 audit(1776749180.674:158): avc: denied { mount } for pid=3605 comm="syz.0.40" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.619239][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.670335][ T28] audit: type=1400 audit(1776749180.754:159): avc: denied { add_name } for pid=3605 comm="syz.0.40" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.703334][ T28] audit: type=1400 audit(1776749180.754:160): avc: denied { create } for pid=3605 comm="syz.0.40" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.755560][ T28] audit: type=1400 audit(1776749180.754:161): avc: denied { read write } for pid=3605 comm="syz.0.40" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.839574][ T28] audit: type=1400 audit(1776749180.754:162): avc: denied { open } for pid=3605 comm="syz.0.40" path="/11/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.886585][ T28] audit: type=1400 audit(1776749180.884:163): avc: denied { map } for pid=3605 comm="syz.0.40" path="/11/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.899199][ T3332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.944917][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.957324][ T28] audit: type=1400 audit(1776749180.894:164): avc: denied { execute } for pid=3605 comm="syz.0.40" path="/11/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.000266][ T28] audit: type=1400 audit(1776749181.224:165): avc: denied { accept } for pid=3619 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.053790][ T28] audit: type=1400 audit(1776749181.364:166): avc: denied { bind } for pid=3624 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.086776][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.101326][ T28] audit: type=1400 audit(1776749181.394:167): avc: denied { setopt } for pid=3624 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.135852][ T3625] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.188308][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.224537][ T3625] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.261225][ T3640] netlink: 'syz.1.49': attribute type 11 has an invalid length. [ 43.306696][ T3625] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.320776][ T3649] __nla_validate_parse: 2 callbacks suppressed [ 43.320791][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 43.356320][ T30] bridge_slave_1: left allmulticast mode [ 43.363829][ T30] bridge_slave_1: left promiscuous mode [ 43.379378][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.393292][ T3647] Zero length message leads to an empty skb [ 43.412818][ T30] bridge_slave_0: left allmulticast mode [ 43.419639][ T30] bridge_slave_0: left promiscuous mode [ 43.433003][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.552320][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.569921][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.586769][ T30] bond0 (unregistering): Released all slaves [ 43.605581][ T3625] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.619100][ T3046] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.643952][ T30] hsr_slave_0: left promiscuous mode [ 43.651210][ T30] hsr_slave_1: left promiscuous mode [ 43.657424][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.668645][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.677257][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.686662][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.703423][ T30] veth1_macvtap: left promiscuous mode [ 43.710687][ T30] veth0_macvtap: left promiscuous mode [ 43.717096][ T30] veth1_vlan: left promiscuous mode [ 43.723475][ T30] veth0_vlan: left promiscuous mode [ 43.819173][ T30] team0 (unregistering): Port device team_slave_1 removed [ 43.836831][ T30] team0 (unregistering): Port device team_slave_0 removed [ 44.042582][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.052055][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.066141][ T3617] chnl_net:caif_netlink_parms(): no params data found [ 44.118439][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.155367][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.163787][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.171997][ T3617] bridge_slave_0: entered allmulticast mode [ 44.179054][ T3617] bridge_slave_0: entered promiscuous mode [ 44.190319][ T3625] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.202903][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.210842][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.218345][ T3675] ALSA: seq fatal error: cannot create timer (-19) [ 44.219404][ T3617] bridge_slave_1: entered allmulticast mode [ 44.240260][ T3617] bridge_slave_1: entered promiscuous mode [ 44.263055][ T3625] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.286390][ T3617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.298373][ T3617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.311743][ T3691] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 44.337765][ T3617] team0: Port device team_slave_0 added [ 44.354721][ T3617] team0: Port device team_slave_1 added [ 44.369584][ T3625] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.422368][ T3691] macvtap1: entered allmulticast mode [ 44.440639][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.456405][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.509704][ T3617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.577211][ T3046] 8021q: adding VLAN 0 to HW filter on device eth1 [ 44.588842][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.615175][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.670882][ T3617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.731519][ T3617] hsr_slave_0: entered promiscuous mode [ 44.744777][ T3617] hsr_slave_1: entered promiscuous mode [ 44.763447][ T3617] debugfs: 'hsr0' already exists in 'hsr' [ 44.790584][ T3617] Cannot create hsr debugfs directory [ 45.022867][ T3617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.052197][ T3617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.073391][ T3617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.098136][ T3617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.120437][ T3617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.145133][ T3617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.163855][ T3046] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.180514][ T3617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.204065][ T3617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.349022][ T3617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.393554][ T3617] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.428525][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.436336][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.514768][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.522706][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.585314][ T3617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.607703][ T3617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.020803][ T3604] syz.1.38 (3604) used greatest stack depth: 10256 bytes left [ 46.108798][ T3046] 8021q: adding VLAN 0 to HW filter on device eth4 [ 46.177649][ T3617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.252935][ T3756] Cannot find del_set index 0 as target [ 46.314605][ T3756] syz.4.59 (3756) used greatest stack depth: 8752 bytes left [ 47.014815][ T3617] veth0_vlan: entered promiscuous mode [ 47.023362][ T3617] veth1_vlan: entered promiscuous mode [ 47.036930][ T3617] veth0_macvtap: entered promiscuous mode [ 47.056851][ T3617] veth1_macvtap: entered promiscuous mode [ 47.079068][ T3617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.101083][ T3617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.125028][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.135417][ T3784] IPv6: addrconf: prefix option has invalid lifetime [ 47.144168][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.155652][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.181041][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.308162][ T3793] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 47.322907][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 47.323254][ T3796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 47.359421][ T3796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 47.368873][ T3796] veth1_to_hsr: entered promiscuous mode [ 47.375614][ T3796] veth1_to_hsr: entered allmulticast mode [ 47.394243][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 47.394298][ T28] audit: type=1400 audit(1776749185.704:196): avc: denied { bpf } for pid=3792 comm="syz.1.66" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.459379][ T28] audit: type=1400 audit(1776749185.744:197): avc: denied { perfmon } for pid=3801 comm="syz.4.68" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.631541][ T3806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.780648][ T3809] loop1: detected capacity change from 0 to 512 [ 48.096589][ T28] audit: type=1400 audit(1776749186.404:198): avc: denied { write } for pid=3811 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.277003][ T28] audit: type=1400 audit(1776749186.584:199): avc: denied { write } for pid=3815 comm="syz.5.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.350204][ T3816] syzkaller0: entered promiscuous mode [ 48.370425][ T3816] syzkaller0: entered allmulticast mode [ 48.569274][ T3822] bond1: option lacp_rate: invalid value (139) [ 48.591983][ T3822] bond1 (unregistering): Released all slaves [ 48.856103][ T28] audit: type=1400 audit(1776749187.164:200): avc: denied { ioctl } for pid=3824 comm="syz.4.76" path="socket:[6896]" dev="sockfs" ino=6896 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.856244][ T3825] syzkaller0: entered promiscuous mode [ 48.889044][ T3825] syzkaller0: entered allmulticast mode [ 49.001658][ T3829] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 49.013103][ T3829] ipvlan2: entered allmulticast mode [ 49.019142][ T3829] macvlan1: entered allmulticast mode [ 49.025158][ T3829] veth1_vlan: entered allmulticast mode [ 49.183666][ T28] audit: type=1400 audit(1776749187.494:201): avc: denied { create } for pid=3840 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.204851][ T28] audit: type=1400 audit(1776749187.494:202): avc: denied { accept } for pid=3840 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.444672][ T28] audit: type=1400 audit(1776749187.754:203): avc: denied { map } for pid=3845 comm="syz.3.82" path="socket:[5607]" dev="sockfs" ino=5607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 50.389667][ T3855] loop0: detected capacity change from 0 to 1024 [ 50.485979][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.613599][ T3863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.625887][ T28] audit: type=1400 audit(1776749188.924:204): avc: denied { write } for pid=3856 comm="syz.4.87" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.689680][ T3863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.752294][ T3332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.781012][ T28] audit: type=1400 audit(1776749188.924:205): avc: denied { ioctl } for pid=3856 comm="syz.4.87" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.152397][ T3877] loop0: detected capacity change from 0 to 512 [ 51.164717][ T3877] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.199887][ T3877] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 51.219988][ T3877] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 51.239485][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 51.246139][ C1] EXT4-fs (loop0): initial error at time 1776749189: mb_free_blocks:2049: inode 11: block 64 [ 51.255389][ T3877] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.92: corrupted inode contents [ 51.256699][ C1] EXT4-fs (loop0): last error at time 1776749189: mb_free_blocks:2049: inode 11: block 64 [ 51.269247][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.317132][ T3877] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #11: comm syz.0.92: mark_inode_dirty error [ 51.356656][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.356875][ T3877] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.92: invalid indirect mapped block 1 (level 1) [ 51.382472][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.382623][ T3877] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.92: corrupted inode contents [ 51.406637][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.407190][ T3877] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 51.428559][ T3877] loop0: lost filesystem error report for type 5 error -117 [ 51.429037][ T3877] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.92: corrupted inode contents [ 51.450548][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.450775][ T3877] EXT4-fs error (device loop0): ext4_truncate:4690: inode #11: comm syz.0.92: mark_inode_dirty error [ 51.473598][ T3877] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.473803][ T3877] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 51.494062][ T3877] loop0: lost filesystem error report for type 5 error -117 [ 51.494276][ T3877] EXT4-fs (loop0): 1 truncate cleaned up [ 51.509552][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.564520][ T3332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.615149][ T3886] loop3: detected capacity change from 0 to 1024 [ 51.641445][ T3886] EXT4-fs: Ignoring removed bh option [ 51.652213][ T3886] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.667305][ T3886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 51.677648][ T3886] System zones: 0-1, 3-12 [ 51.703670][ T3886] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.94: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.722616][ T3886] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.724663][ T3886] EXT4-fs (loop3): Remounting filesystem read-only [ 51.735424][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 51.735563][ C1] EXT4-fs (loop3): initial error at time 1776749190: ext4_map_blocks:833: inode 3: block 1 [ 51.735835][ C1] EXT4-fs (loop3): last error at time 1776749190: ext4_map_blocks:833: inode 3: block 1 [ 51.776130][ T3886] EXT4-fs (loop3): 1 orphan inode deleted [ 51.789788][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.873830][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.951031][ T3895] tipc: Started in network mode [ 51.958401][ T3895] tipc: Node identity 7ea66582f7c6, cluster identity 4711 [ 51.967390][ T3895] tipc: Enabled bearer , priority 0 [ 51.979753][ T3895] syzkaller0: entered promiscuous mode [ 51.986011][ T3895] syzkaller0: entered allmulticast mode [ 52.001646][ T3895] tipc: Resetting bearer [ 52.011203][ T3899] syz_tun: entered allmulticast mode [ 52.017517][ T3893] tipc: Resetting bearer [ 52.026065][ T3893] tipc: Disabling bearer [ 52.180955][ T3903] loop3: detected capacity change from 0 to 8192 [ 52.565441][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 52.588155][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 52.622757][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 52.622773][ T28] audit: type=1400 audit(1776749190.934:215): avc: denied { map } for pid=3932 comm="syz.0.113" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.709700][ T28] audit: type=1400 audit(1776749190.934:216): avc: denied { read write } for pid=3932 comm="syz.0.113" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.766692][ T28] audit: type=1400 audit(1776749190.934:217): avc: denied { write } for pid=3932 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.986462][ T28] audit: type=1400 audit(1776749192.294:218): avc: denied { mount } for pid=4043 comm="syz.0.116" name="/" dev="ramfs" ino=7071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.108990][ T4048] loop5: detected capacity change from 0 to 128 [ 54.130400][ T28] audit: type=1400 audit(1776749192.444:219): avc: denied { execute } for pid=4043 comm="syz.0.116" path="/memory.swap.current" dev="ramfs" ino=7072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 54.266963][ T28] audit: type=1400 audit(1776749192.574:220): avc: denied { create } for pid=4056 comm="syz.5.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.307147][ T4054] netlink: 'syz.3.118': attribute type 39 has an invalid length. [ 54.333268][ T28] audit: type=1400 audit(1776749192.634:221): avc: denied { name_connect } for pid=4055 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 54.386696][ T28] audit: type=1400 audit(1776749192.684:222): avc: denied { accept } for pid=4055 comm="syz.4.121" lport=45359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.444076][ T28] audit: type=1400 audit(1776749192.754:223): avc: denied { write } for pid=4063 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.466643][ T4064] netlink: 'syz.3.124': attribute type 21 has an invalid length. [ 54.476892][ T4064] netlink: 128 bytes leftover after parsing attributes in process `syz.3.124'. [ 54.487702][ T4064] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 54.495824][ T4064] netlink: 'syz.3.124': attribute type 3 has an invalid length. [ 54.503708][ T4064] netlink: 3 bytes leftover after parsing attributes in process `syz.3.124'. [ 54.632501][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 54.656014][ T4071] bond_slave_0: entered promiscuous mode [ 54.662455][ T4071] bond_slave_1: entered promiscuous mode [ 54.674076][ T4071] macvlan2: entered promiscuous mode [ 54.682921][ T4071] bond0: entered promiscuous mode [ 54.691800][ T4071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.130090][ T4078] loop4: detected capacity change from 0 to 512 [ 55.137628][ T4078] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 55.190857][ T28] audit: type=1400 audit(1776749193.504:224): avc: denied { read } for pid=4079 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.288618][ T4084] loop5: detected capacity change from 0 to 164 [ 55.310570][ T4087] loop0: detected capacity change from 0 to 512 [ 55.345575][ T4084] ISOFS: unable to read i-node block [ 55.354739][ T4087] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.131: corrupted in-inode xattr: invalid ea_ino [ 55.379997][ T4084] isofs_fill_super: get root inode failed [ 55.386082][ T4087] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.389506][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 55.406322][ C0] EXT4-fs (loop0): initial error at time 1776749193: ext4_iget_extra_inode:5128: inode 15 [ 55.416604][ C0] EXT4-fs (loop0): last error at time 1776749193: ext4_iget_extra_inode:5128: inode 15 [ 55.436801][ T4087] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.131: couldn't read orphan inode 15 (err -117) [ 55.481157][ T4087] loop0: lost filesystem error report for type 5 error -117 [ 55.525481][ T4087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.585337][ T4097] netlink: 68 bytes leftover after parsing attributes in process `syz.5.134'. [ 55.613241][ T4099] loop4: detected capacity change from 0 to 256 [ 55.639900][ T4099] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 55.734758][ T4087] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.131: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 55.815930][ T3332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.948870][ T4095] loop3: detected capacity change from 0 to 2048 [ 55.977064][ T4125] bridge0: entered promiscuous mode [ 55.986824][ T4125] macsec1: entered promiscuous mode [ 56.076465][ T4095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.738998][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.870371][ T4233] loop3: detected capacity change from 0 to 512 [ 56.897463][ T4233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.947697][ T4233] EXT4-fs (loop3): 1 orphan inode deleted [ 56.955742][ T4233] EXT4-fs (loop3): 1 truncate cleaned up [ 56.963153][ T4233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.000356][ T4233] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.139' sets config #0 [ 57.072542][ T4243] syzkaller0: entered promiscuous mode [ 57.087087][ T4259] loop0: detected capacity change from 0 to 512 [ 57.097411][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.107024][ T4243] syzkaller0: entered allmulticast mode [ 57.118485][ T4259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.154758][ T4259] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.215098][ T4259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 57.259272][ T4259] EXT4-fs (loop0): failed to initialize system zone (-117) [ 57.294450][ T4259] EXT4-fs (loop0): mount failed [ 57.372873][ T4282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.149'. [ 57.516051][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 57.590660][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 57.625496][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.146'. [ 57.689449][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 57.716342][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.146'. [ 57.736909][ T4315] netlink: 277 bytes leftover after parsing attributes in process `syz.1.154'. [ 57.739338][ T4281] netlink: 'syz.3.146': attribute type 6 has an invalid length. [ 57.818629][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 57.818643][ T28] audit: type=1400 audit(1776749196.124:231): avc: denied { mount } for pid=4326 comm="syz.4.157" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.858304][ T28] audit: type=1400 audit(1776749196.164:232): avc: denied { sqpoll } for pid=4326 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.031354][ T28] audit: type=1400 audit(1776749196.344:233): avc: denied { create } for pid=4346 comm="syz.5.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 58.055984][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.160'. [ 58.067739][ T28] audit: type=1400 audit(1776749196.344:234): avc: denied { write } for pid=4346 comm="syz.5.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 58.091539][ T28] audit: type=1400 audit(1776749196.384:235): avc: denied { listen } for pid=4350 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.126619][ T4358] netlink: 550 bytes leftover after parsing attributes in process `syz.3.162'. [ 58.136895][ T28] audit: type=1400 audit(1776749196.384:236): avc: denied { setopt } for pid=4350 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.170625][ T28] audit: type=1400 audit(1776749196.474:237): avc: denied { create } for pid=4359 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.288881][ T4360] team0: Device gtp0 is of different type [ 58.400956][ T4368] loop3: detected capacity change from 0 to 512 [ 58.514807][ T4376] loop3: detected capacity change from 0 to 128 [ 58.522498][ T4376] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.536823][ T4376] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.600029][ T28] audit: type=1400 audit(1776749196.914:238): avc: denied { connect } for pid=4379 comm="syz.3.168" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.669978][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 58.707634][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 58.756825][ T28] audit: type=1400 audit(1776749197.064:239): avc: denied { create } for pid=4389 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.757679][ T4392] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 58.799530][ T4392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.802064][ T28] audit: type=1400 audit(1776749197.114:240): avc: denied { read write } for pid=4394 comm="syz.0.173" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.881346][ T4391] bond1: (slave geneve2): making interface the new active one [ 58.904554][ T4391] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 59.298362][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.191'. [ 59.563485][ T4464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.098340][ T4493] netlink: 'syz.3.215': attribute type 13 has an invalid length. [ 60.196852][ T4493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.333140][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.340711][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.432348][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.453182][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.483232][ T4497] veth1_to_hsr: left promiscuous mode [ 60.497986][ T4497] veth1_to_hsr: left allmulticast mode [ 60.547262][ T4497] veth1_vlan: left allmulticast mode [ 60.593616][ T4497] macvtap1: left allmulticast mode [ 60.599945][ T4497] ipvlan2: left allmulticast mode [ 60.605494][ T4497] macvlan1: left allmulticast mode [ 60.617400][ T4502] geneve2: entered promiscuous mode [ 60.631592][ T4521] vlan2: entered promiscuous mode [ 60.637369][ T4521] bridge1: entered promiscuous mode [ 60.643919][ T4521] vlan2: entered allmulticast mode [ 60.649183][ T4521] bridge1: entered allmulticast mode [ 60.719814][ T4539] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 60.728925][ T4539] bond0: (slave bond_slave_0): Releasing backup interface [ 60.788516][ T4550] bridge0: port 3(gretap0) entered blocking state [ 60.796530][ T4550] bridge0: port 3(gretap0) entered disabled state [ 60.804477][ T4550] gretap0: entered allmulticast mode [ 60.810956][ T4550] gretap0: entered promiscuous mode [ 60.816744][ T4550] bridge0: port 3(gretap0) entered blocking state [ 60.823815][ T4550] bridge0: port 3(gretap0) entered forwarding state [ 61.694144][ T4618] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 61.728090][ T4618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.758492][ T4618] bond1: (slave gretap1): making interface the new active one [ 61.773456][ T4618] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 61.797898][ T4618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4618 comm=syz.4.261 [ 62.822313][ T28] kauditd_printk_skb: 554 callbacks suppressed [ 62.822340][ T28] audit: type=1400 audit(1776749201.134:795): avc: denied { read write } for pid=4677 comm="syz.4.288" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.883279][ T28] audit: type=1400 audit(1776749201.174:796): avc: denied { create } for pid=4677 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 62.929459][ T28] audit: type=1400 audit(1776749201.174:797): avc: denied { prog_load } for pid=4677 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.952425][ T28] audit: type=1400 audit(1776749201.184:798): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.002449][ T28] audit: type=1400 audit(1776749201.194:799): avc: denied { allowed } for pid=4679 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 63.024366][ T28] audit: type=1400 audit(1776749201.194:800): avc: denied { create } for pid=4679 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 63.048047][ T28] audit: type=1400 audit(1776749201.234:801): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.122436][ T28] audit: type=1400 audit(1776749201.234:802): avc: denied { name_bind } for pid=4681 comm="syz.4.290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 63.183646][ T28] audit: type=1400 audit(1776749201.304:803): avc: denied { map_create } for pid=4681 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.239115][ T28] audit: type=1400 audit(1776749201.314:804): avc: denied { prog_load } for pid=4681 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.533429][ T4701] __nla_validate_parse: 9 callbacks suppressed [ 63.533442][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 65.389394][ T4527] IPVS: starting estimator thread 0... [ 65.489640][ T4741] IPVS: using max 2304 ests per chain, 115200 per kthread [ 65.596527][ T4755] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 65.649251][ T4758] netlink: 'syz.5.320': attribute type 10 has an invalid length. [ 65.657503][ T4758] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.320'. [ 65.710414][ T4527] IPVS: starting estimator thread 0... [ 65.809545][ T4761] IPVS: using max 2448 ests per chain, 122400 per kthread [ 66.230747][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 66.278063][ T4775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.320683][ T4781] macvlan2: entered promiscuous mode [ 66.345644][ T4781] macvlan2: entered allmulticast mode [ 66.392921][ T4775] bond2: (slave vti0): refused to change device type [ 67.009647][ T4798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.337'. [ 67.037580][ T4798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4798 comm=syz.5.337 [ 67.216408][ T4812] xfrm1: entered promiscuous mode [ 67.230234][ T4812] xfrm1: entered allmulticast mode [ 67.434555][ T4826] netlink: 9 bytes leftover after parsing attributes in process `syz.4.349'. [ 67.462702][ T4826] gretap0: entered promiscuous mode [ 67.489744][ T4826] netlink: 5 bytes leftover after parsing attributes in process `syz.4.349'. [ 67.521241][ T4826] 0ªî{X¹¦: renamed from gretap0 [ 67.548431][ T4826] 0ªî{X¹¦: left promiscuous mode [ 67.565987][ T4826] 0ªî{X¹¦: entered allmulticast mode [ 67.577740][ T4826] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 67.639359][ T4841] syz_tun: entered promiscuous mode [ 67.660898][ T4841] macvtap1: entered promiscuous mode [ 67.682280][ T4841] macvtap1: entered allmulticast mode [ 67.721957][ T4841] syz_tun: left promiscuous mode [ 67.834578][ T28] kauditd_printk_skb: 327 callbacks suppressed [ 67.834594][ T28] audit: type=1400 audit(1776749206.144:1132): avc: denied { create } for pid=4852 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 67.936687][ T28] audit: type=1400 audit(1776749206.174:1133): avc: denied { open } for pid=4852 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.041827][ T28] audit: type=1400 audit(1776749206.174:1134): avc: denied { create } for pid=4852 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 68.119503][ T28] audit: type=1400 audit(1776749206.174:1135): avc: denied { open } for pid=4852 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.169703][ T28] audit: type=1400 audit(1776749206.184:1136): avc: denied { bpf } for pid=4852 comm="syz.0.361" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 68.209086][ T28] audit: type=1400 audit(1776749206.244:1137): avc: denied { open } for pid=4852 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.256405][ T28] audit: type=1400 audit(1776749206.244:1138): avc: denied { read write } for pid=3617 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.286012][ T28] audit: type=1400 audit(1776749206.244:1139): avc: denied { open } for pid=4855 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.308441][ T28] audit: type=1400 audit(1776749206.244:1140): avc: denied { open } for pid=4855 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.352759][ T28] audit: type=1400 audit(1776749206.244:1141): avc: denied { prog_load } for pid=4855 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.425715][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.372'. [ 68.596973][ T4886] netlink: 'syz.5.372': attribute type 1 has an invalid length. [ 68.837710][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.375'. [ 68.882780][ T4893] bond1 (unregistering): Released all slaves [ 69.284597][ T4917] netlink: 'syz.3.386': attribute type 16 has an invalid length. [ 69.312737][ T4917] bridge0: port 3(gretap0) entered disabled state [ 69.339532][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.347551][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.372298][ T4924] netlink: 14 bytes leftover after parsing attributes in process `syz.4.389'. [ 69.404458][ T4917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.414703][ T4917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.440233][ T4917] bond0: left promiscuous mode [ 69.445142][ T4917] bond_slave_0: left promiscuous mode [ 69.451433][ T4917] bond_slave_1: left promiscuous mode [ 69.754756][ T4949] batadv_slave_0: Caught tx_queue_len zero misconfig [ 70.097476][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 70.192765][ T4981] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 70.222996][ T4981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.258639][ T4981] macvlan3: entered promiscuous mode [ 70.272135][ T4981] bond2: entered promiscuous mode [ 70.287906][ T4981] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 70.310997][ T4981] bond2: left promiscuous mode [ 70.496309][ T4992] syzkaller0: entered promiscuous mode [ 70.508678][ T4992] syzkaller0: entered allmulticast mode [ 70.596432][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 70.638804][ T4998] veth3: entered allmulticast mode [ 70.707329][ T5005] bond1: Removing last ns target with arp_interval on [ 71.300937][ T5051] netlink: 76 bytes leftover after parsing attributes in process `syz.5.439'. [ 71.321120][ T5051] netlink: 72 bytes leftover after parsing attributes in process `syz.5.439'. [ 71.343444][ T5051] netlink: 'syz.5.439': attribute type 3 has an invalid length. [ 71.360264][ T5051] netlink: 11 bytes leftover after parsing attributes in process `syz.5.439'. [ 71.408321][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 71.428555][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 71.452993][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 71.474924][ T5058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5058 comm=syz.5.442 [ 71.533434][ T5061] ªªªªªª: renamed from vlan0 (while UP) [ 71.683369][ T5069] lo: Caught tx_queue_len zero misconfig [ 71.689927][ T5069] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.534710][ T5113] syzkaller0: entered promiscuous mode [ 72.567620][ T5113] 0: reclassify loop, rule prio 0, protocol 800 [ 72.668571][ T5115] syzkaller0: entered promiscuous mode [ 72.687485][ T5115] syzkaller0: entered allmulticast mode [ 73.083014][ T28] kauditd_printk_skb: 480 callbacks suppressed [ 73.083028][ T28] audit: type=1400 audit(1776749211.394:1622): avc: denied { read write } for pid=3617 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.165681][ T28] audit: type=1400 audit(1776749211.464:1623): avc: denied { map_create } for pid=5127 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.218232][ T28] audit: type=1400 audit(1776749211.464:1624): avc: denied { bpf } for pid=5127 comm="syz.5.468" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 73.287505][ T28] audit: type=1400 audit(1776749211.464:1625): avc: denied { prog_load } for pid=5127 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.385833][ T28] audit: type=1400 audit(1776749211.464:1626): avc: denied { map_create } for pid=5127 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.470802][ T28] audit: type=1400 audit(1776749211.464:1627): avc: denied { prog_load } for pid=5127 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.538657][ T28] audit: type=1400 audit(1776749211.464:1628): avc: denied { open } for pid=5127 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 73.596660][ T28] audit: type=1400 audit(1776749211.464:1629): avc: denied { create } for pid=5127 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 73.618571][ T5143] bond3: entered promiscuous mode [ 73.630352][ T28] audit: type=1400 audit(1776749211.504:1630): avc: denied { read write } for pid=3617 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.656873][ T28] audit: type=1400 audit(1776749211.554:1631): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.668576][ T5143] bond3: entered allmulticast mode [ 74.111307][ T5078] syz.0.451 (5078) used greatest stack depth: 8264 bytes left [ 75.164984][ T5174] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 75.209804][ T5174] bond4: entered promiscuous mode [ 75.215379][ T5174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.280530][ T5174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.307565][ T5174] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 75.335320][ T5174] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 75.370732][ T5174] bond4: (slave gre1): making interface the new active one [ 75.390450][ T5174] gre1: entered promiscuous mode [ 75.421166][ T5174] bond4: (slave gre1): Enslaving as an active interface with an up link [ 75.469460][ T5182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.509711][ T5183] bond1: (slave ip6gretap1): making interface the new active one [ 75.533472][ T5183] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 75.652882][ T5202] gre0: entered promiscuous mode [ 75.661677][ T5203] capability: warning: `syz.5.492' uses 32-bit capabilities (legacy support in use) [ 75.664742][ T5202] gre0: entered allmulticast mode [ 75.683876][ T5202] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 75.737669][ T5211] netlink: 'syz.3.499': attribute type 39 has an invalid length. [ 75.781075][ T5221] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 75.797408][ T5221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 75.808269][ T5225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5225 comm=syz.0.505 [ 75.823144][ T5221] bond5: (slave gretap1): making interface the new active one [ 75.833029][ T5221] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 76.444127][ T5246] __nla_validate_parse: 3 callbacks suppressed [ 76.444181][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.462014][ T5246] bond1: option mode: unable to set because the bond device has slaves [ 76.472625][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.482778][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.495462][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.505717][ T5246] bond1: (slave bond0): Enslaving as an active interface with an up link [ 77.506185][ T5297] syzkaller0: entered promiscuous mode [ 77.519496][ T5297] syzkaller0: entered allmulticast mode [ 78.025187][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.542'. [ 78.095864][ T28] kauditd_printk_skb: 347 callbacks suppressed [ 78.095880][ T28] audit: type=1400 audit(1776749216.404:1979): avc: denied { create } for pid=5299 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 78.249753][ T28] audit: type=1400 audit(1776749216.554:1980): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.282589][ T5312] ================================================================== [ 78.291678][ T5312] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 78.299513][ T5312] [ 78.302008][ T5312] read-write to 0xffff88811ab525a4 of 4 bytes by task 5308 on cpu 1: [ 78.310687][ T5312] fifo_open+0x86/0x5d0 [ 78.315391][ T5312] do_dentry_open+0x4be/0xa90 [ 78.320237][ T5312] vfs_open+0x37/0x1e0 [ 78.324537][ T5312] path_openat+0x1b70/0x2050 [ 78.329576][ T5312] do_file_open+0x16c/0x290 [ 78.334193][ T5312] do_sys_openat2+0x94/0x130 [ 78.339505][ T5312] __se_sys_openat2+0x193/0x1f0 [ 78.344970][ T5312] __x64_sys_openat2+0x55/0x70 [ 78.350182][ T5312] x64_sys_call+0x2170/0x3020 [ 78.355365][ T5312] do_syscall_64+0x12c/0x3b0 [ 78.360221][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.366803][ T5312] [ 78.369382][ T5312] read to 0xffff88811ab525a4 of 4 bytes by task 5312 on cpu 0: [ 78.377328][ T5312] wait_for_partner+0x117/0x1e0 [ 78.382616][ T5312] fifo_open+0x462/0x5d0 [ 78.387404][ T5312] do_dentry_open+0x4be/0xa90 [ 78.392426][ T5312] vfs_open+0x37/0x1e0 [ 78.396748][ T5312] path_openat+0x1b70/0x2050 [ 78.402036][ T5312] do_file_open+0x16c/0x290 [ 78.406554][ T5312] do_sys_openat2+0x94/0x130 [ 78.411710][ T5312] __x64_sys_openat+0xf2/0x120 [ 78.417076][ T5312] x64_sys_call+0x1e39/0x3020 [ 78.422029][ T5312] do_syscall_64+0x12c/0x3b0 [ 78.426914][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.433415][ T5312] [ 78.435868][ T5312] value changed: 0x00000001 -> 0x00000002 [ 78.442005][ T5312] [ 78.445109][ T5312] Reported by Kernel Concurrency Sanitizer on: [ 78.451968][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.3.538 Not tainted syzkaller #0 PREEMPT(full) [ 78.462321][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.472979][ T5312] ================================================================== [ 78.594591][ T28] audit: type=1400 audit(1776749216.904:1981): avc: denied { read write } for pid=3617 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.740899][ T28] audit: type=1400 audit(1776749217.054:1982): avc: denied { read write } for pid=3332 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.896211][ T28] audit: type=1400 audit(1776749217.204:1983): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.000106][ T28] audit: type=1400 audit(1776749219.314:1984): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0