last executing test programs: 6.559938878s ago: executing program 2 (id=534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x80000001}]}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.113078777s ago: executing program 0 (id=538): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.779452857s ago: executing program 3 (id=539): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x10, 0x2d, 0x1, 0x70bd2a}, 0x10}], 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x42880) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 4.767483686s ago: executing program 2 (id=540): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.758111017s ago: executing program 1 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x3, 0x1}, 0x50) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc3ffffffffffffff}, 0x0) 4.750413877s ago: executing program 0 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.698058838s ago: executing program 3 (id=544): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 4.016382733s ago: executing program 3 (id=545): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.743657799s ago: executing program 3 (id=548): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x3, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 3.711542369s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x3, 0x1}, 0x50) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc3ffffffffffffff}, 0x0) 3.595079392s ago: executing program 2 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='!,\x00\xe5\x9b\xb41\x89\x1a\xd1;m\x83+\xbd\xe1\xdb5f\x14\x8a\xe8\xf7\x8fe\xf0\xea\x15\x1am\xe8=\x99I\xe1\xb6^\xf40\x99\xae\xa2&\xf7\xcc\fJ|aW\xab\xd6\xbcD[\xb5\x97\x14\x11\xac\x83\xce\xaf4g\x14\x9b\xb4%Zn\xe7\x8e[\xf8\xefQ=\xb6\xff\xd3\xeaX\x01\n\xaf\x9b\xc7=\x83\x88\xae\xcb-\xac\xbc\x12\xe7i\xdd\xddy[\xa2\x00\x16\xca\xcfca\xd7A\xfdL\xf1I\xb5\xab\xf7c\xb5\xb8\b\xe6m\n\x85\x00L') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-.\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) setrlimit(0x0, &(0x7f0000000280)={0x2, 0xa}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x2) 1.394126409s ago: executing program 0 (id=552): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 1.300749292s ago: executing program 2 (id=553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept(r0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}}, 0x0) 1.284693732s ago: executing program 0 (id=554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x80000001}]}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.227816903s ago: executing program 4 (id=557): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 1.166204515s ago: executing program 4 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000180)) 1.137408395s ago: executing program 4 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x809}, 0x1c) 1.132275975s ago: executing program 1 (id=560): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 1.077298856s ago: executing program 4 (id=561): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8", 0xab}], 0x1}}], 0x1, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.054388857s ago: executing program 4 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x3, 0x1}, 0x50) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc3ffffffffffffff}, 0x0) 940.625709ms ago: executing program 1 (id=563): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4010, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 882.571781ms ago: executing program 1 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 553.907458ms ago: executing program 3 (id=565): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 453.97518ms ago: executing program 0 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x3, 0x1}, 0x50) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xc3ffffffffffffff}, 0x0) 441.57763ms ago: executing program 3 (id=567): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000001080)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4010, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 417.149371ms ago: executing program 2 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x809}, 0x1c) 393.178481ms ago: executing program 2 (id=569): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x18, 0xf8, 0x9, 0x5, 0x10000, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1d0, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x6de8f710, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00400018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 356.316832ms ago: executing program 1 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000180)) 297.117403ms ago: executing program 1 (id=571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 4 (id=572): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) kernel console output (not intermixed with test programs): [ 20.308135][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 20.308150][ T28] audit: type=1400 audit(1784553399.141:117): avc: denied { write } for pid=3218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.367209][ T28] audit: type=1400 audit(1784553399.201:118): avc: denied { write } for pid=3221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.390480][ T28] audit: type=1400 audit(1784553399.221:119): avc: denied { write } for pid=3232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.429258][ T28] audit: type=1400 audit(1784553399.261:120): avc: denied { write } for pid=3235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.452331][ T28] audit: type=1400 audit(1784553399.261:121): avc: denied { write } for pid=3246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.521783][ T28] audit: type=1400 audit(1784553399.361:122): avc: denied { write } for pid=3249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.545007][ T28] audit: type=1400 audit(1784553399.361:123): avc: denied { write } for pid=3260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.555402][ T28] audit: type=1400 audit(1784553400.391:124): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.578355][ T28] audit: type=1400 audit(1784553400.401:125): avc: denied { write } for pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 27.059873][ T28] audit: type=1400 audit(1784553405.891:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.082913][ T28] audit: type=1400 audit(1784553405.921:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.083638][ T3285] cgroup: Unknown subsys name 'net' [ 27.110766][ T28] audit: type=1400 audit(1784553405.941:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.231527][ T3285] cgroup: Unknown subsys name 'cpuset' [ 27.237604][ T3285] cgroup: Unknown subsys name 'rlimit' [ 27.367339][ T28] audit: type=1400 audit(1784553406.201:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.391021][ T28] audit: type=1400 audit(1784553406.201:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.412313][ T28] audit: type=1400 audit(1784553406.201:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.439690][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.448481][ T28] audit: type=1400 audit(1784553406.201:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.468892][ T28] audit: type=1400 audit(1784553406.211:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.493797][ T28] audit: type=1400 audit(1784553406.211:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.517175][ T28] audit: type=1400 audit(1784553406.231:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.533990][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.521283][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.528416][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.535615][ T3306] bridge_slave_0: entered allmulticast mode [ 29.541921][ T3306] bridge_slave_0: entered promiscuous mode [ 29.563422][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.570586][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.577773][ T3306] bridge_slave_1: entered allmulticast mode [ 29.584050][ T3306] bridge_slave_1: entered promiscuous mode [ 29.594215][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.601313][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.608385][ T3301] bridge_slave_0: entered allmulticast mode [ 29.614794][ T3301] bridge_slave_0: entered promiscuous mode [ 29.638997][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.646106][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.653241][ T3301] bridge_slave_1: entered allmulticast mode [ 29.659468][ T3301] bridge_slave_1: entered promiscuous mode [ 29.667815][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.675059][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.682282][ T3298] bridge_slave_0: entered allmulticast mode [ 29.688592][ T3298] bridge_slave_0: entered promiscuous mode [ 29.699827][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.715165][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.722378][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.729473][ T3298] bridge_slave_1: entered allmulticast mode [ 29.736004][ T3298] bridge_slave_1: entered promiscuous mode [ 29.747484][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.768268][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.775363][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.782602][ T3297] bridge_slave_0: entered allmulticast mode [ 29.788971][ T3297] bridge_slave_0: entered promiscuous mode [ 29.800711][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.818735][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.825964][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.833185][ T3297] bridge_slave_1: entered allmulticast mode [ 29.839493][ T3297] bridge_slave_1: entered promiscuous mode [ 29.850749][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.860205][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.867329][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.874488][ T3305] bridge_slave_0: entered allmulticast mode [ 29.880759][ T3305] bridge_slave_0: entered promiscuous mode [ 29.888523][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.902367][ T3306] team0: Port device team_slave_0 added [ 29.911894][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.918975][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.926208][ T3305] bridge_slave_1: entered allmulticast mode [ 29.932513][ T3305] bridge_slave_1: entered promiscuous mode [ 29.939710][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.957474][ T3306] team0: Port device team_slave_1 added [ 29.979450][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.993376][ T3301] team0: Port device team_slave_0 added [ 30.003977][ T3298] team0: Port device team_slave_0 added [ 30.010540][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.023844][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.030808][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.056707][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.068095][ T3301] team0: Port device team_slave_1 added [ 30.078728][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.088539][ T3298] team0: Port device team_slave_1 added [ 30.098585][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.105577][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.131518][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.146896][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.160563][ T3297] team0: Port device team_slave_0 added [ 30.169614][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.176776][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.202799][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.222077][ T3297] team0: Port device team_slave_1 added [ 30.232472][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.239487][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.265397][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.280134][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.287181][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.313170][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.334525][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.341533][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.367863][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.379255][ T3305] team0: Port device team_slave_0 added [ 30.385687][ T3305] team0: Port device team_slave_1 added [ 30.391500][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.398460][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.424406][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.442094][ T3306] hsr_slave_0: entered promiscuous mode [ 30.448106][ T3306] hsr_slave_1: entered promiscuous mode [ 30.454261][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.461322][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.487324][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.533657][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.540651][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.566639][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.590253][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.597274][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.623199][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.636083][ T3301] hsr_slave_0: entered promiscuous mode [ 30.642003][ T3301] hsr_slave_1: entered promiscuous mode [ 30.647891][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.653644][ T3301] Cannot create hsr debugfs directory [ 30.665557][ T3298] hsr_slave_0: entered promiscuous mode [ 30.671643][ T3298] hsr_slave_1: entered promiscuous mode [ 30.677463][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 30.683184][ T3298] Cannot create hsr debugfs directory [ 30.697427][ T3297] hsr_slave_0: entered promiscuous mode [ 30.703417][ T3297] hsr_slave_1: entered promiscuous mode [ 30.709197][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 30.714925][ T3297] Cannot create hsr debugfs directory [ 30.794367][ T3305] hsr_slave_0: entered promiscuous mode [ 30.800304][ T3305] hsr_slave_1: entered promiscuous mode [ 30.806162][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.811890][ T3305] Cannot create hsr debugfs directory [ 30.934471][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.942757][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.950285][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.958609][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.970937][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.979173][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.989102][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.997680][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.015714][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.024016][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.034604][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.043162][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.050848][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.059422][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.073057][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.081191][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.107589][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.116040][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.130800][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.139380][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.147102][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.155628][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.163321][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.171890][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.190501][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.198937][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.209879][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.218404][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.226353][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.234965][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.242703][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.251260][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.290313][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.298947][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.307000][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.315555][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.327615][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.335953][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.343571][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.351854][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.367822][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.398672][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.411990][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.423713][ T1673] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.430862][ T1673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.446906][ T1673] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.453978][ T1673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.466709][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.475596][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.491224][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.501545][ T1673] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.508720][ T1673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.519478][ T1673] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.526616][ T1673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.538745][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.558209][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.569774][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.576896][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.592155][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.599270][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.614779][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.621845][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.630326][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.637390][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.651553][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.682720][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.705980][ T1673] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.713190][ T1673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.731919][ T1673] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.739022][ T1673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.895393][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.924184][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.974219][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.988782][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.035784][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.073426][ T3306] veth0_vlan: entered promiscuous mode [ 32.082293][ T3301] veth0_vlan: entered promiscuous mode [ 32.097245][ T3306] veth1_vlan: entered promiscuous mode [ 32.110461][ T3301] veth1_vlan: entered promiscuous mode [ 32.141877][ T3297] veth0_vlan: entered promiscuous mode [ 32.159151][ T3306] veth0_macvtap: entered promiscuous mode [ 32.170605][ T3297] veth1_vlan: entered promiscuous mode [ 32.181724][ T3306] veth1_macvtap: entered promiscuous mode [ 32.196829][ T3301] veth0_macvtap: entered promiscuous mode [ 32.210648][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.219445][ T3301] veth1_macvtap: entered promiscuous mode [ 32.229523][ T3305] veth0_vlan: entered promiscuous mode [ 32.239079][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.248421][ T3305] veth1_vlan: entered promiscuous mode [ 32.263473][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.273124][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281931][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.293010][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.300586][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.309364][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.324688][ T3297] veth0_macvtap: entered promiscuous mode [ 32.332831][ T3297] veth1_macvtap: entered promiscuous mode [ 32.342609][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.358535][ T310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367414][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.378316][ T3298] veth0_vlan: entered promiscuous mode [ 32.388204][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.398243][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.414182][ T3298] veth1_vlan: entered promiscuous mode [ 32.419666][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 32.419680][ T28] audit: type=1400 audit(1784553411.251:146): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.0gAYLD/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.421966][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.428955][ T28] audit: type=1400 audit(1784553411.251:147): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.479388][ T28] audit: type=1400 audit(1784553411.251:148): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.0gAYLD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.505514][ T28] audit: type=1400 audit(1784553411.251:149): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.519811][ T3298] veth0_macvtap: entered promiscuous mode [ 32.532821][ T28] audit: type=1400 audit(1784553411.251:150): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.0gAYLD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.560684][ T28] audit: type=1400 audit(1784553411.251:151): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.0gAYLD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.594252][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.597353][ T28] audit: type=1400 audit(1784553411.251:152): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.615726][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.631273][ T28] audit: type=1400 audit(1784553411.261:153): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.640118][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.664057][ T28] audit: type=1400 audit(1784553411.261:154): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=3855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.672660][ T3298] veth1_macvtap: entered promiscuous mode [ 32.703033][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.712402][ T28] audit: type=1400 audit(1784553411.541:155): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.731980][ T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.748226][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.770300][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.787405][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.797942][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.798904][ T3504] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 32.816134][ T3504] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 32.825358][ T3504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.834825][ T3504] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 32.844033][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.852896][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.874481][ T3305] veth0_macvtap: entered promiscuous mode [ 32.880801][ T3504] syz.2.3 (3504) used greatest stack depth: 10824 bytes left [ 32.905336][ T3305] veth1_macvtap: entered promiscuous mode [ 32.935625][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.945022][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.004424][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.016454][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.016584][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.016802][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.085154][ T3526] syzkaller0: entered promiscuous mode [ 33.090659][ T3526] syzkaller0: entered allmulticast mode [ 33.196232][ T3531] syzkaller0: entered promiscuous mode [ 33.201830][ T3531] syzkaller0: entered allmulticast mode [ 33.770352][ T3533] tc action pedit 'at' offset -2147483648 out of bounds [ 33.804609][ T3535] loop0: detected capacity change from 0 to 512 [ 33.825254][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.838301][ T3535] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.842522][ T3540] Zero length message leads to an empty skb [ 33.892922][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.169821][ T3558] syzkaller0: entered promiscuous mode [ 34.177853][ T3558] syzkaller0: entered allmulticast mode [ 34.326246][ T3566] syzkaller0: entered promiscuous mode [ 34.332247][ T3566] syzkaller0: entered allmulticast mode [ 34.353743][ T3567] syzkaller0: entered promiscuous mode [ 34.361235][ T3567] syzkaller0: entered allmulticast mode [ 34.776548][ T3580] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 34.785534][ T3580] batman_adv: batadv0: Adding interface: dummy0 [ 34.792120][ T3580] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.819089][ T3580] batman_adv: batadv0: Interface activated: dummy0 [ 34.908439][ T3585] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET) [ 35.409161][ T3602] syzkaller0: entered promiscuous mode [ 35.415395][ T3602] syzkaller0: entered allmulticast mode [ 35.548712][ T3608] syzkaller0: entered promiscuous mode [ 35.554288][ T3608] syzkaller0: entered allmulticast mode [ 35.725655][ T3620] loop3: detected capacity change from 0 to 512 [ 35.746279][ T3620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.759054][ T3620] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.788399][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.827016][ T3624] syzkaller0: entered promiscuous mode [ 35.834888][ T3624] syzkaller0: entered allmulticast mode [ 37.038491][ T3549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.123690][ T3643] loop4: detected capacity change from 0 to 512 [ 37.138164][ T3643] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.54: Unrecognised inode hash code 255 [ 37.151375][ T3643] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.54: Corrupt directory, running e2fsck is recommended [ 37.184428][ T3643] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 37.193591][ T3643] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.54: corrupted in-inode xattr: invalid ea_ino [ 37.215106][ T3643] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.215549][ T3643] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.54: couldn't read orphan inode 15 (err -117) [ 37.219530][ T3658] syzkaller0: entered promiscuous mode [ 37.224767][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 37.224785][ C1] EXT4-fs (loop4): initial error at time 1784553416: ext4_iget_extra_inode:5180: inode 15 [ 37.224811][ C1] EXT4-fs (loop4): last error at time 1784553416: ext4_iget_extra_inode:5180: inode 15 [ 37.224876][ T3643] loop4: lost filesystem error report for type 5 error -117 [ 37.263930][ T3658] syzkaller0: entered allmulticast mode [ 37.268855][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.338144][ T3643] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.54: Unrecognised inode hash code 255 [ 37.342158][ T3664] netlink: 88 bytes leftover after parsing attributes in process `syz.2.58'. [ 37.352976][ T3643] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.54: Corrupt directory, running e2fsck is recommended [ 37.368327][ T3664] syzkaller1: entered promiscuous mode [ 37.372582][ T3643] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 4: comm syz.4.54: path /4/file0: bad entry in directory: directory entry overrun - offset=512, inode=4294967295, rec_len=1024, size=1024 fake=0 [ 37.376761][ T3664] syzkaller1: entered allmulticast mode [ 37.435634][ T3666] syzkaller0: entered promiscuous mode [ 37.441329][ T3666] syzkaller0: entered allmulticast mode [ 37.471474][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.496866][ T3670] syzkaller0: entered promiscuous mode [ 37.503080][ T3670] syzkaller0: entered allmulticast mode [ 38.467194][ T3695] syzkaller0: entered promiscuous mode [ 38.472802][ T3695] syzkaller0: entered allmulticast mode [ 38.738204][ T3713] syzkaller0: entered promiscuous mode [ 38.743770][ T3713] syzkaller0: entered allmulticast mode [ 40.077506][ T3633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.730780][ T3748] syzkaller0: entered promiscuous mode [ 40.736364][ T3748] syzkaller0: entered allmulticast mode [ 40.772559][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 40.790718][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 40.811104][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 40.847313][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 40.847329][ T28] audit: type=1400 audit(1784553419.681:218): avc: denied { block_suspend } for pid=3761 comm="syz.4.89" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.849628][ T3755] tipc: Enabling of bearer rejected, failed to enable media [ 40.979852][ T3777] syzkaller0: entered promiscuous mode [ 40.985721][ T3777] syzkaller0: entered allmulticast mode [ 41.098200][ T3785] netlink: 88 bytes leftover after parsing attributes in process `syz.0.98'. [ 41.110706][ T3785] syzkaller1: entered promiscuous mode [ 41.118518][ T3785] syzkaller1: entered allmulticast mode [ 41.151636][ T3789] syzkaller0: entered promiscuous mode [ 41.157120][ T3789] syzkaller0: entered allmulticast mode [ 41.606534][ T3802] tipc: Enabling of bearer rejected, failed to enable media [ 41.746843][ T3816] syzkaller0: entered promiscuous mode [ 41.753048][ T3816] syzkaller0: entered allmulticast mode [ 42.289422][ T3829] syzkaller0: entered promiscuous mode [ 42.300756][ T3829] syzkaller0: entered allmulticast mode [ 42.359093][ T3840] x_tables: duplicate underflow at hook 1 [ 42.364967][ T28] audit: type=1400 audit(1784553421.191:219): avc: denied { setopt } for pid=3839 comm="syz.4.118" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.387268][ T28] audit: type=1400 audit(1784553421.221:220): avc: denied { create } for pid=3839 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.503960][ T3831] syzkaller0: entered promiscuous mode [ 42.509602][ T3831] syzkaller0: entered allmulticast mode [ 42.629391][ T28] audit: type=1400 audit(1784553421.401:221): avc: denied { mount } for pid=3845 comm="syz.3.120" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.692795][ T23] IPVS: starting estimator thread 0... [ 42.888127][ T3848] IPVS: using max 1920 ests per chain, 96000 per kthread [ 42.948496][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 42.948767][ T3850] tipc: Enabling of bearer rejected, failed to enable media [ 42.975077][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 43.003778][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 43.004712][ T3866] syzkaller0: entered promiscuous mode [ 43.018429][ T3866] syzkaller0: entered allmulticast mode [ 43.147904][ T3876] syzkaller1: entered promiscuous mode [ 43.153568][ T3876] syzkaller1: entered allmulticast mode [ 43.246293][ T3882] syzkaller1: entered promiscuous mode [ 43.251892][ T3882] syzkaller1: entered allmulticast mode [ 43.263364][ T3881] tipc: Started in network mode [ 43.268341][ T3881] tipc: Node identity 3ace0a94ab47, cluster identity 4711 [ 43.275686][ T3881] tipc: Enabled bearer , priority 0 [ 43.283998][ T3880] tipc: Disabling bearer [ 43.525296][ T28] audit: type=1400 audit(1784553422.361:222): avc: denied { create } for pid=3889 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.564604][ T3890] netlink: 14 bytes leftover after parsing attributes in process `syz.1.131'. [ 43.595188][ T28] audit: type=1400 audit(1784553422.381:223): avc: denied { ioctl } for pid=3889 comm="syz.1.131" path="socket:[5596]" dev="sockfs" ino=5596 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.774451][ T3892] syzkaller0: entered promiscuous mode [ 43.780818][ T3892] syzkaller0: entered allmulticast mode [ 43.788907][ T3892] tipc: Started in network mode [ 43.794167][ T3892] tipc: Node identity 6eb0defa40ca, cluster identity 4711 [ 43.802380][ T3892] tipc: Enabled bearer , priority 0 [ 43.810870][ T3892] tipc: Resetting bearer [ 43.817496][ T3891] tipc: Resetting bearer [ 43.824710][ T3891] tipc: Disabling bearer [ 43.922942][ T3890] syz.1.131 (3890) used greatest stack depth: 10624 bytes left [ 44.030664][ T3917] x_tables: duplicate underflow at hook 1 [ 44.223875][ T909] IPVS: starting estimator thread 0... [ 44.226351][ T3918] syzkaller0: entered promiscuous mode [ 44.242562][ T3918] syzkaller0: entered allmulticast mode [ 44.361176][ T3920] IPVS: using max 2448 ests per chain, 122400 per kthread [ 44.509445][ T3924] syzkaller0: entered promiscuous mode [ 44.515034][ T3924] syzkaller0: entered allmulticast mode [ 44.644048][ T3931] syzkaller0: entered promiscuous mode [ 44.649748][ T3931] syzkaller0: entered allmulticast mode [ 44.659443][ T3931] tipc: Started in network mode [ 44.665128][ T3931] tipc: Node identity aee27245e7b9, cluster identity 4711 [ 44.672376][ T3931] tipc: Enabled bearer , priority 0 [ 44.680855][ T3931] tipc: Resetting bearer [ 44.687511][ T3930] tipc: Resetting bearer [ 44.694484][ T3930] tipc: Disabling bearer [ 44.929569][ T3951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.152'. [ 44.940592][ T3951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 44.949828][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 44.959847][ T3951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.152'. [ 44.977733][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 44.994339][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 45.028052][ T3959] syzkaller0: entered promiscuous mode [ 45.036068][ T3959] syzkaller0: entered allmulticast mode [ 45.086900][ T3963] syzkaller0: entered promiscuous mode [ 45.093720][ T3963] syzkaller0: entered allmulticast mode [ 45.364469][ T3972] syz.2.160 (3972) used greatest stack depth: 10496 bytes left [ 45.391659][ T3974] syzkaller0: entered promiscuous mode [ 45.397263][ T3974] syzkaller0: entered allmulticast mode [ 45.405041][ T3974] tipc: Started in network mode [ 45.410075][ T3974] tipc: Node identity e2b6cd5d7064, cluster identity 4711 [ 45.417365][ T3974] tipc: Enabled bearer , priority 0 [ 45.426142][ T3974] tipc: Resetting bearer [ 45.432707][ T3973] tipc: Resetting bearer [ 45.440662][ T3973] tipc: Disabling bearer [ 45.514986][ T3976] syzkaller1: entered promiscuous mode [ 45.520539][ T3976] syzkaller1: entered allmulticast mode [ 45.953856][ T4001] tipc: Enabled bearer , priority 0 [ 45.975458][ T4001] tipc: Resetting bearer [ 46.011339][ T4000] tipc: Disabling bearer [ 46.038232][ T4003] syzkaller0: entered promiscuous mode [ 46.043974][ T4003] syzkaller0: entered allmulticast mode [ 46.055059][ T4005] syzkaller1: entered promiscuous mode [ 46.060619][ T4005] syzkaller1: entered allmulticast mode [ 46.069451][ T4003] tipc: Enabled bearer , priority 0 [ 46.082090][ T4003] tipc: Resetting bearer [ 46.097492][ T4002] tipc: Resetting bearer [ 46.121311][ T4002] tipc: Disabling bearer [ 47.217714][ T4044] tipc: Enabled bearer , priority 0 [ 47.244123][ T4047] syzkaller1: entered promiscuous mode [ 47.250361][ T4047] syzkaller1: entered allmulticast mode [ 47.269365][ T4044] tipc: Resetting bearer [ 47.277035][ T4042] tipc: Disabling bearer [ 48.106237][ T4070] loop4: detected capacity change from 0 to 512 [ 48.120639][ T4070] EXT4-fs: Ignoring removed i_version option [ 48.127435][ T4070] EXT4-fs: Ignoring removed bh option [ 48.260939][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.292363][ T4070] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.326108][ T4070] ªªªªªª: renamed from vlan0 (while UP) [ 49.098113][ T28] audit: type=1400 audit(1784553427.931:224): avc: denied { create } for pid=4082 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.136571][ T28] audit: type=1400 audit(1784553427.951:225): avc: denied { setopt } for pid=4082 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.159176][ T28] audit: type=1400 audit(1784553427.961:226): avc: denied { tracepoint } for pid=4082 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.179065][ T28] audit: type=1400 audit(1784553427.961:227): avc: denied { create } for pid=4082 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 49.253961][ T4095] syzkaller1: entered promiscuous mode [ 49.272355][ T4095] syzkaller1: entered allmulticast mode [ 49.492927][ T4101] syzkaller0: entered promiscuous mode [ 49.507495][ T4101] syzkaller0: entered allmulticast mode [ 49.529351][ T4101] tipc: Started in network mode [ 49.542058][ T4101] tipc: Node identity 265496217d9a, cluster identity 4711 [ 49.549690][ T4105] __nla_validate_parse: 12 callbacks suppressed [ 49.549723][ T4105] netlink: 14 bytes leftover after parsing attributes in process `syz.1.210'. [ 49.566009][ T4101] tipc: Enabled bearer , priority 0 [ 49.575208][ T4101] tipc: Resetting bearer [ 49.588806][ T4100] tipc: Resetting bearer [ 49.609411][ T4100] tipc: Disabling bearer [ 49.861603][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.907900][ T4121] syzkaller0: entered promiscuous mode [ 49.919343][ T4121] syzkaller0: entered allmulticast mode [ 49.961104][ T4125] syzkaller1: entered promiscuous mode [ 49.970468][ T4125] syzkaller1: entered allmulticast mode [ 50.321155][ T4135] syzkaller0: entered promiscuous mode [ 50.332369][ T4136] netlink: 14 bytes leftover after parsing attributes in process `syz.0.221'. [ 50.342826][ T4135] syzkaller0: entered allmulticast mode [ 50.390864][ T4135] tipc: Enabled bearer , priority 0 [ 50.431662][ T4135] tipc: Resetting bearer [ 50.446361][ T4133] tipc: Resetting bearer [ 50.471421][ T4133] tipc: Disabling bearer [ 50.491402][ T4136] syz.0.221 (4136) used greatest stack depth: 10432 bytes left [ 50.514026][ T4139] syzkaller0: entered promiscuous mode [ 50.523947][ T4143] netlink: 14 bytes leftover after parsing attributes in process `syz.2.225'. [ 50.533211][ T4139] syzkaller0: entered allmulticast mode [ 50.539587][ T4144] netlink: 14 bytes leftover after parsing attributes in process `syz.0.222'. [ 50.543379][ T4139] tipc: Enabled bearer , priority 0 [ 50.678732][ T4156] tipc: Resetting bearer [ 51.138927][ T4161] loop4: detected capacity change from 0 to 512 [ 51.150116][ T4161] EXT4-fs: Ignoring removed i_version option [ 51.156810][ T4161] EXT4-fs: Ignoring removed bh option [ 51.275703][ T4137] tipc: Resetting bearer [ 51.284927][ T4161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.324790][ T4161] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.553498][ T28] audit: type=1400 audit(1784553430.091:228): avc: denied { cpu } for pid=4154 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.831371][ T4137] tipc: Disabling bearer [ 51.860592][ T4173] syzkaller1: entered promiscuous mode [ 51.874209][ T4173] syzkaller1: entered allmulticast mode [ 52.511665][ T35] tipc: Node number set to 2441677460 [ 52.558646][ T4180] syzkaller0: entered promiscuous mode [ 52.564337][ T4180] syzkaller0: entered allmulticast mode [ 52.578774][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.846185][ T4197] syzkaller0: entered promiscuous mode [ 52.857386][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 52.886544][ T4197] syzkaller0: entered allmulticast mode [ 52.909245][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 53.238395][ T4208] tipc: Enabled bearer , priority 0 [ 53.277275][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 53.308236][ T4197] tipc: Resetting bearer [ 53.582666][ T4196] tipc: Resetting bearer [ 53.592958][ T4196] tipc: Disabling bearer [ 54.109164][ T28] audit: type=1400 audit(1784553432.501:229): avc: denied { connect } for pid=4213 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.172955][ T4222] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.241'. [ 54.205233][ T4221] netlink: 14 bytes leftover after parsing attributes in process `syz.2.242'. [ 54.245531][ T4226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.244'. [ 54.298998][ T4234] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 54.444986][ T4253] 9p: Bad value for 'rfdno' [ 55.110035][ T4277] __nla_validate_parse: 2 callbacks suppressed [ 55.110051][ T4277] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.265'. [ 55.497496][ T4287] 9p: Bad value for 'rfdno' [ 55.592306][ T4291] syzkaller0: entered promiscuous mode [ 55.630225][ T4291] syzkaller0: entered allmulticast mode [ 57.841168][ T4320] syzkaller0: entered promiscuous mode [ 57.846682][ T4320] syzkaller0: entered allmulticast mode [ 57.902412][ T28] audit: type=1400 audit(1784553436.731:230): avc: denied { create } for pid=4323 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.929181][ T4326] 9p: Bad value for 'rfdno' [ 58.059015][ T4335] loop3: detected capacity change from 0 to 4096 [ 58.069542][ T4335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.126042][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.270778][ T4346] x_tables: duplicate underflow at hook 1 [ 59.058041][ T23] IPVS: starting estimator thread 0... [ 59.169884][ T4358] syzkaller0: entered promiscuous mode [ 59.175726][ T4358] syzkaller0: entered allmulticast mode [ 59.187988][ T4360] 9p: Bad value for 'wfdno' [ 59.211620][ T4352] IPVS: using max 2736 ests per chain, 136800 per kthread [ 59.322136][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.331068][ T4367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.341347][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.350344][ T4367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.359389][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.368234][ T4367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.625095][ T4371] syzkaller0: entered promiscuous mode [ 59.635700][ T4371] syzkaller0: entered allmulticast mode [ 60.007708][ T4385] syzkaller0: entered promiscuous mode [ 60.022445][ T4385] syzkaller0: entered allmulticast mode [ 60.163872][ T28] audit: type=1400 audit(1784553438.981:231): avc: denied { relabelfrom } for pid=4379 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.287494][ T4390] loop2: detected capacity change from 0 to 4096 [ 60.337918][ T28] audit: type=1400 audit(1784553438.981:232): avc: denied { relabelto } for pid=4379 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.418209][ T4390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.470293][ T4395] syzkaller0: entered promiscuous mode [ 60.482975][ T4395] syzkaller0: entered allmulticast mode [ 60.501632][ T4395] tipc: Enabled bearer , priority 0 [ 60.518561][ T4395] tipc: Resetting bearer [ 60.521818][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.540518][ T4394] tipc: Resetting bearer [ 60.616053][ T4394] tipc: Disabling bearer [ 60.628514][ T4400] syzkaller0: entered promiscuous mode [ 60.634279][ T4400] syzkaller0: entered allmulticast mode [ 60.939552][ T4415] syzkaller0: entered promiscuous mode [ 60.945068][ T4415] syzkaller0: entered allmulticast mode [ 60.953311][ T4425] syzkaller0: entered promiscuous mode [ 60.959032][ T4425] syzkaller0: entered allmulticast mode [ 61.072899][ T4440] syzkaller0: entered promiscuous mode [ 61.078667][ T4440] syzkaller0: entered allmulticast mode [ 61.087116][ T4440] tipc: Enabled bearer , priority 0 [ 61.097408][ T4440] tipc: Resetting bearer [ 61.107531][ T4439] tipc: Resetting bearer [ 61.123901][ T4439] tipc: Disabling bearer [ 61.135497][ T4447] x_tables: duplicate underflow at hook 1 [ 61.209714][ T4453] syzkaller0: entered promiscuous mode [ 61.218166][ T4453] syzkaller0: entered allmulticast mode [ 61.515156][ T3079] IPVS: starting estimator thread 0... [ 61.623445][ T4464] IPVS: using max 2400 ests per chain, 120000 per kthread [ 61.707636][ T4469] syzkaller0: entered promiscuous mode [ 61.713643][ T4469] syzkaller0: entered allmulticast mode [ 61.984536][ T4487] syzkaller0: entered promiscuous mode [ 62.003780][ T4487] syzkaller0: entered allmulticast mode [ 62.013175][ T4487] tipc: Enabled bearer , priority 0 [ 62.093628][ T4490] loop1: detected capacity change from 0 to 4096 [ 62.125642][ T4487] tipc: Resetting bearer [ 62.164451][ T4485] tipc: Resetting bearer [ 62.377206][ T4490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.429150][ T4485] tipc: Disabling bearer [ 62.493085][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.589468][ T4502] syzkaller0: entered promiscuous mode [ 62.599370][ T4502] syzkaller0: entered allmulticast mode [ 62.968070][ T4523] loop3: detected capacity change from 0 to 4096 [ 62.979077][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.184886][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.504987][ T4536] syzkaller0: entered promiscuous mode [ 63.510757][ T4536] syzkaller0: entered allmulticast mode [ 64.001919][ T4548] syzkaller0: entered promiscuous mode [ 64.012705][ T4548] syzkaller0: entered allmulticast mode [ 64.153409][ T4564] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 64.358221][ T4589] syzkaller0: entered promiscuous mode [ 64.364083][ T4589] syzkaller0: entered allmulticast mode [ 64.372356][ T4589] tipc: Enabled bearer , priority 0 [ 64.380809][ T4589] tipc: Resetting bearer [ 64.387474][ T4588] tipc: Resetting bearer [ 64.439340][ T4588] tipc: Disabling bearer [ 64.641117][ T28] audit: type=1400 audit(1784553443.471:233): avc: denied { create } for pid=4595 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.717181][ T28] audit: type=1400 audit(1784553443.501:234): avc: denied { write } for pid=4595 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.839780][ T28] audit: type=1400 audit(1784553443.631:235): avc: denied { read } for pid=4595 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.019584][ T4606] syzkaller0: entered promiscuous mode [ 65.041211][ T4606] syzkaller0: entered allmulticast mode [ 65.519696][ T4613] sit0: entered allmulticast mode [ 65.872060][ T4621] loop0: detected capacity change from 0 to 4096 [ 65.894882][ T4614] sit0: entered promiscuous mode [ 65.912530][ T4621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.009946][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.306504][ T4643] syzkaller0: entered promiscuous mode [ 66.327953][ T4643] syzkaller0: entered allmulticast mode [ 66.386335][ T4645] ªªªªªª: renamed from vlan0 (while UP) [ 66.456792][ T4646] tipc: Enabled bearer , priority 0 [ 66.538321][ T4643] tipc: Resetting bearer [ 66.598758][ T4642] tipc: Resetting bearer [ 66.650049][ T4642] tipc: Disabling bearer [ 66.766371][ T4652] syzkaller0: entered promiscuous mode [ 66.822766][ T4652] syzkaller0: entered allmulticast mode [ 66.912211][ T4659] tipc: Enabled bearer , priority 0 [ 67.012567][ T4645] syz.3.388 (4645) used greatest stack depth: 10304 bytes left [ 67.026757][ T4652] tipc: Resetting bearer [ 68.038655][ T4651] tipc: Resetting bearer [ 68.051915][ T4651] tipc: Disabling bearer [ 68.060201][ T23] tipc: Node number set to 1540265505 [ 68.637713][ T28] audit: type=1400 audit(1784553447.471:236): avc: denied { setopt } for pid=4690 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.482672][ T4713] loop1: detected capacity change from 0 to 512 [ 69.494409][ T4713] EXT4-fs: Ignoring removed i_version option [ 69.501790][ T4713] EXT4-fs: Ignoring removed bh option [ 69.736589][ T4713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.772304][ T4713] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.797680][ T4713] ªªªªªª: renamed from vlan0 (while UP) [ 70.137383][ T4713] syz.1.409 (4713) used greatest stack depth: 10256 bytes left [ 70.377837][ T4721] syzkaller0: entered promiscuous mode [ 70.397960][ T4721] syzkaller0: entered allmulticast mode [ 70.867409][ T4729] tipc: Enabled bearer , priority 0 [ 70.898598][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 70.913845][ T4721] tipc: Resetting bearer [ 70.940372][ T4719] tipc: Resetting bearer [ 70.981816][ T4719] tipc: Disabling bearer [ 71.085116][ T4735] syzkaller0: entered promiscuous mode [ 71.090719][ T4735] syzkaller0: entered allmulticast mode [ 71.098425][ T4739] tipc: Enabled bearer , priority 0 [ 71.131348][ T4735] tipc: Resetting bearer [ 71.137910][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 71.167263][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 71.176851][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 71.186544][ T1673] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.198878][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.203351][ T1673] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.220417][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.229595][ T4734] tipc: Resetting bearer [ 71.266449][ T4734] tipc: Disabling bearer [ 71.294239][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.307198][ T4751] syzkaller0: entered promiscuous mode [ 71.313058][ T4751] syzkaller0: entered allmulticast mode [ 72.041139][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 72.956241][ T4778] syzkaller0: entered promiscuous mode [ 72.961820][ T4778] syzkaller0: entered allmulticast mode [ 73.185645][ T4791] loop1: detected capacity change from 0 to 512 [ 73.199200][ T4791] EXT4-fs: Ignoring removed i_version option [ 73.207086][ T4791] EXT4-fs: Ignoring removed bh option [ 74.044839][ T4791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.263591][ T4791] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.131174][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.163198][ T4813] syzkaller0: entered promiscuous mode [ 75.190407][ T4813] syzkaller0: entered allmulticast mode [ 75.310577][ T4819] syzkaller0: entered promiscuous mode [ 75.335448][ T4819] syzkaller0: entered allmulticast mode [ 75.365527][ T4826] syzkaller0: entered promiscuous mode [ 75.382508][ T4826] syzkaller0: entered allmulticast mode [ 75.430554][ T4830] sit0: entered allmulticast mode [ 75.464097][ T4830] sit0: entered promiscuous mode [ 75.703971][ T4846] loop1: detected capacity change from 0 to 512 [ 75.719880][ T4846] EXT4-fs: Ignoring removed i_version option [ 75.726985][ T4846] EXT4-fs: Ignoring removed bh option [ 75.898777][ T4846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.914868][ T4846] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.360713][ T4860] syzkaller0: entered promiscuous mode [ 76.378566][ T4860] syzkaller0: entered allmulticast mode [ 76.500639][ T4866] syzkaller0: entered promiscuous mode [ 76.517329][ T4866] syzkaller0: entered allmulticast mode [ 77.486322][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.832741][ T4879] syzkaller0: entered promiscuous mode [ 77.857085][ T4879] syzkaller0: entered allmulticast mode [ 77.904097][ T4886] syzkaller0: entered promiscuous mode [ 77.909643][ T4886] syzkaller0: entered allmulticast mode [ 77.917299][ T4886] tipc: Enabled bearer , priority 0 [ 77.925723][ T4886] tipc: Resetting bearer [ 77.935581][ T4878] tipc: Resetting bearer [ 77.943732][ T4878] tipc: Disabling bearer [ 77.957528][ T4879] tipc: Enabled bearer , priority 0 [ 77.970695][ T4879] tipc: Resetting bearer [ 77.992414][ T4877] tipc: Resetting bearer [ 77.999676][ T4877] tipc: Disabling bearer [ 78.970626][ T4911] blkio.reset_stats is deprecated [ 79.245291][ T4920] sit0: left promiscuous mode [ 79.456509][ T4921] sit0: entered promiscuous mode [ 79.504074][ T4923] syzkaller0: entered promiscuous mode [ 79.510095][ T4923] syzkaller0: entered allmulticast mode [ 79.526933][ T4923] tipc: Enabled bearer , priority 0 [ 79.541262][ T4923] tipc: Resetting bearer [ 79.701361][ T4922] tipc: Resetting bearer [ 79.710088][ T4922] tipc: Disabling bearer [ 80.783660][ T4972] sit0: left promiscuous mode [ 80.956959][ T4975] sit0: entered promiscuous mode [ 81.028126][ T4980] syzkaller0: entered promiscuous mode [ 81.033872][ T4980] syzkaller0: entered allmulticast mode [ 81.101436][ T4984] syzkaller0: entered promiscuous mode [ 81.106943][ T4984] syzkaller0: entered allmulticast mode [ 82.763485][ T4935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.838145][ T4994] 9p: Bad value for 'wfdno' [ 82.871889][ T4990] syzkaller0: entered promiscuous mode [ 82.880609][ T4990] syzkaller0: entered allmulticast mode [ 82.893412][ T4990] tipc: Enabled bearer , priority 0 [ 82.913528][ T4990] tipc: Resetting bearer [ 82.975004][ T4989] tipc: Resetting bearer [ 82.983840][ T4989] tipc: Disabling bearer [ 83.716820][ T5009] loop3: detected capacity change from 0 to 512 [ 83.723859][ T5009] EXT4-fs: Ignoring removed i_version option [ 83.730042][ T5009] EXT4-fs: Ignoring removed bh option [ 84.419366][ T5009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.479257][ T5009] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.431400][ T28] audit: type=1400 audit(1784553464.261:237): avc: denied { mount } for pid=5026 comm="syz.2.510" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.625411][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.650648][ T28] audit: type=1400 audit(1784553464.441:238): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.717506][ T5032] syzkaller0: entered promiscuous mode [ 85.735481][ T5032] syzkaller0: entered allmulticast mode [ 85.747951][ T5036] syzkaller0: entered promiscuous mode [ 85.753835][ T5036] syzkaller0: entered allmulticast mode [ 85.762761][ T5032] tipc: Enabling of bearer rejected, failed to enable media [ 85.771680][ T5036] tipc: Enabled bearer , priority 0 [ 85.780371][ T5036] tipc: Resetting bearer [ 86.558002][ T5035] tipc: Resetting bearer [ 86.568378][ T5035] tipc: Disabling bearer [ 86.651990][ T5051] tipc: Enabled bearer , priority 0 [ 86.668834][ T5051] tipc: Resetting bearer [ 86.697071][ T5050] tipc: Disabling bearer [ 86.855615][ T5062] syzkaller0: entered promiscuous mode [ 86.861558][ T5062] syzkaller0: entered allmulticast mode [ 87.387764][ T5069] loop1: detected capacity change from 0 to 512 [ 87.399835][ T5069] EXT4-fs: Ignoring removed i_version option [ 87.406899][ T5069] EXT4-fs: Ignoring removed bh option [ 87.867354][ T5069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.966026][ T5069] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.590751][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.600397][ T5098] xt_CT: No such helper "netbios-ns" [ 90.650421][ T28] audit: type=1400 audit(1784553469.481:239): avc: denied { create } for pid=5074 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.688875][ T28] audit: type=1400 audit(1784553469.481:240): avc: denied { create } for pid=5074 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.718380][ T5104] syzkaller0: entered promiscuous mode [ 90.723946][ T5104] syzkaller0: entered allmulticast mode [ 90.821025][ T5109] syzkaller0: entered promiscuous mode [ 90.826594][ T5109] syzkaller0: entered allmulticast mode [ 91.434406][ T5127] xt_CT: No such helper "netbios-ns" [ 92.554684][ T5087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.721735][ T5133] syzkaller0: entered promiscuous mode [ 92.727369][ T5133] syzkaller0: entered allmulticast mode [ 94.397604][ T28] audit: type=1400 audit(1784553473.231:241): avc: denied { read } for pid=5163 comm="syz.2.550" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.370430][ T28] audit: type=1400 audit(1784553473.231:242): avc: denied { open } for pid=5163 comm="syz.2.550" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.900378][ T28] audit: type=1400 audit(1784553473.231:243): avc: denied { ioctl } for pid=5163 comm="syz.2.550" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.996278][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 96.113103][ T5181] syzkaller0: entered promiscuous mode [ 96.118690][ T5181] syzkaller0: entered allmulticast mode [ 96.161169][ T5188] ======================================================= [ 96.161169][ T5188] WARNING: The mand mount option has been deprecated and [ 96.161169][ T5188] and is ignored by this kernel. Remove the mand [ 96.161169][ T5188] option from the mount to silence this warning. [ 96.161169][ T5188] ======================================================= [ 96.190939][ T28] audit: type=1400 audit(1784553475.001:244): avc: denied { remount } for pid=5187 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.245692][ T5194] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.560'. [ 96.246170][ T28] audit: type=1400 audit(1784553475.081:245): avc: denied { create } for pid=5192 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.255031][ T5194] netlink: 116 bytes leftover after parsing attributes in process `syz.1.560'. [ 96.548497][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.555780][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.581245][ T5204] batman_adv: batadv0: Interface deactivated: dummy0 [ 96.641160][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.649923][ T5162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.673271][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.789135][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.825100][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.869296][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.878258][ T68] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.890371][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 97.113201][ T5222] syzkaller0: entered promiscuous mode [ 97.123836][ T5222] syzkaller0: entered allmulticast mode [ 97.444477][ T5227] loop4: detected capacity change from 0 to 2048 [ 97.500769][ T5227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.562531][ T5227] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.582473][ T28] audit: type=1400 audit(1784553476.421:246): avc: denied { write } for pid=5226 comm="syz.4.572" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.646788][ T5231] ================================================================== [ 97.654912][ T5231] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 97.662218][ T5231] [ 97.664541][ T5231] read-write to 0xffff88811ac77b40 of 8 bytes by task 5227 on cpu 1: [ 97.672600][ T5231] __xa_set_mark+0xd2/0x1a0 [ 97.677121][ T5231] __folio_mark_dirty+0x42c/0x520 [ 97.682163][ T5231] mark_buffer_dirty+0x120/0x1f0 [ 97.687120][ T5231] folio_zero_new_buffers+0x272/0x2d0 [ 97.692522][ T5231] block_write_end+0x200/0x210 [ 97.697321][ T5231] ext4_da_write_end+0x1e4/0x7b0 [ 97.702287][ T5231] generic_perform_write+0x314/0x490 [ 97.707598][ T5231] ext4_buffered_write_iter+0x2e2/0x480 [ 97.713160][ T5231] ext4_file_write_iter+0x38e/0xef0 [ 97.718382][ T5231] vfs_write+0x57d/0x990 [ 97.722637][ T5231] ksys_write+0xdc/0x1a0 [ 97.726915][ T5231] __x64_sys_write+0x40/0x50 [ 97.731516][ T5231] x64_sys_call+0x27e1/0x3020 [ 97.736209][ T5231] do_syscall_64+0x136/0x3c0 [ 97.740808][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.746715][ T5231] [ 97.749044][ T5231] read to 0xffff88811ac77b40 of 8 bytes by task 5231 on cpu 0: [ 97.756592][ T5231] xas_find_marked+0x211/0x650 [ 97.762077][ T5231] filemap_get_folios_tag+0xf7/0x400 [ 97.767404][ T5231] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 97.773251][ T5231] ext4_do_writepages+0x9e5/0x2720 [ 97.778390][ T5231] ext4_writepages+0x18f/0x300 [ 97.783200][ T5231] do_writepages+0x1b9/0x300 [ 97.787829][ T5231] filemap_flush_range+0x105/0x140 [ 97.792973][ T5231] generic_fadvise+0x333/0x450 [ 97.797777][ T5231] __x64_sys_fadvise64+0xcb/0x110 [ 97.802815][ T5231] x64_sys_call+0x242b/0x3020 [ 97.807507][ T5231] do_syscall_64+0x136/0x3c0 [ 97.812113][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.818015][ T5231] [ 97.820335][ T5231] value changed: 0x000000000001ffff -> 0x000000000007ffff [ 97.827442][ T5231] [ 97.829765][ T5231] Reported by Kernel Concurrency Sanitizer on: [ 97.835935][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz.4.572 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.845145][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 97.855211][ T5231] ================================================================== [ 97.913005][ T5231] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.572: bg 0: block 345: padding at end of block bitmap is not set [ 97.939297][ T5231] EXT4-fs (loop4): Remounting filesystem read-only [ 97.947457][ T1673] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 98.093590][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.