last executing test programs: 952.260845ms ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) 892.98917ms ago: executing program 2 (id=7): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x34ff, 0x4}}, 0xe8) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000100)=ANY=[], 0x46) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 821.209426ms ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300"], 0x38}}, 0x0) 637.929433ms ago: executing program 3 (id=10): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 550.57491ms ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 491.089706ms ago: executing program 1 (id=14): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffe, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) 487.885156ms ago: executing program 3 (id=15): memfd_create(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$vcsu(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 484.118226ms ago: executing program 2 (id=16): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x20) 466.822128ms ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f40)=""/45, 0x2d}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 424.805102ms ago: executing program 1 (id=17): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2=0xe0000008, @local}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @broadcast}, 0xc) close(r2) 412.919933ms ago: executing program 3 (id=18): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000380)=""/159, 0x9f) 388.939705ms ago: executing program 3 (id=19): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) r0 = syz_io_uring_setup(0x24f2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x10100, 0x0, 0xb9}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2a, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 373.166156ms ago: executing program 4 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 355.962578ms ago: executing program 1 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa3) 319.097991ms ago: executing program 0 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x5}]}]}}}]}, 0x68}}, 0x0) 300.793282ms ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 287.877014ms ago: executing program 4 (id=24): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 225.715609ms ago: executing program 0 (id=25): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a11702b9462d3589e67197f90b0a0023ceb0ab4912f9f6a35854ec06e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb646a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 225.14423ms ago: executing program 4 (id=26): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESDEC], 0x1, 0x377, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x0, 0x0, r0, 0x0}]) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000400)=""/61) 174.030584ms ago: executing program 1 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 129.072618ms ago: executing program 0 (id=28): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x400000, @private1, 0x401}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 104.92585ms ago: executing program 1 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 70.232553ms ago: executing program 0 (id=30): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="92", 0x1}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="b2", 0x1}], 0x1}}], 0x1, 0x2000c801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 49.421805ms ago: executing program 0 (id=31): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/74, 0x40000}], 0x1}, 0x100) 29.537897ms ago: executing program 0 (id=32): getpid() io_uring_setup(0x6374, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440), 0x6, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0) 1.00304ms ago: executing program 1 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa93, 0x4, 0x1000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 0s ago: executing program 4 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) kernel console output (not intermixed with test programs): [ 20.718320][ T29] audit: type=1400 audit(1731148380.387:81): avc: denied { read } for pid=3000 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 26.205133][ T29] audit: type=1400 audit(1731148385.867:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.206250][ T3304] cgroup: Unknown subsys name 'net' [ 26.227858][ T29] audit: type=1400 audit(1731148385.867:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.255319][ T29] audit: type=1400 audit(1731148385.907:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.429026][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.435266][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.563351][ T29] audit: type=1400 audit(1731148386.227:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.588582][ T29] audit: type=1400 audit(1731148386.227:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.609153][ T29] audit: type=1400 audit(1731148386.227:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.617258][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.629506][ T29] audit: type=1400 audit(1731148386.227:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.658385][ T29] audit: type=1400 audit(1731148386.237:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.683178][ T29] audit: type=1400 audit(1731148386.237:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.706504][ T29] audit: type=1400 audit(1731148386.307:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.736255][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.591477][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.600458][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.609363][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.634811][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 28.711015][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.718175][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.725380][ T3319] bridge_slave_0: entered allmulticast mode [ 28.731808][ T3319] bridge_slave_0: entered promiscuous mode [ 28.750311][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.757401][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.764571][ T3319] bridge_slave_1: entered allmulticast mode [ 28.770869][ T3319] bridge_slave_1: entered promiscuous mode [ 28.801459][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.808637][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.815785][ T3318] bridge_slave_0: entered allmulticast mode [ 28.822206][ T3318] bridge_slave_0: entered promiscuous mode [ 28.828800][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.835920][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.843148][ T3318] bridge_slave_1: entered allmulticast mode [ 28.849621][ T3318] bridge_slave_1: entered promiscuous mode [ 28.867671][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.877825][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.887011][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.894133][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.901377][ T3316] bridge_slave_0: entered allmulticast mode [ 28.907743][ T3316] bridge_slave_0: entered promiscuous mode [ 28.914610][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.921693][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.928832][ T3316] bridge_slave_1: entered allmulticast mode [ 28.935325][ T3316] bridge_slave_1: entered promiscuous mode [ 28.946738][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.955371][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.962465][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.969641][ T3325] bridge_slave_0: entered allmulticast mode [ 28.975964][ T3325] bridge_slave_0: entered promiscuous mode [ 29.000206][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.007261][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.014573][ T3325] bridge_slave_1: entered allmulticast mode [ 29.020885][ T3325] bridge_slave_1: entered promiscuous mode [ 29.033109][ T3319] team0: Port device team_slave_0 added [ 29.043990][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.056529][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.075365][ T3319] team0: Port device team_slave_1 added [ 29.086588][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.106361][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.121499][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.137608][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.147034][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.154143][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.180104][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.198225][ T3318] team0: Port device team_slave_0 added [ 29.208380][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.215352][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.241295][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.259578][ T3318] team0: Port device team_slave_1 added [ 29.272298][ T3325] team0: Port device team_slave_0 added [ 29.279404][ T3316] team0: Port device team_slave_0 added [ 29.295305][ T3325] team0: Port device team_slave_1 added [ 29.306959][ T3316] team0: Port device team_slave_1 added [ 29.335815][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.342868][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.368824][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.384141][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.391249][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.417233][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.428128][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.435240][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.442548][ T3315] bridge_slave_0: entered allmulticast mode [ 29.449056][ T3315] bridge_slave_0: entered promiscuous mode [ 29.455580][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.462673][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.488716][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.504373][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.511396][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.537360][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.550565][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.557521][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.583512][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.594388][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.601526][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.608813][ T3315] bridge_slave_1: entered allmulticast mode [ 29.615129][ T3315] bridge_slave_1: entered promiscuous mode [ 29.621407][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.628469][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.654423][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.669481][ T3319] hsr_slave_0: entered promiscuous mode [ 29.675573][ T3319] hsr_slave_1: entered promiscuous mode [ 29.727151][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.742563][ T3325] hsr_slave_0: entered promiscuous mode [ 29.748593][ T3325] hsr_slave_1: entered promiscuous mode [ 29.754382][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.761992][ T3325] Cannot create hsr debugfs directory [ 29.774928][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.791073][ T3316] hsr_slave_0: entered promiscuous mode [ 29.797126][ T3316] hsr_slave_1: entered promiscuous mode [ 29.803059][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.810662][ T3316] Cannot create hsr debugfs directory [ 29.853282][ T3318] hsr_slave_0: entered promiscuous mode [ 29.859274][ T3318] hsr_slave_1: entered promiscuous mode [ 29.865159][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.872746][ T3318] Cannot create hsr debugfs directory [ 29.902255][ T3315] team0: Port device team_slave_0 added [ 29.922518][ T3315] team0: Port device team_slave_1 added [ 29.942259][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.949335][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.975499][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.000874][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.007930][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.033884][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.087922][ T3315] hsr_slave_0: entered promiscuous mode [ 30.094167][ T3315] hsr_slave_1: entered promiscuous mode [ 30.100064][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.107605][ T3315] Cannot create hsr debugfs directory [ 30.170203][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.178827][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.191944][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.200627][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.229161][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.237580][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.258627][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.271509][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.293027][ T3325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.304010][ T3325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.313285][ T3325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.327356][ T3325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.361059][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.370362][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.379211][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.387807][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.420222][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.437741][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.446928][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.455618][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.464920][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.490804][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.520756][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.527878][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.536535][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.543698][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.588793][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.601672][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.614222][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.624931][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.634745][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.651869][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.659015][ T1880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.672766][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.683173][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.690287][ T1880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.711213][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.718288][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.733823][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.740887][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.761439][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.768505][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.778322][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.785357][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.814427][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.826075][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.866789][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.889129][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.913733][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.921993][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.929067][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.956100][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.963204][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.010717][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.021070][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.045223][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.059837][ T3319] veth0_vlan: entered promiscuous mode [ 31.085916][ T3319] veth1_vlan: entered promiscuous mode [ 31.099522][ T3318] veth0_vlan: entered promiscuous mode [ 31.130262][ T3318] veth1_vlan: entered promiscuous mode [ 31.148676][ T3319] veth0_macvtap: entered promiscuous mode [ 31.165641][ T3319] veth1_macvtap: entered promiscuous mode [ 31.174694][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.198379][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.209218][ T3318] veth0_macvtap: entered promiscuous mode [ 31.216602][ T3318] veth1_macvtap: entered promiscuous mode [ 31.227635][ T3316] veth0_vlan: entered promiscuous mode [ 31.234699][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.243985][ T3316] veth1_vlan: entered promiscuous mode [ 31.253542][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.264034][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.274471][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.290983][ T3319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.299731][ T3319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.308712][ T3319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.317405][ T3319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.328221][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.339152][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.349975][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.366413][ T3325] veth0_vlan: entered promiscuous mode [ 31.382710][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.391522][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.400307][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.409126][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.431530][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.431546][ T29] audit: type=1400 audit(1731148391.097:110): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.wNld2G/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.434099][ T3325] veth1_vlan: entered promiscuous mode [ 31.452574][ T29] audit: type=1400 audit(1731148391.117:111): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.478981][ T3316] veth0_macvtap: entered promiscuous mode [ 31.489488][ T29] audit: type=1400 audit(1731148391.117:112): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.wNld2G/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.520549][ T29] audit: type=1400 audit(1731148391.117:113): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.542390][ T29] audit: type=1400 audit(1731148391.117:114): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.wNld2G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.569088][ T29] audit: type=1400 audit(1731148391.117:115): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.wNld2G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.596480][ T29] audit: type=1400 audit(1731148391.117:116): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.616967][ T29] audit: type=1400 audit(1731148391.287:117): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.643075][ T3325] veth0_macvtap: entered promiscuous mode [ 31.651040][ T3325] veth1_macvtap: entered promiscuous mode [ 31.651609][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.660958][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.681727][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.691562][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.702062][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.712681][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.721466][ T3316] veth1_macvtap: entered promiscuous mode [ 31.728432][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.739013][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.748856][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.759359][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.770255][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.795066][ T3325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.803926][ T3325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.809014][ T29] audit: type=1400 audit(1731148391.457:118): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.812734][ T3325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.836810][ T29] audit: type=1400 audit(1731148391.457:119): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.845477][ T3325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.900081][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.910672][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.920742][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.931263][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.941239][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.951702][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.969244][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.977311][ T3315] veth0_vlan: entered promiscuous mode [ 31.987830][ T3315] veth1_vlan: entered promiscuous mode [ 31.998868][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.009410][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.019374][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.029813][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.039687][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.050163][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.066901][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.077845][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.086692][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.095443][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.104235][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.125252][ T3315] veth0_macvtap: entered promiscuous mode [ 32.152685][ T3315] veth1_macvtap: entered promiscuous mode [ 32.173140][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.174566][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 32.183793][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.202534][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.213211][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.223072][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.233688][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.243561][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.254027][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.267617][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.276200][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.286801][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.296695][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.307260][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.317321][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.327797][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.337780][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.348235][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.358829][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.367251][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.376025][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.384746][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.393522][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.499488][ T3487] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.614713][ T3498] wg2: entered promiscuous mode [ 32.619774][ T3498] wg2: entered allmulticast mode [ 32.670685][ T3504] netem: unknown loss type 5 [ 32.675368][ T3504] netem: change failed [ 32.699016][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 32.749051][ T3512] loop4: detected capacity change from 0 to 128 [ 32.936863][ T3529] loop0: detected capacity change from 0 to 1024 [ 32.954359][ T28] ================================================================== [ 32.962468][ T28] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 32.969782][ T28] [ 32.972107][ T28] read-write to 0xffff888113a2d220 of 8 bytes by task 3315 on cpu 0: [ 32.980176][ T28] xas_clear_mark+0x90/0x180 [ 32.984783][ T28] __folio_start_writeback+0x2e2/0x440 [ 32.990252][ T28] __block_write_full_folio+0x506/0x8c0 [ 32.995810][ T28] block_write_full_folio+0x293/0x2b0 [ 33.001196][ T28] write_cache_pages+0x62/0x100 [ 33.006054][ T28] blkdev_writepages+0x59/0x90 [ 33.010823][ T28] do_writepages+0x1d8/0x480 [ 33.015416][ T28] filemap_fdatawrite_wbc+0xdb/0x100 [ 33.020716][ T28] filemap_flush+0x61/0x90 [ 33.025146][ T28] sync_blockdev_nowait+0x29/0x40 [ 33.030187][ T28] sync_filesystem+0xe3/0x190 [ 33.034881][ T28] generic_shutdown_super+0x46/0x220 [ 33.040201][ T28] kill_block_super+0x2a/0x70 [ 33.044896][ T28] deactivate_locked_super+0x7d/0x1c0 [ 33.050286][ T28] deactivate_super+0x9f/0xb0 [ 33.054972][ T28] cleanup_mnt+0x268/0x2e0 [ 33.059405][ T28] __cleanup_mnt+0x19/0x20 [ 33.063833][ T28] task_work_run+0x13a/0x1a0 [ 33.068429][ T28] syscall_exit_to_user_mode+0xbe/0x130 [ 33.073972][ T28] do_syscall_64+0xd6/0x1c0 [ 33.078477][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.084381][ T28] [ 33.086697][ T28] read to 0xffff888113a2d220 of 8 bytes by task 28 on cpu 1: [ 33.094069][ T28] xas_find_marked+0x216/0x660 [ 33.098841][ T28] find_get_entry+0x54/0x390 [ 33.103449][ T28] filemap_get_folios_tag+0x136/0x210 [ 33.108828][ T28] writeback_iter+0x4b0/0x830 [ 33.113505][ T28] write_cache_pages+0x4b/0x100 [ 33.118354][ T28] blkdev_writepages+0x59/0x90 [ 33.123112][ T28] do_writepages+0x1d8/0x480 [ 33.127698][ T28] __writeback_single_inode+0x89/0x850 [ 33.133153][ T28] writeback_sb_inodes+0x461/0xa30 [ 33.138268][ T28] __writeback_inodes_wb+0x9a/0x1a0 [ 33.143463][ T28] wb_writeback+0x274/0x640 [ 33.147971][ T28] wb_workfn+0x67f/0x940 [ 33.152229][ T28] process_scheduled_works+0x483/0x9a0 [ 33.157699][ T28] worker_thread+0x51d/0x6f0 [ 33.162288][ T28] kthread+0x1d1/0x210 [ 33.166361][ T28] ret_from_fork+0x4b/0x60 [ 33.170784][ T28] ret_from_fork_asm+0x1a/0x30 [ 33.175555][ T28] [ 33.177867][ T28] value changed: 0x0000000000003010 -> 0x0000000000000000 [ 33.184989][ T28] [ 33.187333][ T28] Reported by Kernel Concurrency Sanitizer on: [ 33.193495][ T28] CPU: 1 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 33.204166][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.214229][ T28] Workqueue: writeback wb_workfn (flush-7:4) [ 33.220237][ T28] ================================================================== [ 33.261789][ T3529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.310633][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.686920][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 37.686934][ T29] audit: type=1400 audit(1731148397.347:233): avc: denied { read } for pid=3000 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.715449][ T29] audit: type=1400 audit(1731148397.347:234): avc: denied { search } for pid=3000 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.736918][ T29] audit: type=1400 audit(1731148397.347:235): avc: denied { open } for pid=3000 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.759454][ T29] audit: type=1400 audit(1731148397.347:236): avc: denied { getattr } for pid=3000 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1