last executing test programs: 3.484808708s ago: executing program 1 (id=195): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c14}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 3.429334062s ago: executing program 1 (id=197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 3.371504396s ago: executing program 1 (id=198): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x22, 0x80000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/58, 0x3a, 0x0, 0x0}, &(0x7f0000000380)=0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0x5, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x138}}, 0x0) 2.565386239s ago: executing program 1 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0364d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 2.540973771s ago: executing program 1 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x50}}, 0x0) 2.540532151s ago: executing program 1 (id=213): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000deff0000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.468461736s ago: executing program 0 (id=216): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.450398717s ago: executing program 0 (id=218): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c14}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.378159891s ago: executing program 0 (id=220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0xffffffffffffff8d) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000200)) 2.349342624s ago: executing program 0 (id=221): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x22, 0x80000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/58, 0x3a, 0x0, 0x0}, &(0x7f0000000380)=0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0x5, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x138}}, 0x0) 1.571587455s ago: executing program 4 (id=235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 1.559519756s ago: executing program 4 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x50}}, 0x0) 1.531500868s ago: executing program 4 (id=238): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x6a) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) fcntl$setpipe(r2, 0x407, 0x2000000081) readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x4, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 1.49860942s ago: executing program 0 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 920.598489ms ago: executing program 3 (id=247): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b2", 0x1, 0x8005, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) 896.06056ms ago: executing program 3 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x50) 872.478671ms ago: executing program 3 (id=249): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x0) 872.207531ms ago: executing program 3 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup2(r1, r0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e00)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004182}, 0x8044010) 803.645496ms ago: executing program 3 (id=251): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x22, 0x80000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/58, 0x3a, 0x0, 0x0}, &(0x7f0000000380)=0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0x5, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x138}}, 0x0) 677.626024ms ago: executing program 4 (id=252): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a010000000880802fb040002000a0ada1b40d80800c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 659.593605ms ago: executing program 4 (id=253): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x97}}}}}, 0x0) 630.546027ms ago: executing program 0 (id=254): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3) ppoll(&(0x7f0000000640)=[{r1, 0x8004}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x11}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x39}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xb5}]}]}, 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$auto(&(0x7f00000003c0)='-/\\\x00', r3) sendmsg$autorun(r5, &(0x7f00000004c0)=@policy95={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20820502}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {0x2}, [@DEVLINK_ATTR_BUS_NAME={0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, @DEVLINK_ATTR_DEV_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00', {}, {}, 0x6f}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 625.480428ms ago: executing program 4 (id=255): syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902"], 0x0) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 599.08984ms ago: executing program 2 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x1100, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 595.41894ms ago: executing program 2 (id=257): r0 = socket(0x28, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) 555.676893ms ago: executing program 2 (id=258): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b2", 0x1, 0x8005, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) 555.413823ms ago: executing program 2 (id=259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}}, 0x0) 555.226962ms ago: executing program 2 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r2, r1, 0x0) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02130000050000000000000000000000030018"], 0x28}}, 0x0) 538.268174ms ago: executing program 2 (id=261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x1010, 0xffffffffffffffff, 0x58b55000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20004800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc598}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x4004, 0x1}) fcntl$lock(r8, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x3}) 0s ago: executing program 3 (id=262): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x6a) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x4) fcntl$setpipe(r2, 0x407, 0x2000000081) readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x4, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 17.993531][ T29] audit: type=1400 audit(1725436844.106:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 20.278778][ T29] audit: type=1400 audit(1725436846.396:82): avc: denied { mounton } for pid=3246 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.279770][ T3246] cgroup: Unknown subsys name 'net' [ 20.301489][ T29] audit: type=1400 audit(1725436846.396:83): avc: denied { mount } for pid=3246 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.328831][ T29] audit: type=1400 audit(1725436846.426:84): avc: denied { unmount } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.467412][ T3246] cgroup: Unknown subsys name 'rlimit' [ 20.589157][ T29] audit: type=1400 audit(1725436846.706:85): avc: denied { setattr } for pid=3246 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.613330][ T29] audit: type=1400 audit(1725436846.706:86): avc: denied { create } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.633895][ T29] audit: type=1400 audit(1725436846.706:87): avc: denied { write } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.634794][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.654308][ T29] audit: type=1400 audit(1725436846.706:88): avc: denied { read } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.683220][ T29] audit: type=1400 audit(1725436846.706:89): avc: denied { mounton } for pid=3246 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.699927][ T3246] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.708073][ T29] audit: type=1400 audit(1725436846.706:90): avc: denied { mount } for pid=3246 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.740509][ T29] audit: type=1400 audit(1725436846.776:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.391489][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 22.468605][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.475750][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.483169][ T3263] bridge_slave_0: entered allmulticast mode [ 22.489616][ T3263] bridge_slave_0: entered promiscuous mode [ 22.496112][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.503158][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.510344][ T3263] bridge_slave_1: entered allmulticast mode [ 22.516640][ T3263] bridge_slave_1: entered promiscuous mode [ 22.567909][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 22.577733][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.590018][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.637318][ T3263] team0: Port device team_slave_0 added [ 22.643166][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 22.661330][ T3263] team0: Port device team_slave_1 added [ 22.690179][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.697247][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.723135][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.733893][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 22.750651][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.757889][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.764968][ T3259] bridge_slave_0: entered allmulticast mode [ 22.771333][ T3259] bridge_slave_0: entered promiscuous mode [ 22.782249][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.789436][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.815339][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.830889][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 22.839977][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.847087][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.854246][ T3259] bridge_slave_1: entered allmulticast mode [ 22.860577][ T3259] bridge_slave_1: entered promiscuous mode [ 22.914171][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.939239][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.948465][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.955509][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.962665][ T3269] bridge_slave_0: entered allmulticast mode [ 22.969296][ T3269] bridge_slave_0: entered promiscuous mode [ 22.977907][ T3263] hsr_slave_0: entered promiscuous mode [ 22.983780][ T3263] hsr_slave_1: entered promiscuous mode [ 22.990628][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.997694][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.004905][ T3260] bridge_slave_0: entered allmulticast mode [ 23.011344][ T3260] bridge_slave_0: entered promiscuous mode [ 23.017797][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.024816][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.031987][ T3260] bridge_slave_1: entered allmulticast mode [ 23.038420][ T3260] bridge_slave_1: entered promiscuous mode [ 23.055117][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.062253][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.069397][ T3269] bridge_slave_1: entered allmulticast mode [ 23.075681][ T3269] bridge_slave_1: entered promiscuous mode [ 23.094900][ T3259] team0: Port device team_slave_0 added [ 23.101451][ T3259] team0: Port device team_slave_1 added [ 23.125093][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.132174][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.139388][ T3261] bridge_slave_0: entered allmulticast mode [ 23.145698][ T3261] bridge_slave_0: entered promiscuous mode [ 23.157427][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.167617][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.177726][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.186892][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.193973][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.201142][ T3261] bridge_slave_1: entered allmulticast mode [ 23.207583][ T3261] bridge_slave_1: entered promiscuous mode [ 23.232179][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.250442][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.257536][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.283548][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.297133][ T3269] team0: Port device team_slave_0 added [ 23.314487][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.323822][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.330813][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.356871][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.370320][ T3269] team0: Port device team_slave_1 added [ 23.381575][ T3260] team0: Port device team_slave_0 added [ 23.387998][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.399716][ T3260] team0: Port device team_slave_1 added [ 23.427726][ T3261] team0: Port device team_slave_0 added [ 23.434418][ T3261] team0: Port device team_slave_1 added [ 23.445492][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.452460][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.478403][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.489335][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.496294][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.522189][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.554168][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.561163][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.587155][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.598047][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.605025][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.631015][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.647058][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.654015][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.679950][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.691058][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.698044][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.724101][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.742519][ T3259] hsr_slave_0: entered promiscuous mode [ 23.748724][ T3259] hsr_slave_1: entered promiscuous mode [ 23.754557][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.762296][ T3259] Cannot create hsr debugfs directory [ 23.792143][ T3261] hsr_slave_0: entered promiscuous mode [ 23.798317][ T3261] hsr_slave_1: entered promiscuous mode [ 23.804180][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.811754][ T3261] Cannot create hsr debugfs directory [ 23.860712][ T3269] hsr_slave_0: entered promiscuous mode [ 23.866912][ T3269] hsr_slave_1: entered promiscuous mode [ 23.872682][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.880237][ T3269] Cannot create hsr debugfs directory [ 23.892428][ T3260] hsr_slave_0: entered promiscuous mode [ 23.898449][ T3260] hsr_slave_1: entered promiscuous mode [ 23.904279][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.911883][ T3260] Cannot create hsr debugfs directory [ 23.944808][ T3263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.970263][ T3263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.989307][ T3263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.999614][ T3263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.088805][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.097066][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.107034][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.115495][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.136713][ T3261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.146190][ T3261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.154658][ T3261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.165995][ T3261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.198177][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.217542][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.226323][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.240928][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.256962][ T3269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.271560][ T3269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.280145][ T3269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.295273][ T3269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.307619][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.329109][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.359126][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.367612][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.381756][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.388820][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.398264][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.405347][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.423028][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.432128][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.439201][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.462206][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.472516][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.479602][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.501144][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.510547][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.517621][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.531479][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.538566][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.577887][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.589780][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.605391][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.612552][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.621788][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.628849][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.650199][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.660694][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.675887][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.692235][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.702643][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.726078][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.733146][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.751520][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.758709][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.803348][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.819786][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.834719][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.854329][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.900265][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.998593][ T3259] veth0_vlan: entered promiscuous mode [ 25.011885][ T3260] veth0_vlan: entered promiscuous mode [ 25.026485][ T3260] veth1_vlan: entered promiscuous mode [ 25.055990][ T3259] veth1_vlan: entered promiscuous mode [ 25.062429][ T3269] veth0_vlan: entered promiscuous mode [ 25.069402][ T3263] veth0_vlan: entered promiscuous mode [ 25.081704][ T3263] veth1_vlan: entered promiscuous mode [ 25.092072][ T3260] veth0_macvtap: entered promiscuous mode [ 25.100915][ T3260] veth1_macvtap: entered promiscuous mode [ 25.110637][ T3269] veth1_vlan: entered promiscuous mode [ 25.135193][ T3263] veth0_macvtap: entered promiscuous mode [ 25.143184][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.151444][ T3259] veth0_macvtap: entered promiscuous mode [ 25.158530][ T3259] veth1_macvtap: entered promiscuous mode [ 25.165301][ T3263] veth1_macvtap: entered promiscuous mode [ 25.175882][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.186260][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.194953][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.203672][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.212362][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.230888][ T3261] veth0_vlan: entered promiscuous mode [ 25.239046][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.249652][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.260278][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.274646][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.285302][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.295156][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.305614][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.316958][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.324489][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.334906][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.345451][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.359503][ T3261] veth1_vlan: entered promiscuous mode [ 25.366893][ T3269] veth0_macvtap: entered promiscuous mode [ 25.374756][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.385198][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.395010][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.405422][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.416387][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.425815][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.434560][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.443273][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.451991][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.462188][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.470928][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.479685][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.488500][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.499878][ T3269] veth1_macvtap: entered promiscuous mode [ 25.506212][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 25.506224][ T29] audit: type=1400 audit(1725436851.616:110): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/root/syzkaller.NN2F7z/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.510652][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.512296][ T29] audit: type=1400 audit(1725436851.616:111): avc: denied { mount } for pid=3260 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 25.512356][ T29] audit: type=1400 audit(1725436851.616:112): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/root/syzkaller.NN2F7z/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.536802][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.547050][ T29] audit: type=1400 audit(1725436851.616:113): avc: denied { mount } for pid=3260 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 25.547072][ T29] audit: type=1400 audit(1725436851.616:114): avc: denied { unmount } for pid=3260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.547716][ T29] audit: type=1400 audit(1725436851.626:115): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 25.569100][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.679115][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.688941][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.699355][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.712757][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.721976][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.732465][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.742457][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.752965][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.762802][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.773262][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.783693][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.802408][ T3261] veth0_macvtap: entered promiscuous mode [ 25.810248][ T29] audit: type=1400 audit(1725436851.926:116): avc: denied { read write } for pid=3260 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.837703][ T3269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.846505][ T3269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.855202][ T3269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.863936][ T3269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.875022][ T29] audit: type=1400 audit(1725436851.926:117): avc: denied { open } for pid=3260 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.899108][ T29] audit: type=1400 audit(1725436851.926:118): avc: denied { ioctl } for pid=3260 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.924754][ T29] audit: type=1400 audit(1725436851.926:119): avc: denied { prog_load } for pid=3397 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 25.951981][ T3399] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 25.962154][ T3261] veth1_macvtap: entered promiscuous mode [ 25.998643][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.009282][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.019258][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.029749][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.039592][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.050026][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.059925][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.070354][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.081430][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.091751][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.102269][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.112179][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.122676][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.132537][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.142978][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.152801][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.163268][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.173897][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.182413][ T3261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.191237][ T3261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.200072][ T3261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.208852][ T3261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.268253][ T3409] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 26.285854][ T3412] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 26.293345][ T3412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4'. [ 26.305717][ T3409] team0: Failed to send options change via netlink (err -105) [ 26.313301][ T3409] team0: Port device netdevsim1 added [ 26.350132][ T3417] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.379434][ T3409] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.383311][ T3417] Zero length message leads to an empty skb [ 26.422063][ T3423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 26.430787][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 26.443563][ T3423] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744071562526724) [ 26.454315][ T3423] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 26.529080][ T3429] bridge0: port 3(vlan2) entered blocking state [ 26.535426][ T3429] bridge0: port 3(vlan2) entered disabled state [ 26.542689][ T3429] vlan2: entered allmulticast mode [ 26.549355][ T3429] vlan2: left allmulticast mode [ 26.622642][ T3431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'. [ 26.625074][ T3434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.501150][ T3445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 27.657894][ T3451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.677957][ T3453] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 27.685583][ T3453] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17'. [ 27.694988][ T3451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.763944][ T3459] loop2: detected capacity change from 0 to 1024 [ 27.784914][ T3459] ======================================================= [ 27.784914][ T3459] WARNING: The mand mount option has been deprecated and [ 27.784914][ T3459] and is ignored by this kernel. Remove the mand [ 27.784914][ T3459] option from the mount to silence this warning. [ 27.784914][ T3459] ======================================================= [ 27.824245][ T3459] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 27.836573][ T3459] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 27.854980][ T3459] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #4: comm syz.2.20: blocks 32-33 from inode overlap system zone [ 27.860299][ T3470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 27.882947][ T3459] EXT4-fs (loop2): failed to initialize system zone (-117) [ 27.892115][ T3459] EXT4-fs (loop2): mount failed [ 27.986017][ T3485] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 27.993604][ T3485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.31'. [ 28.019334][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 28.061544][ T3499] loop2: detected capacity change from 0 to 1024 [ 28.069117][ T3499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 28.078805][ T3499] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 28.090614][ T3499] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #4: comm syz.2.38: blocks 32-33 from inode overlap system zone [ 28.104639][ T3499] EXT4-fs (loop2): failed to initialize system zone (-117) [ 28.112047][ T3499] EXT4-fs (loop2): mount failed [ 28.323181][ T3526] syzkaller0: entered promiscuous mode [ 28.328825][ T3526] syzkaller0: entered allmulticast mode [ 30.006026][ T3593] syz.2.76 (3593) used greatest stack depth: 11304 bytes left [ 30.241611][ T3610] cgroup: Need name or subsystem set [ 31.600386][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 31.600399][ T29] audit: type=1400 audit(1725436857.716:198): avc: denied { create } for pid=3668 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.634550][ T29] audit: type=1400 audit(1725436857.716:199): avc: denied { write } for pid=3668 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.654607][ T29] audit: type=1400 audit(1725436857.716:200): avc: denied { nlmsg_write } for pid=3668 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.739204][ T3689] loop4: detected capacity change from 0 to 1024 [ 31.747040][ T3689] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 31.757831][ T3689] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 31.772384][ T3689] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #4: comm syz.4.115: blocks 32-33 from inode overlap system zone [ 31.778996][ T29] audit: type=1400 audit(1725436857.886:201): avc: denied { bind } for pid=3692 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.806385][ T3689] EXT4-fs (loop4): failed to initialize system zone (-117) [ 31.813616][ T3689] EXT4-fs (loop4): mount failed [ 32.061991][ T29] audit: type=1400 audit(1725436858.176:202): avc: denied { bind } for pid=3747 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.091452][ T29] audit: type=1400 audit(1725436858.186:203): avc: denied { name_bind } for pid=3751 comm="syz.0.142" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.283194][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.291978][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.552394][ T29] audit: type=1400 audit(1725436858.666:204): avc: denied { create } for pid=3793 comm="syz.4.160" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.890660][ T3826] loop3: detected capacity change from 0 to 1024 [ 32.898154][ T3826] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 32.909404][ T3826] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 32.919220][ T3826] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 32.929488][ T3826] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: comm syz.3.173: inode #1: comm syz.3.173: iget: illegal inode # [ 32.942601][ T3826] EXT4-fs (loop3): no journal found [ 32.947868][ T3826] EXT4-fs (loop3): can't get journal size [ 32.954741][ T3826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.968413][ T29] audit: type=1400 audit(1725436859.086:205): avc: denied { mount } for pid=3825 comm="syz.3.173" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.990052][ T29] audit: type=1400 audit(1725436859.086:206): avc: denied { write } for pid=3825 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.007949][ T3829] __nla_validate_parse: 6 callbacks suppressed [ 33.007963][ T3829] netlink: 47 bytes leftover after parsing attributes in process `syz.0.174'. [ 33.017454][ T29] audit: type=1400 audit(1725436859.136:207): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.037954][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 33.053630][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.059236][ T3831] netlink: 47 bytes leftover after parsing attributes in process `syz.0.176'. [ 33.071553][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 33.223448][ T3854] loop3: detected capacity change from 0 to 256 [ 33.230080][ T3854] vfat: Unknown parameter 'utj1˜W-›j' [ 33.246956][ T3856] loop3: detected capacity change from 0 to 512 [ 33.257772][ T3856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.270578][ T3856] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.283699][ T3856] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.187: Directory hole found for htree leaf block 0 [ 33.297631][ T3856] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.187: Directory hole found for htree leaf block 0 [ 33.311870][ T3856] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.187: Directory hole found for htree leaf block 0 [ 33.327857][ T3856] syz.3.187 (3856) used greatest stack depth: 11088 bytes left [ 33.336130][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.397060][ T3867] loop3: detected capacity change from 0 to 164 [ 33.404809][ T3867] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 34.234262][ T3905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 34.249184][ T3905] veth3: entered promiscuous mode [ 34.340216][ T3911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 34.355459][ T3911] veth5: entered promiscuous mode [ 34.508065][ T3934] syz.3.219[3934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.508139][ T3934] syz.3.219[3934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.527426][ T3934] loop3: detected capacity change from 0 to 2048 [ 34.568713][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 34.577885][ T3934] loop3: p1 p2 p3 [ 34.601340][ T2962] loop3: p1 p2 p3 [ 34.621945][ T3443] udevd[3443]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.633612][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 34.645358][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 34.669061][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 34.669108][ T3443] udevd[3443]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.680707][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 34.786660][ T3951] IPv4: Oversized IP packet from 172.20.20.24 [ 34.792923][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 34.799123][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 34.864404][ T3951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.934297][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 35.102769][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 35.390924][ C1] hrtimer: interrupt took 57260 ns [ 35.428299][ T3982] netlink: 108 bytes leftover after parsing attributes in process `syz.2.239'. [ 35.936933][ T4002] loop3: detected capacity change from 0 to 1024 [ 35.943966][ T4002] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 35.954928][ T4002] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 35.964782][ T4002] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.975014][ T4002] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: comm syz.3.246: inode #1: comm syz.3.246: iget: illegal inode # [ 35.988213][ T4002] EXT4-fs (loop3): no journal found [ 35.993424][ T4002] EXT4-fs (loop3): can't get journal size [ 35.999875][ T4002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.019646][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.074220][ T4011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4011 comm=syz.3.250 [ 36.327284][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.337102][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.444967][ T4037] No such timeout policy "syz0" [ 37.148319][ T4019] ================================================================== [ 37.156399][ T4019] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 37.164099][ T4019] [ 37.166405][ T4019] write to 0xffff8881064a3798 of 8 bytes by task 4020 on cpu 1: [ 37.174008][ T4019] fasync_remove_entry+0xd2/0x130 [ 37.179017][ T4019] fasync_helper+0x96/0xc0 [ 37.183412][ T4019] sock_fasync+0x60/0xd0 [ 37.187638][ T4019] __fput+0x68e/0x6f0 [ 37.191622][ T4019] ____fput+0x15/0x20 [ 37.195587][ T4019] task_work_run+0x13a/0x1a0 [ 37.200173][ T4019] syscall_exit_to_user_mode+0xbe/0x130 [ 37.205715][ T4019] do_syscall_64+0xd6/0x1c0 [ 37.210215][ T4019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.216124][ T4019] [ 37.218434][ T4019] read to 0xffff8881064a3798 of 8 bytes by task 4019 on cpu 0: [ 37.225963][ T4019] sock_wake_async+0x2a/0x120 [ 37.230636][ T4019] unix_write_space+0x135/0x140 [ 37.235480][ T4019] sock_wfree+0x147/0x3b0 [ 37.239793][ T4019] unix_destruct_scm+0xc5/0xf0 [ 37.244542][ T4019] skb_release_head_state+0xbb/0x1b0 [ 37.249816][ T4019] __kfree_skb+0x16/0x150 [ 37.254134][ T4019] sk_skb_reason_drop+0xb4/0x2c0 [ 37.259141][ T4019] unix_release_sock+0x631/0x780 [ 37.264093][ T4019] unix_release+0x57/0x80 [ 37.268405][ T4019] sock_close+0x68/0x150 [ 37.272639][ T4019] __fput+0x192/0x6f0 [ 37.276601][ T4019] ____fput+0x15/0x20 [ 37.280561][ T4019] task_work_run+0x13a/0x1a0 [ 37.285133][ T4019] syscall_exit_to_user_mode+0xbe/0x130 [ 37.290673][ T4019] do_syscall_64+0xd6/0x1c0 [ 37.295155][ T4019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.301038][ T4019] [ 37.303367][ T4019] value changed: 0xffff888114badf90 -> 0x0000000000000000 [ 37.310449][ T4019] [ 37.312750][ T4019] Reported by Kernel Concurrency Sanitizer on: [ 37.318886][ T4019] CPU: 0 UID: 0 PID: 4019 Comm: syz.0.254 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 37.329532][ T4019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 37.339564][ T4019] ==================================================================