last executing test programs: 882.172835ms ago: executing program 0 (id=1): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000003c0)="325908e49f7a57a87f0c3ef3c2937b5e536e7fbb9d99cd90f68affc33a95c0e24593da67060604a46866e7e1bb0d3a2a8811994edef042b2eec0287a23fa2ebbc6001c1c67c5da106c96247136c4ca0666d2361910255c828d498accca9ed6398f87e4319e97f654f5d6c4ffc6ff7e1d9c", 0xffffffffffffffbc, 0x8000c61) r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305839, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r9, 0x120}], 0x1, 0x45) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x18}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r11, 0x0, r12, 0x0, 0xfdef, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x252}, 0xc) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r15}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x28, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x62, &(0x7f0000000440)=""/98, 0x40f00, 0x50, '\x00', r8, 0x35, r9, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x10, 0x800}, 0x10, 0x0, r1, 0x7, &(0x7f0000000640)=[r10, r12, r13, r14, r15], &(0x7f0000000680)=[{0x4, 0x5, 0xe, 0x5}, {0x2, 0x2, 0x8, 0xa}, {0x1, 0x2, 0xb, 0x3}, {0x4, 0x4, 0x8, 0x2}, {0x3, 0x3, 0x0, 0x8}, {0x3, 0x2, 0xb, 0xb}, {0x1, 0x5, 0x6, 0x9}], 0x10, 0x5}, 0x90) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x54, r0, 0x1, 0x0, 0x25ffdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x14) 446.573093ms ago: executing program 3 (id=4): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00fff5050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fcc0ffff00000000000000ff0bc0fe000010000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 433.299394ms ago: executing program 3 (id=6): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x238f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='initcall_start\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffff18, 0x0, 0x1, 0x0, 0x0, 0x4088004}, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) getgroups(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7b8, 0x0, 0x0, 0x2}, 0x8) 330.436102ms ago: executing program 3 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xfff5}}, 0x6c}}, 0x0) 321.208163ms ago: executing program 2 (id=3): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5309, 0x0) r3 = dup(r1) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x7c8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0xc, 0x40000000}, {}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x6}, 0x20) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6d6d61702c6b5a2c106365ccd6e93823b4a8480e19f8b7"]) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x28}}, 0x0) 303.025965ms ago: executing program 1 (id=2): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 248.511559ms ago: executing program 1 (id=8): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)='X', 0x1, 0x4008080, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x10}, 0xa) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket(0x25, 0x6, 0x8000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0x0, r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0xe, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r6, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0xff2e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r8, 0x0, 0xb) splice(r10, 0x0, r9, 0x0, 0x1000, 0x0) write$binfmt_misc(r11, 0x0, 0xfdef) splice(r7, 0x0, r11, 0x0, 0x80, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r12 = syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r12, 0x9, &(0x7f0000000340)={0x0, 0x0, 0xfffffff2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x27, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1049c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7c1, 0x4}, 0x4008, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd}, r5, 0x3, 0xffffffffffffffff, 0x1) timerfd_create(0x8, 0x80000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x46842, 0x0) 104.560052ms ago: executing program 3 (id=9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x0, 0x2000000000000000}, {}, 0x4, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 104.124142ms ago: executing program 3 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=11): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x1802, 0x0, 0x300, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000002030101000000000000000000000000080001000100000026eef715d33e19e32f3fd26a9d3ef93b91a3345b21bc997b88c4fb9a26b86dbabe002c195b623b0df3b4786a81ae668315eed200008a7b44939b4b85b5b2a40e9f415e5c43d1fc393d99049e2a85379bfbe30c1b9d4753cf449708ff2e1d1a19484872877e5e0f7db3234ad33a1db98c7da839d1976c30757d968b897943f891057e604de28f53f0443acb622b776395674cdcf85ed0d469183a8d39eafc41efefda56de8baff1c149e7cae2bed258058fc2dc19b62013143594"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) recvmmsg(r7, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x1, 0x3, 0x301}, 0x14}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @private}}}}) r9 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10"], 0x10}, 0x0, 0xe3d08660d7cd4e04}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r13, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) io_uring_enter(r9, 0x92, 0x0, 0x0, 0x0, 0x0) r14 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r14, 0x0) getsockopt$XDP_MMAP_OFFSETS(r15, 0x11b, 0x8, 0x0, &(0x7f0000000080)) r16 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r16, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): 1 [ 13.363482][ T29] audit: type=1400 audit(1724483033.207:80): avc: denied { siginh } for pid=3133 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.788628][ T3134] sshd (3134) used greatest stack depth: 11368 bytes left [ 18.143979][ T29] audit: type=1400 audit(1724483038.007:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 20.425271][ T29] audit: type=1400 audit(1724483040.287:82): avc: denied { mounton } for pid=3243 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.426257][ T3243] cgroup: Unknown subsys name 'net' [ 20.447968][ T29] audit: type=1400 audit(1724483040.287:83): avc: denied { mount } for pid=3243 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.475347][ T29] audit: type=1400 audit(1724483040.307:84): avc: denied { unmount } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.615138][ T3243] cgroup: Unknown subsys name 'rlimit' [ 20.716879][ T29] audit: type=1400 audit(1724483040.577:85): avc: denied { setattr } for pid=3243 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.740158][ T29] audit: type=1400 audit(1724483040.577:86): avc: denied { create } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.760697][ T29] audit: type=1400 audit(1724483040.577:87): avc: denied { write } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.781076][ T29] audit: type=1400 audit(1724483040.577:88): avc: denied { read } for pid=3243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.801345][ T29] audit: type=1400 audit(1724483040.577:89): avc: denied { mounton } for pid=3243 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.808599][ T3248] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.826148][ T29] audit: type=1400 audit(1724483040.577:90): avc: denied { mount } for pid=3243 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.858259][ T29] audit: type=1400 audit(1724483040.697:91): avc: denied { relabelto } for pid=3248 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.887238][ T3243] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.902480][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 21.966644][ T3255] chnl_net:caif_netlink_parms(): no params data found [ 21.979968][ T3256] chnl_net:caif_netlink_parms(): no params data found [ 22.017968][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.025062][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.032256][ T3257] bridge_slave_0: entered allmulticast mode [ 22.038713][ T3257] bridge_slave_0: entered promiscuous mode [ 22.047078][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.054151][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.061318][ T3257] bridge_slave_1: entered allmulticast mode [ 22.067610][ T3257] bridge_slave_1: entered promiscuous mode [ 22.122389][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 22.131066][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.138196][ T3256] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.145286][ T3256] bridge_slave_0: entered allmulticast mode [ 22.151747][ T3256] bridge_slave_0: entered promiscuous mode [ 22.158058][ T3255] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.165150][ T3255] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.172282][ T3255] bridge_slave_0: entered allmulticast mode [ 22.178566][ T3255] bridge_slave_0: entered promiscuous mode [ 22.185924][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.194998][ T3255] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.202036][ T3255] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.209245][ T3255] bridge_slave_1: entered allmulticast mode [ 22.215700][ T3255] bridge_slave_1: entered promiscuous mode [ 22.232249][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.239342][ T3256] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.246504][ T3256] bridge_slave_1: entered allmulticast mode [ 22.252710][ T3256] bridge_slave_1: entered promiscuous mode [ 22.259648][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.301977][ T3255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.311718][ T3257] team0: Port device team_slave_0 added [ 22.320465][ T3256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.331967][ T3257] team0: Port device team_slave_1 added [ 22.338654][ T3255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.349375][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 22.361444][ T3256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.414418][ T3256] team0: Port device team_slave_0 added [ 22.420593][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.427603][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.453495][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.464871][ T3255] team0: Port device team_slave_0 added [ 22.470840][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.477791][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.503775][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.516551][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.523630][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.530696][ T3261] bridge_slave_0: entered allmulticast mode [ 22.537249][ T3261] bridge_slave_0: entered promiscuous mode [ 22.544438][ T3256] team0: Port device team_slave_1 added [ 22.550680][ T3255] team0: Port device team_slave_1 added [ 22.566036][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.573078][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.580247][ T3261] bridge_slave_1: entered allmulticast mode [ 22.586517][ T3261] bridge_slave_1: entered promiscuous mode [ 22.602209][ T3255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.609172][ T3255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.635062][ T3255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.662324][ T3255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.669327][ T3255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.695226][ T3255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.714679][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.721620][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.747622][ T3256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.758638][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.765629][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.791522][ T3256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.810208][ T3257] hsr_slave_0: entered promiscuous mode [ 22.816297][ T3257] hsr_slave_1: entered promiscuous mode [ 22.827560][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.836641][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.843731][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.850927][ T3266] bridge_slave_0: entered allmulticast mode [ 22.857420][ T3266] bridge_slave_0: entered promiscuous mode [ 22.874032][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881164][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.888254][ T3266] bridge_slave_1: entered allmulticast mode [ 22.894678][ T3266] bridge_slave_1: entered promiscuous mode [ 22.901715][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.929391][ T3256] hsr_slave_0: entered promiscuous mode [ 22.935347][ T3256] hsr_slave_1: entered promiscuous mode [ 22.941051][ T3256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 22.948649][ T3256] Cannot create hsr debugfs directory [ 22.964278][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.979428][ T3255] hsr_slave_0: entered promiscuous mode [ 22.985518][ T3255] hsr_slave_1: entered promiscuous mode [ 22.991369][ T3255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 22.998924][ T3255] Cannot create hsr debugfs directory [ 23.019832][ T3261] team0: Port device team_slave_0 added [ 23.026578][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.049070][ T3261] team0: Port device team_slave_1 added [ 23.065452][ T3266] team0: Port device team_slave_0 added [ 23.078656][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.085647][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.111592][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.130069][ T3266] team0: Port device team_slave_1 added [ 23.140389][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.147371][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.173251][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.204693][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.211639][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.237571][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.257490][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.264466][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.290360][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.340167][ T3261] hsr_slave_0: entered promiscuous mode [ 23.346026][ T3261] hsr_slave_1: entered promiscuous mode [ 23.351817][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.359394][ T3261] Cannot create hsr debugfs directory [ 23.381217][ T3266] hsr_slave_0: entered promiscuous mode [ 23.387246][ T3266] hsr_slave_1: entered promiscuous mode [ 23.393068][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.400629][ T3266] Cannot create hsr debugfs directory [ 23.475300][ T3257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.483770][ T3257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.498647][ T3257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.509063][ T3257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.556570][ T3256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.574894][ T3256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.589583][ T3256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.600238][ T3256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.622662][ T3255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.638652][ T3255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.647503][ T3255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.656718][ T3255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.677526][ T3261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.689914][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.705513][ T3261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.714953][ T3261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.723188][ T3261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.741804][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.755668][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.767919][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.776860][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.785687][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.817963][ T3257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.828405][ T3257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.841750][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.848886][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.857538][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.864570][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.907124][ T3256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.940542][ T3255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.950398][ T3256] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.967385][ T3255] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.977067][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.985933][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.997423][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.010281][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.017397][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.025956][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.033002][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.045855][ T237] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.052906][ T237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.065805][ T237] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.073097][ T237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.099150][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.111225][ T3255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.121686][ T3255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.135808][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.155178][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.162238][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.172640][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.179714][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.200087][ T3256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.210453][ T3256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.228809][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.235899][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.253655][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.260715][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.284889][ T3257] veth0_vlan: entered promiscuous mode [ 24.302807][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.313201][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.334177][ T3257] veth1_vlan: entered promiscuous mode [ 24.342653][ T3255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.358269][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.395199][ T3256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.408880][ T3257] veth0_macvtap: entered promiscuous mode [ 24.428453][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.441127][ T3257] veth1_macvtap: entered promiscuous mode [ 24.456700][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.496379][ T3255] veth0_vlan: entered promiscuous mode [ 24.515791][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.527168][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.538705][ T3255] veth1_vlan: entered promiscuous mode [ 24.550331][ T3257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.559214][ T3257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.568022][ T3257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.576758][ T3257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.605103][ T3255] veth0_macvtap: entered promiscuous mode [ 24.616741][ T3256] veth0_vlan: entered promiscuous mode [ 24.630078][ T3255] veth1_macvtap: entered promiscuous mode [ 24.651004][ T3261] veth0_vlan: entered promiscuous mode [ 24.659876][ T3256] veth1_vlan: entered promiscuous mode [ 24.668586][ T3261] veth1_vlan: entered promiscuous mode [ 24.675325][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.685767][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.697262][ T3255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.718672][ T3256] veth0_macvtap: entered promiscuous mode [ 24.729317][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.739830][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.757326][ T3255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.770451][ T3256] veth1_macvtap: entered promiscuous mode [ 24.777982][ T3255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.786772][ T3255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.795558][ T3255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.804270][ T3255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.829450][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.840073][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.850026][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.860482][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.871504][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.885707][ T3261] veth0_macvtap: entered promiscuous mode [ 24.900320][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.910932][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.920823][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.931275][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.941900][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.956359][ T3261] veth1_macvtap: entered promiscuous mode [ 24.972356][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.983022][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.992897][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.003410][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.013230][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.023662][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.037413][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.045452][ T3256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.054223][ T3256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.062917][ T3256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.071613][ T3256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.084869][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.095323][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.105193][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.115684][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.125501][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.135909][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.153944][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.170253][ T3261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.179093][ T3261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.187919][ T3261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.196650][ T3261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.206474][ T3266] veth0_vlan: entered promiscuous mode [ 25.226148][ T3266] veth1_vlan: entered promiscuous mode [ 25.266678][ T3266] veth0_macvtap: entered promiscuous mode [ 25.295251][ T3266] veth1_macvtap: entered promiscuous mode [ 25.298273][ T3412] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 25.313869][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.324480][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.334573][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.345335][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.355417][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.365934][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.375810][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.386232][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.400329][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.411574][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.422153][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.432143][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.442689][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.443948][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 25.443958][ T29] audit: type=1400 audit(1724483045.307:143): avc: denied { create } for pid=3420 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 25.452530][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.482685][ T29] audit: type=1400 audit(1724483045.327:144): avc: denied { getopt } for pid=3420 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 25.489307][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.508315][ T29] audit: type=1400 audit(1724483045.327:145): avc: denied { write } for pid=3420 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.518319][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.537750][ T29] audit: type=1400 audit(1724483045.327:146): avc: denied { nlmsg_write } for pid=3420 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.548192][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.586092][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.600062][ T3247] ================================================================== [ 25.608154][ T3247] BUG: KCSAN: data-race in generic_fillattr / shmem_unlink [ 25.615352][ T3247] [ 25.617659][ T3247] write to 0xffff888103e300f4 of 4 bytes by task 3246 on cpu 1: [ 25.625276][ T3247] shmem_unlink+0x14a/0x180 [ 25.629773][ T3247] shmem_rename2+0x1d4/0x2c0 [ 25.634345][ T3247] vfs_rename+0x875/0x9c0 [ 25.638658][ T3247] do_renameat2+0x732/0xa60 [ 25.643146][ T3247] __x64_sys_rename+0x58/0x70 [ 25.647806][ T3247] x64_sys_call+0x1a84/0x2d60 [ 25.652472][ T3247] do_syscall_64+0xc9/0x1c0 [ 25.656968][ T3247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 25.662854][ T3247] [ 25.665160][ T3247] read to 0xffff888103e300f4 of 4 bytes by task 3247 on cpu 0: [ 25.672683][ T3247] generic_fillattr+0x1a6/0x2f0 [ 25.677521][ T3247] shmem_getattr+0x17b/0x200 [ 25.682103][ T3247] vfs_getattr+0x19b/0x1e0 [ 25.686506][ T3247] vfs_statx+0x134/0x2f0 [ 25.690735][ T3247] vfs_fstatat+0xec/0x110 [ 25.695054][ T3247] __se_sys_newfstatat+0x58/0x260 [ 25.700065][ T3247] __x64_sys_newfstatat+0x55/0x70 [ 25.705080][ T3247] x64_sys_call+0x141f/0x2d60 [ 25.709744][ T3247] do_syscall_64+0xc9/0x1c0 [ 25.714244][ T3247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 25.720129][ T3247] [ 25.722435][ T3247] value changed: 0x1ab33581 -> 0x1b4bcc01 [ 25.728133][ T3247] [ 25.730436][ T3247] Reported by Kernel Concurrency Sanitizer on: [ 25.736572][ T3247] CPU: 0 UID: 0 PID: 3247 Comm: udevd Not tainted 6.11.0-rc4-syzkaller-00236-g60f0560f53e3 #0 [ 25.746801][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 25.756840][ T3247] ================================================================== [ 25.767660][ T3427] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.769052][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.783716][ T29] audit: type=1400 audit(1724483045.627:147): avc: denied { create } for pid=3423 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.787993][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.788021][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.817279][ T29] audit: type=1326 audit(1724483045.677:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3416 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae8039e79 code=0x7ffc0000 [ 25.824820][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.870635][ T3426] macvlan2: entered promiscuous mode [ 25.876076][ T3426] macvlan2: entered allmulticast mode [ 25.884957][ T3426] bond_slave_0: entered promiscuous mode [ 25.890623][ T3426] bond_slave_1: entered promiscuous mode [ 25.896387][ T3426] bond0: entered allmulticast mode [ 25.901491][ T3426] bond_slave_0: entered allmulticast mode [ 25.907392][ T3426] bond_slave_1: entered allmulticast mode [ 25.913129][ T3426] bond0: entered promiscuous mode [ 25.918743][ T29] audit: type=1400 audit(1724483045.707:149): avc: denied { ioctl } for pid=3423 comm="syz.3.10" path="socket:[3829]" dev="sockfs" ino=3829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.934222][ T3426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 25.943213][ T29] audit: type=1400 audit(1724483045.717:150): avc: denied { read } for pid=3424 comm="syz.2.11" dev="nsfs" ino=4026532749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.952155][ T3426] team0: Port device macvlan2 added [ 25.970850][ T29] audit: type=1400 audit(1724483045.717:151): avc: denied { open } for pid=3424 comm="syz.2.11" path="net:[4026532749]" dev="nsfs" ino=4026532749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.970874][ T29] audit: type=1400 audit(1724483045.717:152): avc: denied { create } for pid=3424 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.042355][ T3426] syz.3.10 (3426) used greatest stack depth: 11328 bytes left