last executing test programs: 1.637434056s ago: executing program 1 (id=353): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sysinfo(0x0) 1.636769246s ago: executing program 1 (id=355): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000600)={0x1000403, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 1.616556348s ago: executing program 1 (id=357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)) 1.601641419s ago: executing program 1 (id=358): r0 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) 1.582253311s ago: executing program 1 (id=360): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002840)={0x0, 0x0, "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", "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"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 1.414779345s ago: executing program 2 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010000000000000007000a000000140000000c0003"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x48) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001240)='\\', 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x0, @empty}, 0x2, &(0x7f0000000b00)=[{&(0x7f00000006c0)='$', 0x1}], 0x1, &(0x7f0000000b80)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000000, 0x4, 0x6, 0x20, r4, 0x9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x6}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x149a82, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'macvlan0\x00', 0x8000}) write$cgroup_int(r9, &(0x7f0000000040), 0x12) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x48, &(0x7f0000000000)=0x670b6ef5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4096, 0x412269194f7c77a1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 961.695221ms ago: executing program 4 (id=376): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8943, &(0x7f0000000080)) 941.555103ms ago: executing program 4 (id=377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) keyctl$clear(0x7, 0x0) 905.499016ms ago: executing program 4 (id=378): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, r1+60000000}}, 0x0) 904.995366ms ago: executing program 4 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0) 890.201498ms ago: executing program 4 (id=380): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_NH_ID={0x8, 0x1e, 0x4e}]}, 0x2c}}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x18, 0x0, 0x0, @prog_fd=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x97, 0x1900, 0x1, 0x1, '\x00', r5, r6, 0x3, 0x0, 0x3, 0x4}, 0x48) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r7, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='V', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="54938445c282e2f5fb88e41bd23a4140a83ea88aa4250cd1b0c6301044961b3a6ff5ea550fb6ef6f2618b6f8baa08d00671c982dde9a0f86069f4b2be1a30fa238a246820f76966a2004899452259f6e1a563736", 0x54}], 0x1}}], 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)='X', 0x1}], 0x1) sendto$inet6(r2, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "f8c7bf42b4a49208508fb58eea12a22f56cccd34055917727b84ddf27d6f6be1", "18c5ab55d3cc09964d353a5ed707b64ab7156162d9447d058681add1d686fa77", "ff6a69228ea521bb3a125e45e6dd9fdd4ad168be84911344e350f02d6c60f665", "fcc9485b4741a6f591ec9390e354ae3a8b0553ee84e5f4b300545b63749b1a71", "2641ec0ab1e0bdaebcd40410244c1946218887460f230f087b6175be9163cf04", "42f859eb87f20ee59082b748", 0xfff80000, 0x7, 0x2089, 0xffff, 0x6}}) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 726.889071ms ago: executing program 1 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000080) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x1, 0x0, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) close(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@clone_children}]}) 471.403121ms ago: executing program 2 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r1, 0x5696ae89988f2be9}, 0x14}}, 0x0) 437.035614ms ago: executing program 2 (id=389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioperm(0x0, 0x9, 0x5) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', '', [{0x20, ')-*'}, {0x20, '..&'}]}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)) 436.415395ms ago: executing program 3 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x0, r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r9}, &(0x7f0000000c40), &(0x7f0000000f80), 0x700}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x22, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x632}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x8000, 0x99, &(0x7f0000000440)=""/153, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x8, 0x9}, 0x10, 0x173e2, r2, 0x5, &(0x7f0000000880)=[r3, r7, r8, r9, r10], &(0x7f00000008c0)=[{0x1, 0x5}, {0x1, 0x3, 0xa, 0x7}, {0x2, 0x2, 0xd, 0xa}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0x2, 0x4, 0x8}], 0x10, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 395.726778ms ago: executing program 2 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0) 395.000618ms ago: executing program 3 (id=392): r0 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x28, 0x8, 0x20000000, 0x10) 374.741599ms ago: executing program 2 (id=394): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x785f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in6=@local}}, 0xe8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004400, &(0x7f0000001940), 0x6, 0x588, &(0x7f0000000300)="$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") socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0}, 0x90) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000240)) 350.715451ms ago: executing program 3 (id=395): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x58, 0x0, 0x0, "4b0aff944eb31f33ea4b8e17e310a324ce732154b49ba64e8ecf934281abead9ab9335cea9cc6d3e289733c4b3f61c85f39b74b5d8260970f15cfec3281ce7cd3da2689dcd"}], 0x58}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000000000000ea7ae4304d9c73edd55f154e775666745302be7018cb35ab6f094a49efd95cdc640c324cd50776e0d2350bf87b287dc81dbd557044a5ef9074175e3bed8281344ad626a8313a83f745c4e0628077b2c92910edbada11ddcb4753b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb01bf52f436dd2a", 0x2a}], 0x1) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2c4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xd, 0x8, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, 0x0, 0x44ba9d47178ca6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESOCT=r3, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=r1], &(0x7f0000000500), 0x98, 0x0, 0x1, 0x5}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0xc02c5341, &(0x7f00000000c0)) tkill(r4, 0x7) 323.490454ms ago: executing program 2 (id=397): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_MARK={0x8}]}, 0x20}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000001880)=@ethtool_stats}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}]}, 0x3c}}, 0x0) read(0xffffffffffffffff, &(0x7f00000004c0)=""/152, 0x98) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="001e0000000000001c00128009000100626f6e64000000000c00028008001400ffff0000ce2e929d1c73b2b874a14dc817a53fd0f45299727eacb4f50c98f2b1fb0bd850586110a22851711a9bea532cce553ece3361e73c4d61777d97b87890b9df8ac74b62225ef40f2ca26a0bdee13657ca68b7536374a06228265cce32d593c1e4e7398db68474b965befae0772bd1029ea96e2f697705acb1501b66056070944372f848ba17c6d69d"], 0x3c}}, 0x0) 126.204ms ago: executing program 0 (id=403): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008002"], 0x1c}}, 0x0) 92.129023ms ago: executing program 0 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0) 91.777583ms ago: executing program 0 (id=405): r0 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x28, 0x8, 0x20000000, 0x10) 74.212764ms ago: executing program 0 (id=406): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0xc0189436, &(0x7f0000000080)={{0x2, 0x0, @local}, {0x0, @dev}, 0x0, {0x2, 0x0, @empty}, 'veth0_to_bridge\x00'}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5406, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x20000007d, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) 66.055755ms ago: executing program 3 (id=407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}}, 0x9c) 43.413316ms ago: executing program 0 (id=408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @remote}}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @typedef={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x4c, 0x1000, 0xa}, 0x20) 31.484938ms ago: executing program 3 (id=409): r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10100}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d7e, 0x0, 0x0, 0x0, 0x0) 30.331657ms ago: executing program 4 (id=410): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="2da6404e053f572bbf3bc7f12c2e4e256c32fc7477b4adeb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 579.99µs ago: executing program 0 (id=411): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000280)='maps\x00') 0s ago: executing program 3 (id=412): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00632f52450ead710080000003b822a14b664de8f6bde306682cb3d575dc92faca42860c0458ee0ec0fbd8c744d97868acce8955023e874f966c5d805d634361eda81594d219cdedcbf597008f0ff5129165cddc0279378074530ff1b3aec0001014d305b93c15b35d985c84fe8955bddfb725e9847075bdfab4e7d524d4860a3fd32334e0a53ed9d6c30e47331eb6fc03d1c4a4ab72928ac453bf6aabb496d479682d3615babf4eea65cd794c99046bac65f4f8"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, r0, 0x5, 0x4, 0x3}, 0x48) creat(&(0x7f00000001c0)='./file0\x00', 0x32) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2e, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.223' (ED25519) to the list of known hosts. [ 28.961906][ T29] audit: type=1400 audit(1720727854.129:82): avc: denied { mounton } for pid=3070 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.963157][ T3070] cgroup: Unknown subsys name 'net' [ 28.985705][ T29] audit: type=1400 audit(1720727854.129:83): avc: denied { mount } for pid=3070 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.013393][ T29] audit: type=1400 audit(1720727854.169:84): avc: denied { unmount } for pid=3070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.180311][ T3070] cgroup: Unknown subsys name 'rlimit' [ 29.274605][ T29] audit: type=1400 audit(1720727854.439:85): avc: denied { create } for pid=3070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.295123][ T29] audit: type=1400 audit(1720727854.439:86): avc: denied { write } for pid=3070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.310397][ T3072] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.316215][ T29] audit: type=1400 audit(1720727854.439:87): avc: denied { read } for pid=3070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.345039][ T29] audit: type=1400 audit(1720727854.439:88): avc: denied { mounton } for pid=3070 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.370330][ T29] audit: type=1400 audit(1720727854.439:89): avc: denied { mount } for pid=3070 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.373704][ T3070] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.393687][ T29] audit: type=1400 audit(1720727854.499:90): avc: denied { relabelto } for pid=3072 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.428269][ T29] audit: type=1400 audit(1720727854.499:91): avc: denied { write } for pid=3072 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.362857][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 31.474017][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.481340][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.488592][ T3087] bridge_slave_0: entered allmulticast mode [ 31.495124][ T3087] bridge_slave_0: entered promiscuous mode [ 31.503435][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.510567][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.518582][ T3087] bridge_slave_1: entered allmulticast mode [ 31.525095][ T3087] bridge_slave_1: entered promiscuous mode [ 31.583567][ T3088] chnl_net:caif_netlink_parms(): no params data found [ 31.612948][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.624981][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.643478][ T3084] chnl_net:caif_netlink_parms(): no params data found [ 31.652332][ T3093] chnl_net:caif_netlink_parms(): no params data found [ 31.675883][ T3090] chnl_net:caif_netlink_parms(): no params data found [ 31.693355][ T3087] team0: Port device team_slave_0 added [ 31.702005][ T3087] team0: Port device team_slave_1 added [ 31.744041][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.751160][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.758724][ T3088] bridge_slave_0: entered allmulticast mode [ 31.765378][ T3088] bridge_slave_0: entered promiscuous mode [ 31.784304][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.791433][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.798612][ T3088] bridge_slave_1: entered allmulticast mode [ 31.805385][ T3088] bridge_slave_1: entered promiscuous mode [ 31.811843][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.818862][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.844938][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.871847][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.878860][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.905062][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.936878][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.946084][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.953245][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.960595][ T3084] bridge_slave_0: entered allmulticast mode [ 31.967423][ T3084] bridge_slave_0: entered promiscuous mode [ 31.978969][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.986075][ T3093] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.993417][ T3093] bridge_slave_0: entered allmulticast mode [ 32.000045][ T3093] bridge_slave_0: entered promiscuous mode [ 32.012353][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.032283][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.039464][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.046657][ T3084] bridge_slave_1: entered allmulticast mode [ 32.053295][ T3084] bridge_slave_1: entered promiscuous mode [ 32.064276][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.071434][ T3093] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.078656][ T3093] bridge_slave_1: entered allmulticast mode [ 32.085276][ T3093] bridge_slave_1: entered promiscuous mode [ 32.098095][ T3090] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.105492][ T3090] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.112647][ T3090] bridge_slave_0: entered allmulticast mode [ 32.119009][ T3090] bridge_slave_0: entered promiscuous mode [ 32.126154][ T3088] team0: Port device team_slave_0 added [ 32.146442][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.154123][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.161588][ T3090] bridge_slave_1: entered allmulticast mode [ 32.168624][ T3090] bridge_slave_1: entered promiscuous mode [ 32.175564][ T3088] team0: Port device team_slave_1 added [ 32.188241][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.217985][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.225058][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.251021][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.263285][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.273766][ T3093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.285777][ T3087] hsr_slave_0: entered promiscuous mode [ 32.291903][ T3087] hsr_slave_1: entered promiscuous mode [ 32.303678][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.310755][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.337687][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.357257][ T3093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.377219][ T3090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.397852][ T3084] team0: Port device team_slave_0 added [ 32.414836][ T3093] team0: Port device team_slave_0 added [ 32.421402][ T3093] team0: Port device team_slave_1 added [ 32.428209][ T3090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.444806][ T3088] hsr_slave_0: entered promiscuous mode [ 32.450987][ T3088] hsr_slave_1: entered promiscuous mode [ 32.458340][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.466923][ T3088] Cannot create hsr debugfs directory [ 32.474105][ T3084] team0: Port device team_slave_1 added [ 32.506431][ T3090] team0: Port device team_slave_0 added [ 32.518014][ T3093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.525116][ T3093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.551060][ T3093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.567248][ T3090] team0: Port device team_slave_1 added [ 32.578471][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.585640][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.613633][ T3084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.624879][ T3093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.631939][ T3093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.659021][ T3093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.682193][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.689207][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.715219][ T3084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.738880][ T3090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.745938][ T3090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.772045][ T3090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.784300][ T3090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.791326][ T3090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.818295][ T3090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.862769][ T3084] hsr_slave_0: entered promiscuous mode [ 32.868927][ T3084] hsr_slave_1: entered promiscuous mode [ 32.874890][ T3084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.882651][ T3084] Cannot create hsr debugfs directory [ 32.911302][ T3093] hsr_slave_0: entered promiscuous mode [ 32.919449][ T3093] hsr_slave_1: entered promiscuous mode [ 32.926122][ T3093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.934383][ T3093] Cannot create hsr debugfs directory [ 32.987728][ T3090] hsr_slave_0: entered promiscuous mode [ 32.993943][ T3090] hsr_slave_1: entered promiscuous mode [ 33.000934][ T3090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.008805][ T3090] Cannot create hsr debugfs directory [ 33.096434][ T3087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.106278][ T3087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.127270][ T3087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.151055][ T3087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.185933][ T3088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.196832][ T3088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.223743][ T3088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.233019][ T3088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.241821][ T3084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.250722][ T3084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.264499][ T3084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.273466][ T3084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.315188][ T3093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.324358][ T3093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.333325][ T3093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.357953][ T3093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.384488][ T3090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.396243][ T3090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.406225][ T3090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.421609][ T3090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.442802][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.467557][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.490855][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.511007][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.523684][ T3088] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.533312][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.540434][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.550715][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.557836][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.584213][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.591325][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.600740][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.607814][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.637457][ T3084] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.651387][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.658529][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.682753][ T3087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.694957][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.702180][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.724982][ T3088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.738751][ T3093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.763604][ T3090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.774696][ T3084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.785141][ T3084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.798709][ T3093] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.815640][ T3090] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.839258][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.846476][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.864432][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.871777][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.897217][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.920904][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.928086][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.937008][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.944288][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.961579][ T3084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.975078][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.023749][ T3090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.034368][ T3090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.158247][ T3093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.166516][ T3087] veth0_vlan: entered promiscuous mode [ 34.181418][ T3084] veth0_vlan: entered promiscuous mode [ 34.193539][ T3087] veth1_vlan: entered promiscuous mode [ 34.212676][ T3084] veth1_vlan: entered promiscuous mode [ 34.222631][ T3090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.233460][ T3088] veth0_vlan: entered promiscuous mode [ 34.257784][ T3084] veth0_macvtap: entered promiscuous mode [ 34.273767][ T3087] veth0_macvtap: entered promiscuous mode [ 34.283346][ T3084] veth1_macvtap: entered promiscuous mode [ 34.292280][ T3088] veth1_vlan: entered promiscuous mode [ 34.300255][ T3087] veth1_macvtap: entered promiscuous mode [ 34.321720][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.336134][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.346840][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.361606][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.379019][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.388783][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.399517][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.414697][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.427347][ T3084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.436219][ T3084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.445170][ T3084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.453897][ T3084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.466347][ T3087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.475265][ T3087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.484040][ T3087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.492852][ T3087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.518964][ T3088] veth0_macvtap: entered promiscuous mode [ 34.526427][ T3088] veth1_macvtap: entered promiscuous mode [ 34.537205][ T3090] veth0_vlan: entered promiscuous mode [ 34.560470][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.571226][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.581118][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.591665][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.602328][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.620585][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.631264][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.641240][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.651756][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.664497][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.673259][ T3090] veth1_vlan: entered promiscuous mode [ 34.687816][ T3088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.697369][ T3088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.706493][ T3088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.715920][ T3088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.727884][ T3093] veth0_vlan: entered promiscuous mode [ 34.750590][ T3093] veth1_vlan: entered promiscuous mode [ 34.767702][ T3090] veth0_macvtap: entered promiscuous mode [ 34.776333][ T3090] veth1_macvtap: entered promiscuous mode [ 34.805498][ T3093] veth0_macvtap: entered promiscuous mode [ 34.821206][ T3093] veth1_macvtap: entered promiscuous mode [ 34.836538][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.847136][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.857256][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.859929][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 34.859946][ T29] audit: type=1400 audit(1720727860.029:118): avc: denied { create } for pid=3232 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.867809][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.879115][ T29] audit: type=1400 audit(1720727860.049:119): avc: denied { write } for pid=3232 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.893452][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.926352][ T29] audit: type=1400 audit(1720727860.089:120): avc: denied { write } for pid=3232 comm="syz.3.6" name="ip_vs" dev="proc" ino=4026532620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.933064][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.957263][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.969069][ T29] audit: type=1400 audit(1720727860.139:121): avc: denied { name_bind } for pid=3232 comm="syz.3.6" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.975733][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.994940][ T29] audit: type=1400 audit(1720727860.139:122): avc: denied { node_bind } for pid=3232 comm="syz.3.6" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.005378][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.038337][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.048837][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.058703][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.069211][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.079130][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.089601][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.103007][ T3093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.112732][ T3233] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 35.130135][ T29] audit: type=1400 audit(1720727860.289:123): avc: denied { create } for pid=3232 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.139978][ T3233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.160917][ T29] audit: type=1400 audit(1720727860.329:124): avc: denied { wake_alarm } for pid=3237 comm="syz.0.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.164240][ T3233] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 35.175525][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.211943][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.221770][ T29] audit: type=1400 audit(1720727860.389:125): avc: denied { open } for pid=3232 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.221800][ T29] audit: type=1400 audit(1720727860.389:126): avc: denied { perfmon } for pid=3232 comm="syz.3.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.240741][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.261306][ T29] audit: type=1400 audit(1720727860.389:127): avc: denied { kernel } for pid=3232 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.271707][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.271723][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.312313][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.323511][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.338420][ T3090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.347276][ T3090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.356092][ T3090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.364879][ T3090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.374641][ T3233] syz.3.6 (3233) used greatest stack depth: 10992 bytes left [ 35.382815][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.393472][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.403347][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.413996][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.424001][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.434633][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.444525][ T3093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.455132][ T3093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.471011][ T3093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.505643][ T3093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.514505][ T3093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.523714][ T3093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.532725][ T3093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.617584][ T3258] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.632257][ T3259] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.681985][ T3265] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 35.694198][ T3265] bond0: (slave lo): Error: Device can not be enslaved while up [ 35.767361][ T3272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.805856][ T3272] syz.2.19 (3272) used greatest stack depth: 10744 bytes left [ 35.902782][ T3289] Process accounting resumed [ 36.468486][ T3329] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 36.480636][ T3329] bond0: (slave lo): Error: Device can not be enslaved while up [ 36.641433][ T3352] netlink: 'syz.3.55': attribute type 10 has an invalid length. [ 36.726506][ T3358] netlink: 76 bytes leftover after parsing attributes in process `syz.1.57'. [ 36.746869][ T3358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 36.870526][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 36.921082][ T3393] netlink: 76 bytes leftover after parsing attributes in process `syz.3.73'. [ 36.934431][ T3395] netlink: 'syz.4.74': attribute type 10 has an invalid length. [ 36.942368][ T3393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 36.985739][ T3395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.000375][ T3395] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.205255][ T3415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 37.375891][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 37.442987][ T2782] udevd[2782]: worker [3322] terminated by signal 33 (Unknown signal 33) [ 37.454145][ T2782] udevd[2782]: worker [3322] failed while handling '/devices/virtual/block/loop3' [ 37.481899][ T3453] loop3: detected capacity change from 0 to 256 [ 37.521782][ T3073] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.611306][ T3474] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 37.619056][ T3474] netlink: 'syz.1.108': attribute type 4 has an invalid length. [ 37.626720][ T3474] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.108'. [ 37.639963][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 37.723800][ T3487] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 37.763817][ T3487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.785906][ T3487] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 38.081786][ T3519] Process accounting resumed [ 38.097265][ T3521] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 38.197876][ T3525] netlink: 'syz.0.130': attribute type 5 has an invalid length. [ 38.346329][ T3529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 38.544045][ T3541] capability: warning: `syz.1.137' uses deprecated v2 capabilities in a way that may be insecure [ 38.557560][ T3541] program syz.1.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.643737][ T3553] loop1: detected capacity change from 0 to 256 [ 38.742999][ T3073] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.859765][ T3561] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 38.952062][ T3569] program syz.3.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.077956][ T3583] netlink: 'syz.4.157': attribute type 5 has an invalid length. [ 39.215695][ T3594] loop1: detected capacity change from 0 to 164 [ 39.225992][ T3594] iso9660: Unknown parameter '' [ 39.283447][ T3601] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.642316][ T3638] loop4: detected capacity change from 0 to 164 [ 39.875251][ T3657] loop4: detected capacity change from 0 to 256 [ 39.887828][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 39.887845][ T29] audit: type=1400 audit(1720727865.049:321): avc: denied { mount } for pid=3656 comm="syz.4.190" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.932985][ T29] audit: type=1400 audit(1720727865.099:322): avc: denied { unmount } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.135479][ T3665] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.172823][ T3666] loop4: detected capacity change from 0 to 164 [ 40.184111][ T3666] iso9660: Unknown parameter '' [ 40.274408][ T3622] syz.1.175 (3622) used greatest stack depth: 9888 bytes left [ 40.327904][ T29] audit: type=1400 audit(1720727865.489:323): avc: denied { create } for pid=3676 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.393037][ T3687] Zero length message leads to an empty skb [ 40.541478][ T29] audit: type=1400 audit(1720727865.709:324): avc: denied { listen } for pid=3707 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.560886][ T29] audit: type=1400 audit(1720727865.709:325): avc: denied { connect } for pid=3707 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.651327][ T3712] loop1: detected capacity change from 0 to 164 [ 40.805395][ T29] audit: type=1400 audit(1720727865.969:326): avc: denied { create } for pid=3700 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.887376][ T29] audit: type=1400 audit(1720727866.049:327): avc: denied { setopt } for pid=3700 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.952799][ T3717] loop1: detected capacity change from 0 to 256 [ 41.344406][ T29] audit: type=1400 audit(1720727866.509:328): avc: denied { bind } for pid=3728 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.367363][ T29] audit: type=1400 audit(1720727866.509:329): avc: denied { getopt } for pid=3728 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.465228][ T3735] loop4: detected capacity change from 0 to 2048 [ 41.502475][ T3735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.587536][ T29] audit: type=1400 audit(1720727866.719:330): avc: denied { mount } for pid=3734 comm="syz.4.223" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.672793][ T3093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.750295][ T3749] loop3: detected capacity change from 0 to 2048 [ 41.835384][ T3749] loop3: p1 < > p3 [ 41.853196][ T3749] loop3: p3 size 134217728 extends beyond EOD, truncated [ 41.901081][ T3701] netlink: 'syz.2.209': attribute type 5 has an invalid length. [ 41.913102][ T3701] __nla_validate_parse: 8 callbacks suppressed [ 41.913115][ T3701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 42.084156][ T3765] capability: warning: `syz.3.233' uses 32-bit capabilities (legacy support in use) [ 42.117734][ T3768] syz.0.237 uses obsolete (PF_INET,SOCK_PACKET) [ 42.226410][ T3771] loop4: detected capacity change from 0 to 2048 [ 42.267977][ T3782] syzkaller1: entered promiscuous mode [ 42.273590][ T3782] syzkaller1: entered allmulticast mode [ 42.288491][ T3771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.361962][ T3093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.381355][ T3789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 42.853005][ T3831] Process accounting resumed Jul 11 19:57:48 [ 42.861894][ T3831] Process accounting resumed syzkaller kern.info kernel: [ 42.853005][ T3831] Process accounting resumed Jul 11 19:57:48 syzkaller kern.info kernel: [ 42.861894][ T3831] Process accounting resumed [ 43.083199][ T3847] Process accounting resumed Jul 11 19:57:48 syzkaller kern.info kernel: [ 43.083199][ T3847] Process accounting resumed [ 44.891178][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 44.891196][ T29] audit: type=1400 audit(1720727870.059:592): avc: denied { read write } for pid=3940 comm="syz.2.315" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 Jul 11 19:57:50 syzkaller kern.warn kernel: [ 44.891178][ T29] kauditd_printk_skb: 261 callbacks suppressed Jul 11 19:57:50[ 44.932927][ T29] audit: type=1400 audit(1720727870.069:593): avc: denied { read write } for pid=3090 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 syzkaller kern.[ 44.958068][ T29] audit: type=1400 audit(1720727870.069:594): avc: denied { read } for pid=2764 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 notice kernel: [[ 44.981587][ T29] audit: type=1400 audit(1720727870.079:595): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 44.891196][ [ 45.004134][ T29] audit: type=1400 audit(1720727870.079:596): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 T29] audit: typ[ 45.027166][ T29] audit: type=1400 audit(1720727870.079:597): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 e=1400 audit(172[ 45.050364][ T29] audit: type=1400 audit(1720727870.079:598): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 0727870.059:592)[ 45.073087][ T29] audit: type=1400 audit(1720727870.079:599): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 : avc: denied { read write } for pid=3940 comm="syz.2.315" na[ 45.073120][ T29] audit: type=1400 audit(1720727870.079:600): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 me="loop2" dev="[ 45.073159][ T29] audit: type=1400 audit(1720727870.079:601): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=3616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_ Jul 11 19:57:50 syzkaller kern.notice kernel: [ 44.932927][ T29] audit: type=1400 audit(1720727870.069:593): avc: denied { read write } for pid=3090 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fix Jul 11 19:57:50 syzkaller kern.notice kernel: [ 44.958068][ T29] audit: type=1400 audit(1720727870.069:594): avc: denied { read } for pid=2764 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l Jul 11 19:57:50 syzkaller kern.notice kernel: [ 44.981587][ T29] audit: type=1400 audit(1720727870.079:595): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_sock Jul 11 19:57:50 syzkaller kern.notice kernel: [ 45.004134][ T29] audit: type=1400 audit(1720727870.079:596): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_sock Jul 11 19:57:50 syzkaller kern.notice kernel: [ 45.027166][ T29] audit: type=1400 audit(1720727870.079:597): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_sock Jul 11 19:57:50 syzkaller kern.notice kernel: [ 45.050364][ T29] audit: type=1400 audit(1720727870.079:598): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_sock Jul 11 19:57:50 syzkaller kern.notice kernel: [ 45.073087][ T29] audit: type=1400 audit(1720727870.079:599): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_sock Jul 11 19:57:50 syzkaller kern.notice kernel: [ 45.073120][ T29] audit: type=1400 audit(1720727870.079:600): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_sock Jul 11 19:57:50 syzkaller kern.notice kernel: [ 45.073159][ T29] audit: type=1400 audit(1720727870.079:601): avc: denied { name_bind } for pid=3942 comm="syz.2.316" src=3616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socke [ 45.910982][ T4046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4046 comm=syz.0.362 Jul 11 19:57:51 syzkaller kern.warn kernel: [ 45.910982][ T4046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4046 comm=syz.0.362 [ 47.086752][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. May 18 03:33:20 syzkaller kern.warn kernel: [ 47.086752][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 47.462267][ T4159] ================================================================== [ 47.470392][ T4159] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 47.477617][ T4159] [ 47.480004][ T4159] write to 0xffff88811327e800 of 8 bytes by task 4160 on cpu 0: [ 47.487646][ T4159] exit_mm+0x9c/0x190 [ 47.491636][ T4159] do_exit+0x556/0x1710 [ 47.495841][ T4159] do_group_exit+0x102/0x150 [ 47.500542][ T4159] get_signal+0xf2f/0x1080 [ 47.505144][ T4159] arch_do_signal_or_restart+0x95/0x4b0 [ 47.510696][ T4159] syscall_exit_to_user_mode+0x59/0x130 [ 47.516353][ T4159] do_syscall_64+0xd6/0x1c0 [ 47.520895][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.527060][ T4159] [ 47.529382][ T4159] read to 0xffff88811327e800 of 8 bytes by task 4159 on cpu 1: [ 47.536949][ T4159] mm_update_next_owner+0x1c9/0x460 [ 47.542329][ T4159] exit_mm+0xdc/0x190 [ 47.546317][ T4159] do_exit+0x556/0x1710 [ 47.550482][ T4159] do_group_exit+0x142/0x150 [ 47.555166][ T4159] __x64_sys_exit_group+0x1f/0x20 [ 47.560196][ T4159] x64_sys_call+0x27f9/0x2d70 [ 47.564896][ T4159] do_syscall_64+0xc9/0x1c0 [ 47.569416][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.575323][ T4159] [ 47.577646][ T4159] value changed: 0xffff888103efb9c0 -> 0x0000000000000000 [ 47.584746][ T4159] [ 47.587065][ T4159] Reported by Kernel Concurrency Sanitizer on: [ 47.593243][ T4159] CPU: 1 PID: 4159 Comm: syz.4.410 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 47.603229][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.613375][ T4159] ================================================================== May 18 03:33:21 syzkaller kern.err kernel: [ 47.462267][ T4159] ================================================================== May 18 03:33:21 syzkaller kern.err kernel: [ 47.470392][ T4159] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner May 18 03:33:21 syzkaller kern.err kernel: [ 47.477617][ T4159] May 18 03:33:21 syzkaller kern.err kernel: [ 47.480004][ T4159] write to 0xffff88811327e800 of 8 bytes by task 4160 on cpu 0: May 18 03:33:21 syzkaller kern.warn kernel: [ 47.487646][ T4159] exit_mm+0x9c/0x190 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.491636][ T4159] do_exit+0x556/0x1710 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.495841][ T4159] do_group_exit+0x102/0x150 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.500542][ T4159] get_signal+0xf2f/0x1080 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.505144][ T4159] arch_do_signal_or_restart+0x95/0x4b0 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.510696][ T4159] syscall_exit_to_user_mode+0x59/0x130 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.516353][ T4159] do_syscall_64+0xd6/0x1c0 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.520895][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:21 syzkaller kern.err kernel: [[ 47.763367][ T4099] Process accounting resumed 47.527060][ T4159] May 18 03:33:21 syzkaller kern.err kernel: [ 47.529382][ T4159] read to 0xffff88811327e800 of 8 bytes by task 4159 on cpu 1: May 18 03:33:21 syzkaller kern.warn kernel: [ 47.536949][ T4159] mm_update_next_owner+0x1c9/0x460 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.542329][ T4159] exit_mm+0xdc/0x190 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.546317][ T4159] do_exit+0x556/0x1710 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.550482][ T4159] do_group_exit+0x142/0x150 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.555166][ T4159] __x64_sys_exit_group+0x1f/0x20 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.560196][ T4159] x64_sys_call+0x27f9/0x2d70 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.564896][ T4159] do_syscall_64+0xc9/0x1c0 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.569416][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:21 syzkaller kern.err kernel: [ 47.575323][ T4159] May 18 03:33:21 syzkaller kern.err kernel: [ 47.577646][ T4159] value changed: 0xffff888103efb9c0 -> 0x0000000000000000 May 18 03:33:21 syzkaller kern.err kernel: [ 47.584746][ T4159] May 18 03:33:21 syzkaller kern.err kernel: [ 47.587065][ T4159] Reported by Kernel Concurrency Sanitizer on: May 18 03:33:21 syzkaller kern.warn kernel: [ 47.593243][ T4159] CPU: 1 PID: 4159 Comm: syz.4.410 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 May 18 03:33:21 syzkaller kern.warn kernel: [ 47.603229][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 May 18 03:33:21 syzkaller kern.err kernel: [ 47.613375][ T4159] ================================================================== May 18 03:33:21 syzkaller kern.info kernel: [ 47.763367][ T4099] Process accounting resumed