last executing test programs: 4.496856619s ago: executing program 3 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xc, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.560740163s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.187905561s ago: executing program 2 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 3.163419003s ago: executing program 2 (id=34): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) r3 = syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000040)={r1, r2}) 3.103622279s ago: executing program 2 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b0000"], 0x2ac}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) fcntl$setpipe(r2, 0x407, 0x9602) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 2.644421695s ago: executing program 1 (id=40): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 2.500247899s ago: executing program 1 (id=41): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.241104025s ago: executing program 0 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 2.20177155s ago: executing program 1 (id=44): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 2.19824361s ago: executing program 2 (id=45): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r0, &(0x7f0000000680)=""/219, 0xdb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.156889284s ago: executing program 1 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x80000}], 0x1, 0x10022, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.711571269s ago: executing program 4 (id=47): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) 1.385886941s ago: executing program 1 (id=48): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.328685997s ago: executing program 0 (id=49): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1.277641192s ago: executing program 4 (id=50): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x2, @local, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.190716621s ago: executing program 0 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xaa}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xe}, {0xf}}}, 0x24}}, 0x8090) 1.165841523s ago: executing program 4 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.133429506s ago: executing program 4 (id=53): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 1.090206781s ago: executing program 4 (id=54): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0xc, 0x2) write(r2, 0x0, 0x0) 747.356855ms ago: executing program 0 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 639.098336ms ago: executing program 0 (id=56): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 556.532974ms ago: executing program 0 (id=57): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 517.107468ms ago: executing program 3 (id=58): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 397.85024ms ago: executing program 3 (id=59): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 376.484052ms ago: executing program 2 (id=60): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x4, {0x0, 0x0, 0x0, r3, 0x9907, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000080) 320.134718ms ago: executing program 3 (id=61): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x0, 0x4, 0x5}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000180)=0xa001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 319.814548ms ago: executing program 2 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 258.783634ms ago: executing program 3 (id=63): r0 = fsopen(&(0x7f0000000240)='gadgetfs\x00', 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x78bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x24008850}, 0x50) dup(r0) 226.023457ms ago: executing program 4 (id=64): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 0s ago: executing program 1 (id=65): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 23.169074][ T29] audit: type=1400 audit(1763125685.070:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.192043][ T29] audit: type=1400 audit(1763125685.090:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.192763][ T3299] cgroup: Unknown subsys name 'net' [ 23.219731][ T29] audit: type=1400 audit(1763125685.120:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.354655][ T3299] cgroup: Unknown subsys name 'cpuset' [ 23.360764][ T3299] cgroup: Unknown subsys name 'rlimit' [ 23.469361][ T29] audit: type=1400 audit(1763125685.370:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.492934][ T29] audit: type=1400 audit(1763125685.370:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.513523][ T29] audit: type=1400 audit(1763125685.370:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.533981][ T29] audit: type=1400 audit(1763125685.370:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.541020][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.554379][ T29] audit: type=1400 audit(1763125685.380:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.587648][ T29] audit: type=1400 audit(1763125685.380:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.611134][ T29] audit: type=1400 audit(1763125685.470:71): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.645978][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.792939][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 24.854775][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.878839][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.911413][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 24.986438][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.993606][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.000921][ T3312] bridge_slave_0: entered allmulticast mode [ 25.007539][ T3312] bridge_slave_0: entered promiscuous mode [ 25.026719][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.036238][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.043374][ T3313] bridge_slave_0: entered allmulticast mode [ 25.049905][ T3313] bridge_slave_0: entered promiscuous mode [ 25.056177][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.063342][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.070516][ T3312] bridge_slave_1: entered allmulticast mode [ 25.077045][ T3312] bridge_slave_1: entered promiscuous mode [ 25.083623][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.090873][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.098024][ T3311] bridge_slave_0: entered allmulticast mode [ 25.104360][ T3311] bridge_slave_0: entered promiscuous mode [ 25.110846][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.118038][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.125883][ T3311] bridge_slave_1: entered allmulticast mode [ 25.133558][ T3311] bridge_slave_1: entered promiscuous mode [ 25.149721][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.156804][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.163883][ T3313] bridge_slave_1: entered allmulticast mode [ 25.170404][ T3313] bridge_slave_1: entered promiscuous mode [ 25.200967][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 25.210636][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.225859][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.241190][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.248322][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.255851][ T3320] bridge_slave_0: entered allmulticast mode [ 25.262397][ T3320] bridge_slave_0: entered promiscuous mode [ 25.278130][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.288472][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.302714][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.311198][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.320074][ T3320] bridge_slave_1: entered allmulticast mode [ 25.326759][ T3320] bridge_slave_1: entered promiscuous mode [ 25.334504][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.360577][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.381517][ T3312] team0: Port device team_slave_0 added [ 25.392276][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.403685][ T3311] team0: Port device team_slave_0 added [ 25.410267][ T3312] team0: Port device team_slave_1 added [ 25.426177][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.436853][ T3311] team0: Port device team_slave_1 added [ 25.452185][ T3313] team0: Port device team_slave_0 added [ 25.476630][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.483575][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.510177][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.526960][ T3313] team0: Port device team_slave_1 added [ 25.534105][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.541089][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.567093][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.577834][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.584967][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.592162][ T3321] bridge_slave_0: entered allmulticast mode [ 25.598545][ T3321] bridge_slave_0: entered promiscuous mode [ 25.610793][ T3320] team0: Port device team_slave_0 added [ 25.630022][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.637115][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.644345][ T3321] bridge_slave_1: entered allmulticast mode [ 25.650796][ T3321] bridge_slave_1: entered promiscuous mode [ 25.657042][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.664019][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.690091][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.701863][ T3320] team0: Port device team_slave_1 added [ 25.708528][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.715589][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.747830][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.764286][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.771312][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.797570][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.818077][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.827440][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.854637][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.872989][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.886645][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.893736][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.921612][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.941490][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.960843][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.967816][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.993870][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.014323][ T3312] hsr_slave_0: entered promiscuous mode [ 26.021631][ T3312] hsr_slave_1: entered promiscuous mode [ 26.034469][ T3321] team0: Port device team_slave_0 added [ 26.056703][ T3313] hsr_slave_0: entered promiscuous mode [ 26.062726][ T3313] hsr_slave_1: entered promiscuous mode [ 26.068754][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 26.074545][ T3313] Cannot create hsr debugfs directory [ 26.086410][ T3321] team0: Port device team_slave_1 added [ 26.094171][ T3311] hsr_slave_0: entered promiscuous mode [ 26.100123][ T3311] hsr_slave_1: entered promiscuous mode [ 26.106037][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.111830][ T3311] Cannot create hsr debugfs directory [ 26.145879][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.152881][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.178892][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.191804][ T3320] hsr_slave_0: entered promiscuous mode [ 26.197882][ T3320] hsr_slave_1: entered promiscuous mode [ 26.203691][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 26.209421][ T3320] Cannot create hsr debugfs directory [ 26.225641][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.232835][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.258763][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.318354][ T3321] hsr_slave_0: entered promiscuous mode [ 26.324765][ T3321] hsr_slave_1: entered promiscuous mode [ 26.330728][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 26.336527][ T3321] Cannot create hsr debugfs directory [ 26.485892][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.494422][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.507091][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.515788][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.544881][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.553565][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.563126][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.571931][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.591855][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.600713][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.609488][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.624128][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.658369][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.673563][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.693633][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.702347][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.724662][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.743140][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.751119][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.764906][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.778091][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.792055][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.801241][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.815187][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.825304][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.839383][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.852847][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.860371][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.869244][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.876353][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.884841][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.892224][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.914593][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.932319][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.957209][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.971369][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.987662][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.994846][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.005047][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.012094][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.024018][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.032451][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.065636][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.072810][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.082405][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.102615][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.113083][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.166277][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.185988][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.200337][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.221063][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.236224][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.243353][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.252051][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.259124][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.292777][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.301242][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.374973][ T3311] veth0_vlan: entered promiscuous mode [ 27.391863][ T3311] veth1_vlan: entered promiscuous mode [ 27.398879][ T3312] veth0_vlan: entered promiscuous mode [ 27.411821][ T3311] veth0_macvtap: entered promiscuous mode [ 27.423494][ T3312] veth1_vlan: entered promiscuous mode [ 27.439963][ T3311] veth1_macvtap: entered promiscuous mode [ 27.452012][ T3320] veth0_vlan: entered promiscuous mode [ 27.464452][ T3312] veth0_macvtap: entered promiscuous mode [ 27.478422][ T3320] veth1_vlan: entered promiscuous mode [ 27.496405][ T3313] veth0_vlan: entered promiscuous mode [ 27.503139][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.511920][ T3312] veth1_macvtap: entered promiscuous mode [ 27.522816][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.531937][ T3313] veth1_vlan: entered promiscuous mode [ 27.539621][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.548218][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.563818][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.575648][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.588708][ T3320] veth0_macvtap: entered promiscuous mode [ 27.605242][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.618719][ T3320] veth1_macvtap: entered promiscuous mode [ 27.631947][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.641841][ T3313] veth0_macvtap: entered promiscuous mode [ 27.659756][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.679897][ T1754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.690371][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.705526][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.713577][ T3313] veth1_macvtap: entered promiscuous mode [ 27.724303][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.750076][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.760860][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.770299][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.783310][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.798257][ T1754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.814750][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.824707][ T1754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.864072][ T1754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.878813][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.899305][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.913884][ T3321] veth0_vlan: entered promiscuous mode [ 27.922137][ T3321] veth1_vlan: entered promiscuous mode [ 27.936687][ T1754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.946453][ T1754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.962765][ T1754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.993654][ T3321] veth0_macvtap: entered promiscuous mode [ 28.003518][ T3321] veth1_macvtap: entered promiscuous mode [ 28.027467][ T3495] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 28.038219][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.051229][ T3495] 8021q: VLANs not supported on tunl0 [ 28.058481][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.082776][ T1754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.106507][ T1754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.123412][ T3497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 28.128253][ T1754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.174802][ T3497] team1: entered promiscuous mode [ 28.179894][ T3497] team1: entered allmulticast mode [ 28.198123][ T3497] 8021q: adding VLAN 0 to HW filter on device team1 [ 28.207221][ T1754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.214037][ T3497] Zero length message leads to an empty skb [ 28.277529][ T3513] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.283753][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 28.283769][ T29] audit: type=1400 audit(1763125690.180:116): avc: denied { create } for pid=3512 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.302621][ T3515] loop4: detected capacity change from 0 to 1024 [ 28.343802][ T3517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 28.375775][ T3515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.406308][ T29] audit: type=1400 audit(1763125690.310:117): avc: denied { name_bind } for pid=3521 comm="syz.3.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.448450][ T29] audit: type=1400 audit(1763125690.310:118): avc: denied { node_bind } for pid=3521 comm="syz.3.17" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.471303][ T29] audit: type=1400 audit(1763125690.350:119): avc: denied { mount } for pid=3514 comm="syz.4.14" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.493081][ T29] audit: type=1400 audit(1763125690.350:120): avc: denied { add_name } for pid=3514 comm="syz.4.14" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.511984][ T3528] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.513450][ T29] audit: type=1400 audit(1763125690.350:121): avc: denied { create } for pid=3514 comm="syz.4.14" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.532934][ T3506] loop2: detected capacity change from 0 to 32768 [ 28.545174][ T29] audit: type=1400 audit(1763125690.360:122): avc: denied { read open } for pid=3514 comm="syz.4.14" path="/1/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.574138][ T29] audit: type=1400 audit(1763125690.360:123): avc: denied { write } for pid=3514 comm="syz.4.14" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.615610][ T29] audit: type=1400 audit(1763125690.480:124): avc: denied { ioctl } for pid=3527 comm="syz.1.19" path="socket:[5236]" dev="sockfs" ino=5236 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.907908][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.230091][ T29] audit: type=1400 audit(1763125691.130:125): avc: denied { create } for pid=3544 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.387169][ T3563] netlink: 'syz.0.30': attribute type 27 has an invalid length. [ 29.417733][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.425089][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.462589][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.472955][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.559200][ T3565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.567770][ T3565] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.578328][ T3565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 29.594915][ T370] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.608451][ T370] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.619972][ T370] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.628480][ T3565] syz.0.30 (3565) used greatest stack depth: 10176 bytes left [ 29.634862][ T370] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.776419][ T3578] netlink: 536 bytes leftover after parsing attributes in process `syz.2.35'. [ 29.785997][ T3578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.35'. [ 30.175304][ T3588] netem: change failed [ 30.385729][ T3593] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 30.407649][ T3593] team0: Port device dummy0 added [ 30.429991][ T3593] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 30.447592][ T3593] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 30.469509][ T3593] team0: Failed to send options change via netlink (err -105) [ 30.486646][ T3593] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 30.505180][ T3593] team0: Port device dummy0 removed [ 30.522526][ T3593] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 30.645477][ T3593] syz.1.41 (3593) used greatest stack depth: 10144 bytes left [ 30.689655][ T3421] IPVS: starting estimator thread 0... [ 30.786617][ T3602] IPVS: using max 2640 ests per chain, 132000 per kthread [ 31.160716][ T3609] netlink: 'syz.4.47': attribute type 13 has an invalid length. [ 31.241131][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.248582][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.327671][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.348618][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.441823][ T370] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.451904][ T370] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.469976][ T370] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.494606][ T370] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.615314][ T3614] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 31.645308][ T3614] team0: Port device dummy0 added [ 31.688740][ T3616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.51'. [ 31.719421][ T3616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 31.736390][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 31.777550][ T3616] bridge_slave_0 (unregistering): left allmulticast mode [ 31.785070][ T3616] bridge_slave_0 (unregistering): left promiscuous mode [ 31.792115][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.383733][ T3634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3634 comm=syz.3.58 [ 32.549383][ T3642] loop2: detected capacity change from 0 to 1024 [ 32.566132][ T3642] EXT4-fs: Ignoring removed orlov option [ 32.586904][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.849198][ T3632] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 32.873664][ T3632] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 32.895582][ T3653] ================================================================== [ 32.903672][ T3653] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 32.910793][ T3653] [ 32.913118][ T3653] write to 0xffff888106e1f254 of 4 bytes by task 3642 on cpu 0: [ 32.920748][ T3653] xas_set_mark+0x12b/0x140 [ 32.925258][ T3653] __folio_start_writeback+0x155/0x390 [ 32.930715][ T3653] ext4_bio_write_folio+0x5ad/0x9f0 [ 32.935923][ T3653] mpage_process_page_bufs+0x4a1/0x620 [ 32.941606][ T3653] mpage_prepare_extent_to_map+0x786/0xc00 [ 32.947419][ T3653] ext4_do_writepages+0xa05/0x2750 [ 32.952532][ T3653] ext4_writepages+0x176/0x300 [ 32.957291][ T3653] do_writepages+0x1c6/0x310 [ 32.961875][ T3653] file_write_and_wait_range+0x156/0x2c0 [ 32.967505][ T3653] generic_buffers_fsync_noflush+0x45/0x120 [ 32.973402][ T3653] ext4_sync_file+0x1ab/0x690 [ 32.978067][ T3653] vfs_fsync_range+0x10d/0x130 [ 32.982828][ T3653] ext4_buffered_write_iter+0x34f/0x3c0 [ 32.988374][ T3653] ext4_file_write_iter+0x387/0xf60 [ 32.993657][ T3653] iter_file_splice_write+0x666/0xa60 [ 32.999040][ T3653] direct_splice_actor+0x156/0x2a0 [ 33.004153][ T3653] splice_direct_to_actor+0x312/0x680 [ 33.009694][ T3653] do_splice_direct+0xda/0x150 [ 33.014451][ T3653] do_sendfile+0x380/0x650 [ 33.018870][ T3653] __x64_sys_sendfile64+0x105/0x150 [ 33.024082][ T3653] x64_sys_call+0x2bb4/0x3000 [ 33.028760][ T3653] do_syscall_64+0xd2/0x200 [ 33.033261][ T3653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.039147][ T3653] [ 33.041468][ T3653] read to 0xffff888106e1f254 of 4 bytes by task 3653 on cpu 1: [ 33.049093][ T3653] xas_find_marked+0x5dc/0x620 [ 33.053858][ T3653] find_get_entry+0x5d/0x380 [ 33.058457][ T3653] filemap_get_folios_tag+0x92/0x210 [ 33.063751][ T3653] mpage_prepare_extent_to_map+0x320/0xc00 [ 33.069642][ T3653] ext4_do_writepages+0xa05/0x2750 [ 33.075195][ T3653] ext4_writepages+0x176/0x300 [ 33.080482][ T3653] do_writepages+0x1c6/0x310 [ 33.085155][ T3653] file_write_and_wait_range+0x156/0x2c0 [ 33.090790][ T3653] generic_buffers_fsync_noflush+0x45/0x120 [ 33.096755][ T3653] ext4_sync_file+0x1ab/0x690 [ 33.101441][ T3653] vfs_fsync_range+0x10d/0x130 [ 33.106217][ T3653] ext4_buffered_write_iter+0x34f/0x3c0 [ 33.111767][ T3653] ext4_file_write_iter+0x387/0xf60 [ 33.116963][ T3653] iter_file_splice_write+0x666/0xa60 [ 33.122346][ T3653] direct_splice_actor+0x156/0x2a0 [ 33.127456][ T3653] splice_direct_to_actor+0x312/0x680 [ 33.132827][ T3653] do_splice_direct+0xda/0x150 [ 33.137583][ T3653] do_sendfile+0x380/0x650 [ 33.142015][ T3653] __x64_sys_sendfile64+0x105/0x150 [ 33.147225][ T3653] x64_sys_call+0x2bb4/0x3000 [ 33.151901][ T3653] do_syscall_64+0xd2/0x200 [ 33.156405][ T3653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.162307][ T3653] [ 33.164613][ T3653] value changed: 0x0a000021 -> 0x04000021 [ 33.170322][ T3653] [ 33.172648][ T3653] Reported by Kernel Concurrency Sanitizer on: [ 33.179266][ T3653] CPU: 1 UID: 0 PID: 3653 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.188849][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.199000][ T3653] ================================================================== [ 33.404657][ T3653] syz.2.62 (3653) used greatest stack depth: 9064 bytes left [ 33.421980][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 33.422001][ T29] audit: type=1400 audit(1763125695.320:175): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.463552][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.