last executing test programs: 1.420869726s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.371414975s ago: executing program 1 (id=6): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) io_setup(0x7, 0x0) syz_clone(0x22824011, 0x0, 0x7, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000380)=""/125, &(0x7f0000000400)=0x7d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206030000000000000000000000000011000300686173683a69702c706f7274000000000900020073797a31000000000c0007800800124004000000050005000a000000050004000100000005000100070000007f2c16f7eb25c6e4722b3aa02f4d44add1de70220a31ff41a96f64"], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8882) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000e3ffb70200000000080085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x80002, 0xfffffffe}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x30}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 993.810584ms ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1}}], 0x3fffffffffffe43, 0x4004441) 844.892253ms ago: executing program 3 (id=7): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x34000811) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000300000008"], 0x84}}, 0x20000000) get_mempolicy(&(0x7f0000000100), 0x0, 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048020000180080001006c6f67001400028006000440000800000600014000000000140001800a0001007265646972000000040002800900010073797a30000000000900020073797a"], 0x8c}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) 540.115292ms ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000001680)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 538.122502ms ago: executing program 3 (id=8): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x0, 0x3c, 0x1, r5}, 0x10) 492.976742ms ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r1, &(0x7f0000001400)="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", 0x200) sendfile(r1, r2, 0x0, 0xe065) 423.262671ms ago: executing program 3 (id=9): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 404.856272ms ago: executing program 2 (id=10): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) io_setup(0x7, 0x0) syz_clone(0x22824011, 0x0, 0x7, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000380)=""/125, &(0x7f0000000400)=0x7d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206030000000000000000000000000011000300686173683a69702c706f7274000000000900020073797a31000000000c0007800800124004000000050005000a000000050004000100000005000100070000"], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8882) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000e3ffb70200000000080085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x80002, 0xfffffffe}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x30}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) 151.88908ms ago: executing program 1 (id=11): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 109.04529ms ago: executing program 0 (id=12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 106.44873ms ago: executing program 3 (id=13): syz_emit_ethernet(0x5e, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private0}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x7, 0x6, 0x6, 0x9, 0x401, 0x1000, 0x8001, 0xd7, [{0x9, 0x9, 0x1, 0x3}, {0x2, 0x4, 0x7e, 0x5}, {0x6, 0x9, 0xfffffffd, 0x4}, {0x1, 0xad, 0x91a1, 0x80}, {0x2, 0xc2, 0x0, 0x3}, {0x6, 0xa4, 0x7, 0x7}]}}, @TCA_U32_ACT={0x30, 0x7, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x800) 68.48307ms ago: executing program 0 (id=14): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 35.44388ms ago: executing program 1 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @remote, @dev, @local}}}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f00000006c0)={0x73a8a69b, 0x0, &(0x7f00000000c0)=[{}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/132, 0x84}], &(0x7f0000000500)=[0x20b, 0x4, 0x5, 0xb5d], 0x4}, 0x20) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0x0, 0x0, 0x8010}, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 0s ago: executing program 4 (id=5): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x8}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): [ 20.976783][ T29] audit: type=1400 audit(1735893414.225:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 26.291341][ T29] audit: type=1400 audit(1735893419.545:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.292568][ T3286] cgroup: Unknown subsys name 'net' [ 26.314108][ T29] audit: type=1400 audit(1735893419.545:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.341452][ T29] audit: type=1400 audit(1735893419.575:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.447967][ T3286] cgroup: Unknown subsys name 'cpuset' [ 26.454164][ T3286] cgroup: Unknown subsys name 'rlimit' [ 26.564304][ T29] audit: type=1400 audit(1735893419.815:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.589357][ T29] audit: type=1400 audit(1735893419.815:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.609281][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.609888][ T29] audit: type=1400 audit(1735893419.815:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.638946][ T29] audit: type=1400 audit(1735893419.815:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.659778][ T29] audit: type=1400 audit(1735893419.815:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.684664][ T29] audit: type=1400 audit(1735893419.815:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.707969][ T29] audit: type=1400 audit(1735893419.875:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.724646][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.893662][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 28.001754][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.013866][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.020987][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.028164][ T3296] bridge_slave_0: entered allmulticast mode [ 28.035271][ T3296] bridge_slave_0: entered promiscuous mode [ 28.041833][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.058368][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.076358][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.083518][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.090801][ T3296] bridge_slave_1: entered allmulticast mode [ 28.097148][ T3296] bridge_slave_1: entered promiscuous mode [ 28.129286][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.160586][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.184032][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.191142][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.198352][ T3297] bridge_slave_0: entered allmulticast mode [ 28.204777][ T3297] bridge_slave_0: entered promiscuous mode [ 28.225999][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.233111][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.240375][ T3297] bridge_slave_1: entered allmulticast mode [ 28.246722][ T3297] bridge_slave_1: entered promiscuous mode [ 28.281955][ T3296] team0: Port device team_slave_0 added [ 28.287828][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.294882][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.302053][ T3302] bridge_slave_0: entered allmulticast mode [ 28.308376][ T3302] bridge_slave_0: entered promiscuous mode [ 28.325061][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.334982][ T3296] team0: Port device team_slave_1 added [ 28.340741][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.347882][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.355137][ T3302] bridge_slave_1: entered allmulticast mode [ 28.361530][ T3302] bridge_slave_1: entered promiscuous mode [ 28.369574][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.376666][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.384041][ T3300] bridge_slave_0: entered allmulticast mode [ 28.390399][ T3300] bridge_slave_0: entered promiscuous mode [ 28.397787][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.421371][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.428507][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.435805][ T3300] bridge_slave_1: entered allmulticast mode [ 28.442232][ T3300] bridge_slave_1: entered promiscuous mode [ 28.459675][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.466629][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.492550][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.504748][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.523931][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.532881][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.539902][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.565881][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.577568][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.591328][ T3297] team0: Port device team_slave_0 added [ 28.597798][ T3297] team0: Port device team_slave_1 added [ 28.614492][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.635295][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.642278][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.668196][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.679773][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.686721][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.712686][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.728582][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.748941][ T3302] team0: Port device team_slave_0 added [ 28.767849][ T3302] team0: Port device team_slave_1 added [ 28.781230][ T3300] team0: Port device team_slave_0 added [ 28.818656][ T3300] team0: Port device team_slave_1 added [ 28.826215][ T3296] hsr_slave_0: entered promiscuous mode [ 28.832285][ T3296] hsr_slave_1: entered promiscuous mode [ 28.840148][ T3297] hsr_slave_0: entered promiscuous mode [ 28.846216][ T3297] hsr_slave_1: entered promiscuous mode [ 28.852141][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.859744][ T3297] Cannot create hsr debugfs directory [ 28.865465][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.872446][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.898401][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.909201][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.916299][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.923613][ T3305] bridge_slave_0: entered allmulticast mode [ 28.930098][ T3305] bridge_slave_0: entered promiscuous mode [ 28.951871][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.958832][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.984768][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.995508][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.002646][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.009827][ T3305] bridge_slave_1: entered allmulticast mode [ 29.016333][ T3305] bridge_slave_1: entered promiscuous mode [ 29.032092][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.039075][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.065362][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.078774][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.085733][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.111708][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.149971][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.168465][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.220008][ T3302] hsr_slave_0: entered promiscuous mode [ 29.226074][ T3302] hsr_slave_1: entered promiscuous mode [ 29.232078][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.239691][ T3302] Cannot create hsr debugfs directory [ 29.245961][ T3305] team0: Port device team_slave_0 added [ 29.252546][ T3305] team0: Port device team_slave_1 added [ 29.260275][ T3300] hsr_slave_0: entered promiscuous mode [ 29.266309][ T3300] hsr_slave_1: entered promiscuous mode [ 29.272516][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.280113][ T3300] Cannot create hsr debugfs directory [ 29.307880][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.314902][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.340824][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.352096][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.359217][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.385137][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.462243][ T3305] hsr_slave_0: entered promiscuous mode [ 29.468424][ T3305] hsr_slave_1: entered promiscuous mode [ 29.474294][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.481951][ T3305] Cannot create hsr debugfs directory [ 29.487573][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.507310][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.518227][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.547751][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.605890][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.620785][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.639872][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.652943][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.683608][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.695170][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.708793][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.728454][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.750000][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.761171][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.775538][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.796792][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.805617][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.822526][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.832522][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.852658][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.868294][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.877064][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.896727][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.903950][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.911270][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.918331][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.928630][ T272] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.936627][ T272] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.949575][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.960327][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.968988][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.976048][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.985378][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.992445][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.002563][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.020321][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.027454][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.049355][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.059831][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.078550][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.085640][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.101735][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.134763][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.141867][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.160754][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.167854][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.184663][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.193492][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.223445][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.234569][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.246658][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.263523][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.270640][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.290502][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.297623][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.317296][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.329807][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.336890][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.357973][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.370014][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.377131][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.393667][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.434800][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.445238][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.468984][ T3297] veth0_vlan: entered promiscuous mode [ 30.490010][ T3297] veth1_vlan: entered promiscuous mode [ 30.510898][ T3297] veth0_macvtap: entered promiscuous mode [ 30.527294][ T3297] veth1_macvtap: entered promiscuous mode [ 30.543730][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.560579][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.580383][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.595470][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.616944][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.630429][ T3296] veth0_vlan: entered promiscuous mode [ 30.637363][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.646086][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.654899][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.663628][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.689996][ T3296] veth1_vlan: entered promiscuous mode [ 30.723631][ T3296] veth0_macvtap: entered promiscuous mode [ 30.757939][ T3296] veth1_macvtap: entered promiscuous mode [ 30.766938][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.779491][ T3302] veth0_vlan: entered promiscuous mode [ 30.793563][ T3302] veth1_vlan: entered promiscuous mode [ 30.822672][ T3305] veth0_vlan: entered promiscuous mode [ 30.833114][ T3305] veth1_vlan: entered promiscuous mode [ 30.851656][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.862201][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.873025][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.881216][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.891702][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.902197][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.918509][ T3296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.927283][ T3296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.936003][ T3296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944779][ T3296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.958391][ T3302] veth0_macvtap: entered promiscuous mode [ 30.983074][ T3305] veth0_macvtap: entered promiscuous mode [ 30.990093][ T3302] veth1_macvtap: entered promiscuous mode [ 31.013271][ T3305] veth1_macvtap: entered promiscuous mode [ 31.039941][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.050438][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.060370][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.070879][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.097865][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.114337][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.124914][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.134809][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.145302][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.155333][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.165778][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.180709][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.188893][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.199356][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.209196][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.219750][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.230262][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.242575][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.253121][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.263007][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.273505][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.283385][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.293845][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.310288][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.331480][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.340347][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.349150][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.357994][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.376423][ T3300] veth0_vlan: entered promiscuous mode [ 31.394807][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.403805][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.412557][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.421393][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.424194][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 31.424210][ T29] audit: type=1400 audit(1735893424.645:134): avc: denied { create } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.455577][ T29] audit: type=1400 audit(1735893424.655:135): avc: denied { setopt } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.474828][ T29] audit: type=1400 audit(1735893424.655:136): avc: denied { getopt } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.494095][ T29] audit: type=1400 audit(1735893424.655:137): avc: denied { bind } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.513227][ T29] audit: type=1400 audit(1735893424.655:138): avc: denied { name_bind } for pid=3449 comm="syz.3.7" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.535101][ T29] audit: type=1400 audit(1735893424.655:139): avc: denied { node_bind } for pid=3449 comm="syz.3.7" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 31.556535][ T29] audit: type=1400 audit(1735893424.655:140): avc: denied { write } for pid=3449 comm="syz.3.7" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.577625][ T29] audit: type=1400 audit(1735893424.655:141): avc: denied { prog_run } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.599967][ T29] audit: type=1400 audit(1735893424.855:142): avc: denied { map_read map_write } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.636734][ T3300] veth1_vlan: entered promiscuous mode [ 31.673109][ T3300] veth0_macvtap: entered promiscuous mode [ 31.722441][ T3457] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8'. [ 31.724909][ T3300] veth1_macvtap: entered promiscuous mode [ 31.755210][ T3457] 0ªX¹¦À: renamed from caif0 [ 31.763583][ T3457] 0ªX¹¦À: entered allmulticast mode [ 31.768984][ T3457] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 31.783467][ T3460] loop0: detected capacity change from 0 to 256 [ 31.810294][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.820820][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.831285][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.841737][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.851573][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.862026][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.871959][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.882491][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.898138][ T29] audit: type=1400 audit(1735893425.155:143): avc: denied { ioctl } for pid=3461 comm="syz.3.9" path="socket:[4194]" dev="sockfs" ino=4194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.958089][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.966405][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.976934][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.986825][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.997297][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.007182][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.017707][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.027616][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.038119][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.048811][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.078895][ T3438] syz.1.6 (3438) used greatest stack depth: 7328 bytes left [ 32.087396][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.096198][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105066][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.113871][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 Connection to 10.128.1.67 closed by remote host. [ 33.570560][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.490379][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.559463][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.599653][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.669159][ T50] bridge_slave_1: left allmulticast mode [ 34.674855][ T50] bridge_slave_1: left promiscuous mode [ 34.680543][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.688155][ T50] bridge_slave_0: left allmulticast mode [ 34.693789][ T50] bridge_slave_0: left promiscuous mode [ 34.699440][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.779570][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.789407][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.798999][ T50] bond0 (unregistering): Released all slaves [ 34.861130][ T50] hsr_slave_0: left promiscuous mode [ 34.866838][ T50] hsr_slave_1: left promiscuous mode [ 34.872693][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.880207][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.887990][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.895423][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.904089][ T50] veth1_macvtap: left promiscuous mode [ 34.909669][ T50] veth0_macvtap: left promiscuous mode [ 34.915156][ T50] veth1_vlan: left promiscuous mode [ 34.920380][ T50] veth0_vlan: left promiscuous mode [ 34.980929][ T50] team0 (unregistering): Port device team_slave_1 removed [ 34.991321][ T50] team0 (unregistering): Port device team_slave_0 removed [ 35.291859][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.359725][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.410071][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.469193][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.541655][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.599800][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.659300][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.710294][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.781424][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.829447][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.879640][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.919534][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.989274][ T50] bridge_slave_1: left allmulticast mode [ 35.995007][ T50] bridge_slave_1: left promiscuous mode [ 36.000649][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.008328][ T50] bridge_slave_0: left allmulticast mode [ 36.013995][ T50] bridge_slave_0: left promiscuous mode [ 36.020364][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.028561][ T50] bridge_slave_1: left allmulticast mode [ 36.034242][ T50] bridge_slave_1: left promiscuous mode [ 36.040044][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.047812][ T50] bridge_slave_0: left allmulticast mode [ 36.053495][ T50] bridge_slave_0: left promiscuous mode [ 36.059179][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.067170][ T50] bridge_slave_1: left allmulticast mode [ 36.072816][ T50] bridge_slave_1: left promiscuous mode [ 36.078513][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.086059][ T50] bridge_slave_0: left allmulticast mode [ 36.091898][ T50] bridge_slave_0: left promiscuous mode [ 36.097636][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.429557][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.439367][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.448694][ T50] bond0 (unregistering): Released all slaves [ 36.457651][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.467401][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.477030][ T50] bond0 (unregistering): Released all slaves [ 36.485965][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.496011][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.505650][ T50] bond0 (unregistering): Released all slaves [ 36.542749][ T50] hsr_slave_0: left promiscuous mode [ 36.548523][ T50] hsr_slave_1: left promiscuous mode [ 36.554287][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.561729][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.569802][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.577290][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.586281][ T50] hsr_slave_0: left promiscuous mode [ 36.592017][ T50] hsr_slave_1: left promiscuous mode [ 36.597611][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.605043][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.612755][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.620226][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.629693][ T50] hsr_slave_0: left promiscuous mode [ 36.635341][ T50] hsr_slave_1: left promiscuous mode [ 36.641136][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.648848][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.656330][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.663754][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.674703][ T50] veth1_macvtap: left promiscuous mode [ 36.680281][ T50] veth0_macvtap: left promiscuous mode [ 36.685766][ T50] veth1_vlan: left promiscuous mode [ 36.691021][ T50] veth0_vlan: left promiscuous mode [ 36.696765][ T50] veth1_macvtap: left promiscuous mode [ 36.702376][ T50] veth0_macvtap: left promiscuous mode [ 36.707926][ T50] veth1_vlan: left promiscuous mode [ 36.713140][ T50] veth0_vlan: left promiscuous mode [ 36.718859][ T50] veth1_macvtap: left promiscuous mode [ 36.724343][ T50] veth0_macvtap: left promiscuous mode [ 36.730132][ T50] veth1_vlan: left promiscuous mode [ 36.735422][ T50] veth0_vlan: left promiscuous mode [ 36.861964][ T50] team0 (unregistering): Port device team_slave_1 removed [ 36.872618][ T50] team0 (unregistering): Port device team_slave_0 removed [ 36.921679][ T50] team0 (unregistering): Port device team_slave_1 removed [ 36.932563][ T50] team0 (unregistering): Port device team_slave_0 removed [ 36.981538][ T50] team0 (unregistering): Port device team_slave_1 removed [ 36.991820][ T50] team0 (unregistering): Port device team_slave_0 removed [ 37.717131][ C0] ================================================================== [ 37.725256][ C0] BUG: KCSAN: data-race in __tmigr_cpu_deactivate / tmigr_handle_remote [ 37.733591][ C0] [ 37.735905][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 37.743279][ C0] __tmigr_cpu_deactivate+0xa1/0x410 [ 37.748579][ C0] tmigr_cpu_deactivate+0x66/0x180 [ 37.753705][ C0] __get_next_timer_interrupt+0x137/0x530 [ 37.759427][ C0] timer_base_try_to_set_idle+0x54/0x60 [ 37.764976][ C0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 37.770530][ C0] do_idle+0x175/0x230 [ 37.774604][ C0] cpu_startup_entry+0x25/0x30 [ 37.779367][ C0] start_secondary+0x96/0xa0 [ 37.783959][ C0] common_startup_64+0x12c/0x137 [ 37.788918][ C0] [ 37.791237][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 37.798797][ C0] tmigr_handle_remote+0x26e/0x940 [ 37.803927][ C0] run_timer_softirq+0x5f/0x70 [ 37.808691][ C0] handle_softirqs+0xbf/0x280 [ 37.813397][ C0] __irq_exit_rcu+0x3a/0xc0 [ 37.817921][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 37.823560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 37.829530][ C0] acpi_safe_halt+0x21/0x30 [ 37.834040][ C0] acpi_idle_do_entry+0x1d/0x30 [ 37.838881][ C0] acpi_idle_enter+0x96/0xb0 [ 37.843465][ C0] cpuidle_enter_state+0xc5/0x260 [ 37.848491][ C0] cpuidle_enter+0x40/0x70 [ 37.852904][ C0] do_idle+0x192/0x230 [ 37.856970][ C0] cpu_startup_entry+0x25/0x30 [ 37.861729][ C0] rest_init+0xef/0xf0 [ 37.865787][ C0] start_kernel+0x586/0x5e0 [ 37.870285][ C0] x86_64_start_reservations+0x2a/0x30 [ 37.875745][ C0] x86_64_start_kernel+0x9a/0xa0 [ 37.880682][ C0] common_startup_64+0x12c/0x137 [ 37.885620][ C0] [ 37.887929][ C0] value changed: 0x01 -> 0x00 [ 37.892587][ C0] [ 37.894899][ C0] Reported by Kernel Concurrency Sanitizer on: [ 37.901046][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 37.911372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.921435][ C0] ==================================================================