last executing test programs: 3.977252125s ago: executing program 1 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x4171, &(0x7f00000005c0)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0) 3.934616395s ago: executing program 1 (id=81): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)) 3.877739855s ago: executing program 1 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 3.841739455s ago: executing program 1 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 3.781800486s ago: executing program 1 (id=87): r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.096566468s ago: executing program 1 (id=119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x802a40, 0x0) 3.096234798s ago: executing program 32 (id=119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x802a40, 0x0) 858.297507ms ago: executing program 4 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$uid(0x3, 0x0, 0x0) 832.714917ms ago: executing program 4 (id=179): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}}, 0x0) 798.366857ms ago: executing program 4 (id=181): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 731.286397ms ago: executing program 4 (id=183): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 707.808548ms ago: executing program 3 (id=185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) 654.703938ms ago: executing program 4 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) 627.766758ms ago: executing program 4 (id=189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 603.526558ms ago: executing program 3 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 368.264499ms ago: executing program 0 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 364.226869ms ago: executing program 3 (id=201): socket$inet6(0xa, 0x2, 0x3a) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 292.642029ms ago: executing program 2 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 292.067619ms ago: executing program 0 (id=204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)) 258.909399ms ago: executing program 3 (id=195): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 251.950279ms ago: executing program 5 (id=120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000122, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_create(r2, 0x0, 0x0) 243.147959ms ago: executing program 0 (id=196): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fstatfs(r2, &(0x7f0000000200)=""/134) 232.486619ms ago: executing program 2 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) lseek(r2, 0x2, 0x3) 225.470369ms ago: executing program 5 (id=198): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 191.326789ms ago: executing program 5 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x800, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 189.86421ms ago: executing program 0 (id=211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000122, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_create(r2, 0x0, 0x0) 176.19459ms ago: executing program 2 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 150.75561ms ago: executing program 2 (id=202): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000180c2000000000008000b"], 0x30}}, 0x0) 104.34799ms ago: executing program 5 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 101.70141ms ago: executing program 0 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create1(0x0) 90.17457ms ago: executing program 3 (id=206): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xce, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64) 75.51632ms ago: executing program 0 (id=207): socket$inet6(0xa, 0x2, 0x3a) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 75.03235ms ago: executing program 2 (id=208): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 40.77166ms ago: executing program 3 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3}, 0x14) 0s ago: executing program 2 (id=210): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x501, 0x0, &(0x7f0000001b00)="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", 0x7, 0x0, 0xfd}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): [ 20.565116][ T29] audit: type=1400 audit(1731755019.000:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 26.897681][ T29] audit: type=1400 audit(1731755025.330:82): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.898873][ T3303] cgroup: Unknown subsys name 'net' [ 26.920394][ T29] audit: type=1400 audit(1731755025.330:83): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.947865][ T29] audit: type=1400 audit(1731755025.360:84): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.105330][ T3303] cgroup: Unknown subsys name 'cpuset' [ 27.111454][ T3303] cgroup: Unknown subsys name 'rlimit' [ 27.258978][ T29] audit: type=1400 audit(1731755025.690:85): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.283982][ T29] audit: type=1400 audit(1731755025.690:86): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.304518][ T29] audit: type=1400 audit(1731755025.690:87): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.313306][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.324922][ T29] audit: type=1400 audit(1731755025.690:88): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.353728][ T29] audit: type=1400 audit(1731755025.700:89): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.378599][ T29] audit: type=1400 audit(1731755025.700:90): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.401968][ T29] audit: type=1400 audit(1731755025.760:91): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.431397][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.126464][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.138168][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.167723][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.212172][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.248506][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.255678][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.262841][ T3313] bridge_slave_0: entered allmulticast mode [ 29.269451][ T3313] bridge_slave_0: entered promiscuous mode [ 29.278627][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.285789][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.292926][ T3313] bridge_slave_1: entered allmulticast mode [ 29.299382][ T3313] bridge_slave_1: entered promiscuous mode [ 29.329342][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.357802][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.373387][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.380478][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.387673][ T3321] bridge_slave_0: entered allmulticast mode [ 29.394072][ T3321] bridge_slave_0: entered promiscuous mode [ 29.410587][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.427222][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.434438][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.441597][ T3321] bridge_slave_1: entered allmulticast mode [ 29.448057][ T3321] bridge_slave_1: entered promiscuous mode [ 29.481788][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.488895][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.495984][ T3318] bridge_slave_0: entered allmulticast mode [ 29.502181][ T3318] bridge_slave_0: entered promiscuous mode [ 29.513765][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.520884][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.528044][ T3314] bridge_slave_0: entered allmulticast mode [ 29.534564][ T3314] bridge_slave_0: entered promiscuous mode [ 29.541375][ T3313] team0: Port device team_slave_0 added [ 29.551549][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.558751][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.565915][ T3318] bridge_slave_1: entered allmulticast mode [ 29.572310][ T3318] bridge_slave_1: entered promiscuous mode [ 29.583616][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.592861][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.599948][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.607234][ T3314] bridge_slave_1: entered allmulticast mode [ 29.613610][ T3314] bridge_slave_1: entered promiscuous mode [ 29.625454][ T3313] team0: Port device team_slave_1 added [ 29.649563][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.668092][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.681801][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.688899][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.696048][ T3322] bridge_slave_0: entered allmulticast mode [ 29.702396][ T3322] bridge_slave_0: entered promiscuous mode [ 29.708987][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.716150][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.723328][ T3322] bridge_slave_1: entered allmulticast mode [ 29.729971][ T3322] bridge_slave_1: entered promiscuous mode [ 29.737139][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.747571][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.761797][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.771068][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.778043][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.803951][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.823933][ T3321] team0: Port device team_slave_0 added [ 29.833994][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.840959][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.866894][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.887480][ T3321] team0: Port device team_slave_1 added [ 29.893839][ T3318] team0: Port device team_slave_0 added [ 29.906986][ T3314] team0: Port device team_slave_0 added [ 29.913847][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.923720][ T3314] team0: Port device team_slave_1 added [ 29.934293][ T3318] team0: Port device team_slave_1 added [ 29.945941][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.984954][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.991916][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.017967][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.028988][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.035995][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.061926][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.073159][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.080217][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.106186][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.117490][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.124489][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.150421][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.166193][ T3322] team0: Port device team_slave_0 added [ 30.174137][ T3313] hsr_slave_0: entered promiscuous mode [ 30.180259][ T3313] hsr_slave_1: entered promiscuous mode [ 30.186603][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.193546][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.219472][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.230340][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.237361][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.263367][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.286835][ T3322] team0: Port device team_slave_1 added [ 30.304764][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.311726][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.337827][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.357437][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.364393][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.390494][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.432117][ T3321] hsr_slave_0: entered promiscuous mode [ 30.439222][ T3321] hsr_slave_1: entered promiscuous mode [ 30.445099][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.452645][ T3321] Cannot create hsr debugfs directory [ 30.469964][ T3314] hsr_slave_0: entered promiscuous mode [ 30.475932][ T3314] hsr_slave_1: entered promiscuous mode [ 30.481792][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.489387][ T3314] Cannot create hsr debugfs directory [ 30.508865][ T3318] hsr_slave_0: entered promiscuous mode [ 30.515978][ T3318] hsr_slave_1: entered promiscuous mode [ 30.521858][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.529431][ T3318] Cannot create hsr debugfs directory [ 30.543563][ T3322] hsr_slave_0: entered promiscuous mode [ 30.549636][ T3322] hsr_slave_1: entered promiscuous mode [ 30.555582][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.563132][ T3322] Cannot create hsr debugfs directory [ 30.742478][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.757025][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.767535][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.776218][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.801807][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.810777][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.824376][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.833040][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.863853][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.879132][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.888054][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.896377][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.924689][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.933743][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.942346][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.960169][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.978039][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.988863][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.998431][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.007013][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.021506][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.053035][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.063880][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.071042][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.111896][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.118973][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.138129][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.148610][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.161667][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.170226][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.198323][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.220395][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.244586][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.252582][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.259749][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.269051][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.276146][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.288168][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.295259][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.311231][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.319206][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.326329][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.356635][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.367950][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.379839][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.386940][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.401315][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.408443][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.420616][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.427778][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.447172][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.461087][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.468206][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.516218][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.526762][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.586557][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.607732][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.640076][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.662146][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.768795][ T3321] veth0_vlan: entered promiscuous mode [ 31.792888][ T3321] veth1_vlan: entered promiscuous mode [ 31.819419][ T3321] veth0_macvtap: entered promiscuous mode [ 31.826764][ T3313] veth0_vlan: entered promiscuous mode [ 31.833634][ T3321] veth1_macvtap: entered promiscuous mode [ 31.854013][ T3322] veth0_vlan: entered promiscuous mode [ 31.860350][ T3314] veth0_vlan: entered promiscuous mode [ 31.870368][ T3314] veth1_vlan: entered promiscuous mode [ 31.878436][ T3313] veth1_vlan: entered promiscuous mode [ 31.887657][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.898489][ T3322] veth1_vlan: entered promiscuous mode [ 31.904580][ T3318] veth0_vlan: entered promiscuous mode [ 31.917545][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.927802][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936638][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.945450][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.954180][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.969700][ T3318] veth1_vlan: entered promiscuous mode [ 31.983962][ T3313] veth0_macvtap: entered promiscuous mode [ 31.999828][ T3318] veth0_macvtap: entered promiscuous mode [ 32.016577][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.016589][ T29] audit: type=1400 audit(1731755030.450:110): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.b8kjR4/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.016831][ T3314] veth0_macvtap: entered promiscuous mode [ 32.026875][ T29] audit: type=1400 audit(1731755030.450:111): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.049855][ T3318] veth1_macvtap: entered promiscuous mode [ 32.052701][ T29] audit: type=1400 audit(1731755030.450:112): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.b8kjR4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.081066][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.105615][ T29] audit: type=1400 audit(1731755030.450:113): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.105655][ T29] audit: type=1400 audit(1731755030.450:114): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.b8kjR4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.105687][ T29] audit: type=1400 audit(1731755030.450:115): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.b8kjR4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.116144][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.121020][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.137987][ T29] audit: type=1400 audit(1731755030.450:116): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.178922][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.239432][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.250103][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.257885][ T3313] veth1_macvtap: entered promiscuous mode [ 32.268244][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.276475][ T29] audit: type=1400 audit(1731755030.690:117): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.278775][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.311349][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.321814][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.333781][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.335209][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.364332][ T3322] veth0_macvtap: entered promiscuous mode [ 32.371943][ T3314] veth1_macvtap: entered promiscuous mode [ 32.379975][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.388758][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.397476][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.406274][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.425756][ T3322] veth1_macvtap: entered promiscuous mode [ 32.432494][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.442967][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.452841][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.463283][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.473935][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.475694][ T29] audit: type=1400 audit(1731755030.910:118): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.482577][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.514075][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.522947][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.531910][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.547195][ T29] audit: type=1400 audit(1731755030.980:119): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.558646][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.581828][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.591764][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.602291][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.612169][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.622614][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.633320][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.650737][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.661393][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.671315][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.681788][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.691742][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.702236][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.713754][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.728582][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.739117][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.748984][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.759490][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.769340][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.779790][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.789647][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.800084][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.810865][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.827268][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.837816][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.847715][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.858260][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.868079][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.878532][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.888466][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.898949][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.910402][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.919030][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.927823][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.936556][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.945287][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.961477][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.970331][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.979143][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.987924][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.012581][ T3465] af_packet: tpacket_rcv: packet too big, clamped from 59259 to 3966. macoff=82 [ 33.165943][ T3481] loop2: detected capacity change from 0 to 512 [ 33.220264][ T3481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.255130][ T3481] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.322146][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.414298][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 33.570248][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 33.606424][ T3514] Illegal XDP return value 4279349248 on prog (id 22) dev N/A, expect packet loss! [ 33.666325][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.717882][ T3521] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 33.717882][ T3521] program syz.1.27 not setting count and/or reply_len properly [ 33.745135][ T3523] batadv_slave_1: entered promiscuous mode [ 33.754218][ T3527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.780817][ T3523] bridge0: entered promiscuous mode [ 33.796014][ T3522] bridge0: left promiscuous mode [ 33.801173][ T3522] batadv_slave_1: left promiscuous mode [ 33.890239][ T3537] Zero length message leads to an empty skb [ 34.116744][ T3550] loop4: detected capacity change from 0 to 2048 [ 34.165735][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.209601][ T3558] loop0: detected capacity change from 0 to 1024 [ 34.238347][ T3561] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 34.277966][ T3568] process 'syz.1.47' launched './file1' with NULL argv: empty string added [ 34.304733][ T3558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.349331][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.409604][ T3580] loop1: detected capacity change from 0 to 1024 [ 34.425567][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.440615][ T3580] EXT4-fs: Ignoring removed orlov option [ 34.446366][ T3580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.469880][ T3580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.486989][ T3580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.633802][ T3612] xt_TCPMSS: Only works on TCP SYN packets [ 34.646838][ T3608] loop3: detected capacity change from 0 to 2048 [ 34.688234][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.831029][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.866438][ T3626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.996771][ T3648] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 35.021673][ T3648] team0: Device hsr_slave_0 failed to register rx_handler [ 35.048370][ T3654] ======================================================= [ 35.048370][ T3654] WARNING: The mand mount option has been deprecated and [ 35.048370][ T3654] and is ignored by this kernel. Remove the mand [ 35.048370][ T3654] option from the mount to silence this warning. [ 35.048370][ T3654] ======================================================= [ 35.053278][ T3648] syz.0.82 (3648) used greatest stack depth: 10696 bytes left [ 35.100680][ T3657] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 35.165539][ T3663] loop0: detected capacity change from 0 to 512 [ 35.174089][ T3663] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.187229][ T3663] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.199291][ T3663] EXT4-fs (loop0): 1 truncate cleaned up [ 35.205626][ T3663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.232105][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.250941][ T3670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.93'. [ 35.260454][ T3670] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 35.273031][ T3670] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.305017][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 35.382937][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 35.390715][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 35.399073][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 35.408980][ T8] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.531081][ T3696] loop0: detected capacity change from 0 to 128 [ 35.543739][ T3696] program syz.0.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.604730][ T3703] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 35.713469][ T3720] loop4: detected capacity change from 0 to 512 [ 35.734033][ T3720] EXT4-fs: Invalid want_extra_isize 65537 [ 35.753183][ T3327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.768015][ T3724] loop0: detected capacity change from 0 to 736 [ 35.820303][ T3327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.893581][ T3327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.966124][ T3746] Cannot find set identified by id 0 to match [ 35.966491][ T3327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.117506][ T3327] bridge_slave_1: left allmulticast mode [ 36.123208][ T3327] bridge_slave_1: left promiscuous mode [ 36.129013][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.141833][ T3327] bridge_slave_0: left allmulticast mode [ 36.147559][ T3327] bridge_slave_0: left promiscuous mode [ 36.153248][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.319637][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.340209][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.364861][ T3327] bond0 (unregistering): Released all slaves [ 36.439023][ T3327] hsr_slave_0: left promiscuous mode [ 36.445449][ T3327] hsr_slave_1: left promiscuous mode [ 36.455594][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.462991][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.499815][ T3327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.507237][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.523861][ T3327] veth1_macvtap: left promiscuous mode [ 36.529408][ T3327] veth0_macvtap: left promiscuous mode [ 36.535093][ T3327] veth1_vlan: left promiscuous mode [ 36.540327][ T3327] veth0_vlan: left promiscuous mode [ 36.650584][ T3822] loop4: detected capacity change from 0 to 1024 [ 36.658606][ T3822] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.686836][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.700405][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 36.711280][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 36.728334][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.797765][ T3831] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.826528][ T3728] chnl_net:caif_netlink_parms(): no params data found [ 36.934498][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.941618][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.949237][ T3728] bridge_slave_0: entered allmulticast mode [ 36.955664][ T3728] bridge_slave_0: entered promiscuous mode [ 36.962834][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.970723][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.978586][ T3728] bridge_slave_1: entered allmulticast mode [ 36.986965][ T3728] bridge_slave_1: entered promiscuous mode [ 37.001698][ T3862] SELinux: security_context_str_to_sid (>) failed with errno=-22 [ 37.022256][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.056816][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.149301][ T3728] team0: Port device team_slave_0 added [ 37.168848][ T3728] team0: Port device team_slave_1 added [ 37.203108][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.210403][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.236504][ T3728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.303853][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.310884][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.336919][ T3728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.452137][ T3728] hsr_slave_0: entered promiscuous mode [ 37.462147][ T3728] hsr_slave_1: entered promiscuous mode [ 37.471061][ T3728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.479010][ T3728] Cannot create hsr debugfs directory [ 37.508241][ T3904] SELinux: security_context_str_to_sid (>) failed with errno=-22 [ 37.613868][ T3728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.623419][ T3728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.647116][ T3728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.671651][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 37.671662][ T29] audit: type=1326 audit(1731755036.100:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.701608][ T29] audit: type=1326 audit(1731755036.140:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.725683][ T3728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.760054][ T29] audit: type=1326 audit(1731755036.140:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.782404][ T3728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.783649][ T29] audit: type=1326 audit(1731755036.140:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.795722][ T3728] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.813354][ T29] audit: type=1326 audit(1731755036.140:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.813440][ T29] audit: type=1326 audit(1731755036.140:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.834651][ T3728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.843273][ T29] audit: type=1326 audit(1731755036.140:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.866795][ T3728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.876975][ T29] audit: type=1326 audit(1731755036.140:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.904067][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.910526][ T29] audit: type=1326 audit(1731755036.140:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.933700][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.935636][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.941231][ T29] audit: type=1326 audit(1731755036.140:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac442be719 code=0x7ffc0000 [ 37.964196][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.041422][ T3728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.091541][ T3944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.181'. [ 38.109185][ T3944] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 38.129564][ T3944] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.264103][ T3969] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 38.294805][ T3728] veth0_vlan: entered promiscuous mode [ 38.302938][ T3728] veth1_vlan: entered promiscuous mode [ 38.319862][ T3728] veth0_macvtap: entered promiscuous mode [ 38.327312][ T3728] veth1_macvtap: entered promiscuous mode [ 38.338112][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.348640][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.358472][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.368917][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.378870][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.389306][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.399124][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.409572][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.420138][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.430455][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.441077][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.450979][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.461498][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.471354][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.481783][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.491719][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.502288][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.513005][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.525271][ T3728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.534112][ T3728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.542957][ T3728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.551686][ T3728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.665285][ T3991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.195'. [ 38.684928][ T3991] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 38.706918][ T3991] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.717571][ T4002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.860600][ T4018] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 38.915201][ T4021] loop2: detected capacity change from 0 to 1024 [ 38.936504][ T4021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.962378][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.604520][ C0] ================================================================== [ 157.612658][ C0] BUG: KCSAN: data-race in __tmigr_cpu_deactivate / tmigr_handle_remote [ 157.620991][ C0] [ 157.623305][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 157.630669][ C0] __tmigr_cpu_deactivate+0xa1/0x410 [ 157.635972][ C0] tmigr_cpu_deactivate+0x66/0x180 [ 157.641080][ C0] __get_next_timer_interrupt+0x137/0x530 [ 157.646818][ C0] timer_base_try_to_set_idle+0x54/0x60 [ 157.652362][ C0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 157.657911][ C0] do_idle+0x178/0x230 [ 157.661985][ C0] cpu_startup_entry+0x25/0x30 [ 157.666773][ C0] start_secondary+0x96/0xa0 [ 157.671366][ C0] common_startup_64+0x12c/0x137 [ 157.676311][ C0] [ 157.678624][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 157.686167][ C0] tmigr_handle_remote+0x26e/0x940 [ 157.691294][ C0] run_timer_softirq+0x5f/0x70 [ 157.696063][ C0] handle_softirqs+0xbf/0x280 [ 157.700765][ C0] irq_exit_rcu+0x3e/0x90 [ 157.705088][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 157.710736][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.716716][ C0] acpi_safe_halt+0x21/0x30 [ 157.721334][ C0] acpi_idle_do_entry+0x1d/0x30 [ 157.726193][ C0] acpi_idle_enter+0x96/0xb0 [ 157.730785][ C0] cpuidle_enter_state+0xc5/0x260 [ 157.735811][ C0] cpuidle_enter+0x40/0x70 [ 157.740243][ C0] do_idle+0x195/0x230 [ 157.744316][ C0] cpu_startup_entry+0x25/0x30 [ 157.749110][ C0] rest_init+0xef/0xf0 [ 157.753183][ C0] start_kernel+0x586/0x5e0 [ 157.757687][ C0] x86_64_start_reservations+0x2a/0x30 [ 157.763181][ C0] x86_64_start_kernel+0x9a/0xa0 [ 157.768123][ C0] common_startup_64+0x12c/0x137 [ 157.773074][ C0] [ 157.775405][ C0] value changed: 0x01 -> 0x00 [ 157.780088][ C0] [ 157.782437][ C0] Reported by Kernel Concurrency Sanitizer on: [ 157.788586][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.798993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 157.809050][ C0] ================================================================== [ 157.820908][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 157.820923][ T29] audit: type=1400 audit(1731755156.260:448): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[2125]" dev="pipefs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 158.078539][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.117428][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.167559][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.207684][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.257401][ T37] bridge_slave_1: left allmulticast mode [ 158.263076][ T37] bridge_slave_1: left promiscuous mode [ 158.268819][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.276647][ T37] bridge_slave_0: left allmulticast mode [ 158.282375][ T37] bridge_slave_0: left promiscuous mode [ 158.288290][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.377140][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.387632][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.397542][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 158.407225][ T37] bond0 (unregistering): Released all slaves [ 158.448350][ T37] hsr_slave_0: left promiscuous mode [ 158.454047][ T37] hsr_slave_1: left promiscuous mode [ 158.459810][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.467368][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.475193][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.482634][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.491774][ T37] veth1_macvtap: left promiscuous mode [ 158.497370][ T37] veth0_macvtap: left promiscuous mode [ 158.502958][ T37] veth1_vlan: left promiscuous mode [ 158.508658][ T37] veth0_vlan: left promiscuous mode [ 158.579620][ T37] team0 (unregistering): Port device team_slave_1 removed [ 158.589582][ T37] team0 (unregistering): Port device team_slave_0 removed [ 158.950196][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.997655][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.057522][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.137622][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.198780][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.267078][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.307267][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.347366][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.409538][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.447209][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.507478][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.566976][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.639864][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.677916][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.727250][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.797783][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.857673][ T37] bridge_slave_1: left allmulticast mode [ 159.863326][ T37] bridge_slave_1: left promiscuous mode [ 159.869118][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.876839][ T37] bridge_slave_0: left allmulticast mode [ 159.882476][ T37] bridge_slave_0: left promiscuous mode [ 159.888266][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.896542][ T37] bridge_slave_1: left allmulticast mode [ 159.902268][ T37] bridge_slave_1: left promiscuous mode [ 159.907992][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.915816][ T37] bridge_slave_0: left allmulticast mode [ 159.921569][ T37] bridge_slave_0: left promiscuous mode [ 159.927373][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.935792][ T37] bridge_slave_1: left allmulticast mode [ 159.941476][ T37] bridge_slave_1: left promiscuous mode [ 159.947173][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.954976][ T37] bridge_slave_0: left allmulticast mode [ 159.960611][ T37] bridge_slave_0: left promiscuous mode [ 159.966309][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.974622][ T37] bridge_slave_1: left allmulticast mode [ 159.980291][ T37] bridge_slave_1: left promiscuous mode [ 159.985998][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.993818][ T37] bridge_slave_0: left allmulticast mode [ 159.999586][ T37] bridge_slave_0: left promiscuous mode [ 160.005331][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.376460][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.386825][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.397297][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 160.407380][ T37] bond0 (unregistering): Released all slaves [ 160.416689][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.426787][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.436832][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 160.446490][ T37] bond0 (unregistering): Released all slaves [ 160.455788][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.465996][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.476348][ T37] bond0 (unregistering): Released all slaves [ 160.485601][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.495470][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.505693][ T37] bond0 (unregistering): Released all slaves [ 160.541407][ T37] hsr_slave_0: left promiscuous mode [ 160.547144][ T37] hsr_slave_1: left promiscuous mode [ 160.552787][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.560219][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.567917][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.575381][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.585371][ T37] hsr_slave_0: left promiscuous mode [ 160.590988][ T37] hsr_slave_1: left promiscuous mode [ 160.596707][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.604106][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.611880][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.619321][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.628495][ T37] hsr_slave_0: left promiscuous mode [ 160.634132][ T37] hsr_slave_1: left promiscuous mode [ 160.639877][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.647298][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.654859][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.662238][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.671227][ T37] hsr_slave_0: left promiscuous mode [ 160.676878][ T37] hsr_slave_1: left promiscuous mode [ 160.682513][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.690023][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.697734][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.705191][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.717809][ T37] veth1_macvtap: left promiscuous mode [ 160.723355][ T37] veth0_macvtap: left promiscuous mode [ 160.728981][ T37] veth1_vlan: left promiscuous mode [ 160.734216][ T37] veth0_vlan: left promiscuous mode [ 160.739984][ T37] veth1_macvtap: left promiscuous mode [ 160.745493][ T37] veth0_macvtap: left promiscuous mode [ 160.751034][ T37] veth1_vlan: left promiscuous mode [ 160.756410][ T37] veth0_vlan: left promiscuous mode [ 160.762056][ T37] veth1_macvtap: left promiscuous mode [ 160.767548][ T37] veth0_macvtap: left promiscuous mode [ 160.773024][ T37] veth1_vlan: left promiscuous mode [ 160.778435][ T37] veth0_vlan: left promiscuous mode [ 160.784104][ T37] veth1_macvtap: left promiscuous mode [ 160.789650][ T37] veth0_macvtap: left promiscuous mode [ 160.795244][ T37] veth1_vlan: left promiscuous mode [ 160.800453][ T37] veth0_vlan: left promiscuous mode [ 160.994047][ T37] team0 (unregistering): Port device team_slave_1 removed [ 161.004529][ T37] team0 (unregistering): Port device team_slave_0 removed [ 161.064540][ T37] team0 (unregistering): Port device team_slave_1 removed [ 161.074632][ T37] team0 (unregistering): Port device team_slave_0 removed [ 161.133142][ T37] team0 (unregistering): Port device team_slave_1 removed [ 161.142653][ T37] team0 (unregistering): Port device team_slave_0 removed [ 161.205714][ T37] team0 (unregistering): Port device team_slave_1 removed [ 161.215611][ T37] team0 (unregistering): Port device team_slave_0 removed