last executing test programs: 175.610689ms ago: executing program 1 (id=2): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb80}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29}, @alu={0x4, 0x0, 0xd, 0x8, 0x6, 0xfffffffffffffff8}, @ldst={0x0, 0x2, 0x4, 0x1, 0x7, 0x100, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x2, 0xb, 0x3, 0x20, 0x1}, @ldst={0x3, 0x2, 0x3, 0x9, 0x4, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x82}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x45}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000740)='GPL\x00', 0x40, 0xfe, &(0x7f0000000780)=""/254, 0x1e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x3, 0x9, 0xff}, 0x10, 0x28afa, 0xffffffffffffffff, 0x9, &(0x7f0000000900)=[r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000940)=[{0x2, 0x2, 0x9, 0x9}, {0x2, 0x3, 0x10, 0x8}, {0x1, 0x5, 0xc, 0x7}, {0x2, 0x1, 0x0, 0x6}, {0x5, 0x3, 0x4, 0xa}, {0x5, 0x4, 0x0, 0x1}, {0x4, 0x4, 0x4, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x1, 0x3, 0x7, 0x4}], 0x10, 0x2f2d, @void, @value}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000ac0), 0x600000, 0x0) syz_read_part_table(0x5e0, &(0x7f0000000000)="$eJzs3L9rJFUcAPDvzM7ObiAasbZYSCMKRrATF23UpBONnYWNgkVEYiFWu4uC4I8/IK1oYRRCrC08OEK4dFcdB+Huv7gUF94xP/fgUt2Gg4PPp9jve2++3/dmdl77Jni+pY2IlEWc1b3fB3Uo8u1Be/2LrMscNWHYdqvxTw/f/2Bn8lE26seq0Xl7dbRcpWxjEZO29V8Rvx1++VPeZcyaMI8Y/lNGUeWmpu7gyZu+qKYvsmv5A1hF8X+qX1aUcTv+jYi9bFC9/FHEIv6MeCnGdd5WxMuDlFL9mucRaxGDKPt98dSOpieLd6PYrdpr0e60YdOb/ZylN9u8YaSUUh6zza5yEPHKO1v7V01a1y/qPdYNpZSG611tvrywd1l2zbdO789iMe5nj9Ru7m6ffnP+8Rv1nWTNHMNVHx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGv36rev3ci7znv1b9b/bv8V+TJ1HvGwa0/G17T+0fRk44cf9/P4fvrVna+zbngQWx+uR4z6vM+bcPxLHYo+bVV7l3n59x831/qBduos4tbm3YvUrXDexu/efqx4mq+8PgAAAAAAAAAAAAAAAAAAAFSOY2fySR67EVl8Fsvj/inGEVl/Hn8ckVJKD1KtO/xfHrzYts7uRVYVRepKTsvmgwIbL0Sk0a+v1x8UaApTSkW9RPYMH5QrPQoAAP//HdhdXQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) acct(&(0x7f0000000600)='./file0\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) 115.274873ms ago: executing program 0 (id=1): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x24022040) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x7fffffe, 0x10000001}, 0x8) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x4, &(0x7f0000000280)=[{0x3, 0xf3, 0xfa, 0x7}, {0x3, 0x40, 0x4, 0x8}, {0x4, 0x42, 0x7, 0xe00}, {0x24cd, 0x0, 0x60, 0x8}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0xc98, 0x30, 0x12f, 0x0, 0x0, {}, [{0xc84, 0x1, [@m_police={0xc80, 0x1, 0x0, 0x0, {{0xb}, {0xc54, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe4, 0x80, 0x5, 0x8, 0x80000000, 0x2, 0x8935, 0x6, 0x5f2, 0x3, 0x2, 0xffff, 0x5, 0x10001, 0x10, 0x10001, 0x6, 0x1, 0xfbd9, 0x5, 0x101, 0x8, 0x7fff, 0x200, 0x4, 0x1, 0x1, 0xffffffff, 0x1, 0x1, 0x0, 0xc, 0x2, 0xffffff81, 0x1, 0x3, 0x5, 0x101, 0x7f, 0x7, 0xfffffff7, 0x9, 0x7, 0xff, 0x2a7, 0x7, 0x8, 0x6d8, 0x8, 0x9, 0x2b8, 0x1, 0x0, 0x0, 0x8000, 0x4, 0x824b, 0x5, 0x4, 0xffffffff, 0x7, 0x4b, 0xfffffffd, 0x8, 0x1, 0x3, 0x5, 0x401, 0x8, 0x4, 0x0, 0x9, 0x4, 0x9ccd, 0xb, 0x5, 0x4fd, 0x3, 0x2, 0x2, 0x8, 0x6, 0x2, 0x9, 0xfffffffd, 0x1ec000, 0x4, 0x200, 0x5, 0x20000, 0x71fd, 0x9, 0x9bf, 0xba42, 0x6, 0x0, 0x2, 0x3, 0x7c40, 0xd, 0x0, 0x9, 0x7, 0x8, 0xa, 0x80, 0x7ff, 0x6, 0x1000, 0x800, 0x5, 0x2, 0x100000, 0x5, 0x10001, 0x7, 0x8, 0x6, 0x3, 0xfffffff8, 0x9, 0x5d800, 0x6, 0x2, 0x8, 0xd981, 0x10000, 0x6, 0x8, 0x5, 0x7, 0x46b, 0x3, 0x1, 0x4, 0x5, 0x9095, 0x12, 0x7, 0x4, 0xbfdcdcc, 0x1, 0x3, 0x2, 0x7, 0x4, 0x0, 0x1000, 0x40, 0xc5, 0x8, 0xf, 0xafb, 0x3, 0xfffffffb, 0x4, 0x5, 0x9, 0x6, 0x8, 0x5, 0xffffffff, 0x3bb, 0x8, 0x800, 0x2, 0x9, 0x30, 0x8d6, 0x200, 0x5, 0x6, 0x28000, 0x7, 0x8, 0x566d, 0xc9b1, 0xfffffffd, 0x2, 0x7, 0x5, 0x19e, 0x6, 0x1, 0x7, 0xb, 0xff, 0x6, 0x8, 0x401, 0x9, 0x25c, 0xc46, 0x2, 0xd5f9, 0x80000000, 0xd, 0x0, 0x2, 0x8, 0x630, 0x1, 0xa6, 0xa, 0x8, 0x10e66c09, 0x8, 0x6, 0x1, 0x8001, 0x8, 0x2, 0x800, 0x2, 0x5, 0x101, 0x1, 0x8, 0x3bde, 0x18, 0x2, 0x2, 0x6, 0x1, 0x8, 0x5, 0x2, 0xe0, 0x0, 0x2, 0xfffff3de, 0x1b, 0x5, 0xa, 0x5, 0x7, 0x7, 0x6, 0x6, 0x9, 0x7, 0x7, 0xf7, 0xb, 0xff, 0x2, 0x5, 0x8, 0x3, 0x8, 0x5, 0x6, 0x1, 0x1, 0x1525, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x9, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x4, 0x82, 0x52e, 0x1, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x6, 0x4, 0x80000000, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xc98}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250c"], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x20000) 0s ago: executing program 3 (id=4): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000900)=""/172, 0xac}, {&(0x7f00000009c0)=""/160, 0xa0}], 0x8, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x582, 0x6) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0', [{0x20, 'eX\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xb0G\\Hx\x12G'}, {0x20, ':@J\xb2,D\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xfb\xea\x16\x01^z\xb0\xb04z\xafE\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9cH\x9az\xbfE=)|\x18f6\xd8G\x99o\x02\x12\xd4\x9d\xfd\xb2\xe8\x8f\x06\x00\xc3N\xe3\xb3\xc8\r\xdb\x86\xdd\xd8J\x12&7\r\xf1\xc7a\f\x18n~\xc5\xd7\xc3\x06\x1d\xd5\xa8\x92F\x18\x9a\xb7]\x16\xa2j\xd8#92\x00\x00\x00\x00E\xc9r\x97\x9a\xd9\xd5\xb0\x85\xeb\x81\xe7\xcc\xe1\x01\xc0\x18\xb7\xff\x1f\xba\xb3\x86E39\x9e\x12G\x93\xda\xf2\xa9\xfd\xc7\xc9!A3&\xbf\xe6)\x06\x9e\xe8\x15\x19\x94CF\x16\xdb\xbc\xfe)\x85\xa6\xec\xea\xd7\xa8\xca,\x8a\xe7\x04\xf4\xa3\xfc@j7\xc1f\x1c\v?\x116viRwi\x06\x11\xc0\xb9\xa6\xe8\a\x04X\xfd\x9d\x9d\xf9\xc8|\x9f\xe8|\xd3\xb5D\xa3\x97M|):\xfc>\x93#\xb3/\x98(\xea\x1c\xd3\x1f\x8a5\xe5D\xafGX\x92\t^\xf7I\x9b\x9d\x02\x00\x00\x00\x00'}, {0x20, 'trusted./verlay.y\xc6per~\v\x17\xd7\x01d.O\xecTU\xa5\x011\xae\xcc\xf7{i8\xbe\x8b\x04\xb8mG\xea\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfeEO\xf2\x82f\xf1<\xe8*\xe8\x01/\xec\xd5\x91\xf3\xfb(|\x9f[\x04\xd3#@\x1e\x7f\xa6(\x9c\x17X\xc4\xc6@\"9\xd7\xe6\x91\xba\x03\xcd\xbaW9#\x15x\xf2\xf2>\x1fR\xcda\x8f<\xa8\xeaL\xc7\x18\xec\x0e\x8f\xd9\xdax\xf8\x81bm-b\x87D?\xa5\tQ\xdc\t\x8fT\xf0\xca\x0e2\xdf'}], 0xa, "98ff288c2c364aaca89c267b553864080076b2b41b014891ae518e3479ba3ddb672050faced143a22399a575e2f50ff2388b285e3779368d88a0be938144c48e94c179d2c68e1f208966cf2b40f3641701fb414cd8987df26f6c142ec80a0b05db2f33161bf65ee26eb4"}, 0x26f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f00", 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0x18}) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x2000002, 0xc009053, r8, 0x37930000) write$qrtrtun(r1, &(0x7f00000016c0)="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", 0x1d4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) kernel console output (not intermixed with test programs): [ 21.668948][ T29] audit: type=1400 audit(1740434612.044:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 26.403359][ T29] audit: type=1400 audit(1740434616.784:82): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.404373][ T3285] cgroup: Unknown subsys name 'net' [ 26.426345][ T29] audit: type=1400 audit(1740434616.784:83): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.453766][ T29] audit: type=1400 audit(1740434616.814:84): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.590617][ T3285] cgroup: Unknown subsys name 'cpuset' [ 26.596867][ T3285] cgroup: Unknown subsys name 'rlimit' [ 26.727663][ T29] audit: type=1400 audit(1740434617.104:85): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.754018][ T29] audit: type=1400 audit(1740434617.104:86): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.775252][ T29] audit: type=1400 audit(1740434617.104:87): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.796122][ T29] audit: type=1400 audit(1740434617.104:88): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.816503][ T29] audit: type=1400 audit(1740434617.104:89): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.841699][ T29] audit: type=1400 audit(1740434617.104:90): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.870868][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.879914][ T29] audit: type=1400 audit(1740434617.254:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.901474][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.001903][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.039287][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 29.075064][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.116406][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.123562][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.130844][ T3308] bridge_slave_0: entered allmulticast mode [ 29.137143][ T3308] bridge_slave_0: entered promiscuous mode [ 29.146087][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.153295][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.160541][ T3308] bridge_slave_1: entered allmulticast mode [ 29.166970][ T3308] bridge_slave_1: entered promiscuous mode [ 29.196494][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.203739][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.211074][ T3298] bridge_slave_0: entered allmulticast mode [ 29.217448][ T3298] bridge_slave_0: entered promiscuous mode [ 29.225678][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.232819][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.240056][ T3298] bridge_slave_1: entered allmulticast mode [ 29.246571][ T3298] bridge_slave_1: entered promiscuous mode [ 29.258439][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.273533][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.294530][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.315216][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.341547][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.365564][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.372771][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.380038][ T3304] bridge_slave_0: entered allmulticast mode [ 29.386652][ T3304] bridge_slave_0: entered promiscuous mode [ 29.394051][ T3308] team0: Port device team_slave_0 added [ 29.400822][ T3308] team0: Port device team_slave_1 added [ 29.419642][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.426825][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.434062][ T3304] bridge_slave_1: entered allmulticast mode [ 29.440504][ T3304] bridge_slave_1: entered promiscuous mode [ 29.446638][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.460709][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.468058][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.494036][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.505765][ T3298] team0: Port device team_slave_0 added [ 29.531923][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.538921][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.565040][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.576668][ T3298] team0: Port device team_slave_1 added [ 29.600208][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.623942][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.640965][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.647999][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.674763][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.690455][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.697531][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.704728][ T3300] bridge_slave_0: entered allmulticast mode [ 29.711287][ T3300] bridge_slave_0: entered promiscuous mode [ 29.718520][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.725706][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.732946][ T3300] bridge_slave_1: entered allmulticast mode [ 29.739444][ T3300] bridge_slave_1: entered promiscuous mode [ 29.755895][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.762896][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.789107][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.815416][ T3304] team0: Port device team_slave_0 added [ 29.822216][ T3304] team0: Port device team_slave_1 added [ 29.851435][ T3308] hsr_slave_0: entered promiscuous mode [ 29.857516][ T3308] hsr_slave_1: entered promiscuous mode [ 29.864921][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.879530][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.886731][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.913847][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.925040][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.932257][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.939514][ T3307] bridge_slave_0: entered allmulticast mode [ 29.946095][ T3307] bridge_slave_0: entered promiscuous mode [ 29.953714][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.963239][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.970529][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.977826][ T3307] bridge_slave_1: entered allmulticast mode [ 29.985332][ T3307] bridge_slave_1: entered promiscuous mode [ 29.997414][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.004563][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.031274][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.071160][ T3298] hsr_slave_0: entered promiscuous mode [ 30.077429][ T3298] hsr_slave_1: entered promiscuous mode [ 30.084585][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.092400][ T3298] Cannot create hsr debugfs directory [ 30.118118][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.128674][ T3300] team0: Port device team_slave_0 added [ 30.135911][ T3300] team0: Port device team_slave_1 added [ 30.145851][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.200939][ T3304] hsr_slave_0: entered promiscuous mode [ 30.207110][ T3304] hsr_slave_1: entered promiscuous mode [ 30.213122][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.220718][ T3304] Cannot create hsr debugfs directory [ 30.227264][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.234527][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.261046][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.279454][ T3307] team0: Port device team_slave_0 added [ 30.287030][ T3307] team0: Port device team_slave_1 added [ 30.297715][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.304864][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.332169][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.361783][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.369948][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.397829][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.429461][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.436591][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.464132][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.498133][ T3300] hsr_slave_0: entered promiscuous mode [ 30.504153][ T3300] hsr_slave_1: entered promiscuous mode [ 30.510610][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.518285][ T3300] Cannot create hsr debugfs directory [ 30.576840][ T3307] hsr_slave_0: entered promiscuous mode [ 30.584386][ T3307] hsr_slave_1: entered promiscuous mode [ 30.590905][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.598947][ T3307] Cannot create hsr debugfs directory [ 30.638893][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.667114][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.687168][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.709219][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.722751][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.734658][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.746296][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.758905][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.808390][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.818101][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.827453][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.839014][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.911230][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.921007][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.931151][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.950013][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.965740][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.975892][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.988142][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.996765][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.011137][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.018558][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.043399][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.057058][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.074394][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.082407][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.093480][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.103973][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.112689][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.120435][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.138791][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.146418][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.155263][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.162592][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.181594][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.188927][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.198988][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.208608][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.249963][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.335987][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.348586][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.359025][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.374000][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.393948][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.405396][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.418054][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.428832][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.436539][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.446484][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.454267][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.464414][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.471668][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.497915][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.507069][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.581954][ T3304] veth0_vlan: entered promiscuous mode [ 31.592608][ T3304] veth1_vlan: entered promiscuous mode [ 31.607649][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.623882][ T3298] veth0_vlan: entered promiscuous mode [ 31.655957][ T3298] veth1_vlan: entered promiscuous mode [ 31.667823][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.676180][ T3308] veth0_vlan: entered promiscuous mode [ 31.687800][ T3304] veth0_macvtap: entered promiscuous mode [ 31.706984][ T3298] veth0_macvtap: entered promiscuous mode [ 31.716124][ T3308] veth1_vlan: entered promiscuous mode [ 31.727187][ T3304] veth1_macvtap: entered promiscuous mode [ 31.735282][ T3298] veth1_macvtap: entered promiscuous mode [ 31.748954][ T3308] veth0_macvtap: entered promiscuous mode [ 31.759544][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.781333][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.788995][ T3308] veth1_macvtap: entered promiscuous mode [ 31.797930][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.811926][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.822892][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.834439][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.843832][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.854812][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.865671][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.875180][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884264][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.893103][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.902095][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.922036][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.931234][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.940283][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950427][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.966582][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.977590][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.987893][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.998639][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.010047][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.028393][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.039278][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.049502][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.060351][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.075093][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.091357][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.091372][ T29] audit: type=1400 audit(1740434622.474:110): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.3c2vsa/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.127897][ T29] audit: type=1400 audit(1740434622.504:111): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.132111][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.151598][ T29] audit: type=1400 audit(1740434622.504:112): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.3c2vsa/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.160420][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.186447][ T29] audit: type=1400 audit(1740434622.504:113): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.195155][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.217801][ T29] audit: type=1400 audit(1740434622.504:114): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.3c2vsa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.227461][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.264953][ T29] audit: type=1400 audit(1740434622.504:115): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.3c2vsa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.292765][ T29] audit: type=1400 audit(1740434622.504:116): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.324058][ T3307] veth0_vlan: entered promiscuous mode [ 32.331285][ T29] audit: type=1400 audit(1740434622.694:117): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.354889][ T29] audit: type=1400 audit(1740434622.694:118): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.385168][ T3307] veth1_vlan: entered promiscuous mode [ 32.392939][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.428694][ T3307] veth0_macvtap: entered promiscuous mode [ 32.437962][ T3300] veth0_vlan: entered promiscuous mode [ 32.447015][ T3300] veth1_vlan: entered promiscuous mode [ 32.452807][ T29] audit: type=1400 audit(1740434622.814:119): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.460555][ T3307] veth1_macvtap: entered promiscuous mode [ 32.516433][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.526997][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.537049][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.547812][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.558140][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.558799][ T3437] loop1: detected capacity change from 0 to 2048 [ 32.569662][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.587134][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.601921][ T3300] veth0_macvtap: entered promiscuous mode [ 32.610345][ T3437] loop1: p3 p4 < > [ 32.639693][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.650505][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.660723][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.671508][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.681673][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.692856][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.708932][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.717237][ T3307] ================================================================== [ 32.725709][ T3307] BUG: KCSAN: data-race in batadv_iv_ogm_schedule / batadv_update_min_mtu [ 32.734068][ T3444] IPv4: Oversized IP packet from 127.202.26.0 [ 32.734605][ T3307] [ 32.734614][ T3307] write to 0xffff888115bf8410 of 1 bytes by task 11 on cpu 1: [ 32.751681][ T3307] batadv_iv_ogm_schedule+0xaa/0x790 [ 32.757098][ T3307] batadv_iv_send_outstanding_bat_ogm_packet+0x44c/0x4b0 [ 32.764534][ T3307] process_scheduled_works+0x4db/0xa20 [ 32.772001][ T3307] worker_thread+0x51d/0x6f0 [ 32.777926][ T3307] kthread+0x4ae/0x520 [ 32.782916][ T3307] ret_from_fork+0x4b/0x60 [ 32.788339][ T3307] ret_from_fork_asm+0x1a/0x30 [ 32.793898][ T3307] [ 32.796602][ T3307] read to 0xffff888115bf8410 of 1 bytes by task 3307 on cpu 0: [ 32.805256][ T3307] batadv_update_min_mtu+0x4b/0x180 [ 32.811116][ T3307] batadv_hardif_activate_interface+0x1f7/0x330 [ 32.817748][ T3307] batadv_hard_if_event+0x483/0xfb0 [ 32.822988][ T3307] raw_notifier_call_chain+0x6f/0x1d0 [ 32.828651][ T3307] call_netdevice_notifiers_info+0xae/0x100 [ 32.835770][ T3307] __dev_notify_flags+0xff/0x1a0 [ 32.841372][ T3307] dev_change_flags+0xab/0xd0 [ 32.846185][ T3307] do_setlink+0x7a1/0x2370 [ 32.850804][ T3307] rtnl_newlink+0xde9/0x1250 [ 32.855414][ T3307] rtnetlink_rcv_msg+0x651/0x710 [ 32.860544][ T3307] netlink_rcv_skb+0x12c/0x230 [ 32.865594][ T3307] rtnetlink_rcv+0x1c/0x30 [ 32.870156][ T3307] netlink_unicast+0x599/0x670 [ 32.875908][ T3307] netlink_sendmsg+0x5cc/0x6e0 [ 32.880969][ T3307] __sock_sendmsg+0x140/0x180 [ 32.886376][ T3307] __sys_sendto+0x1a8/0x230 [ 32.891733][ T3307] __x64_sys_sendto+0x78/0x90 [ 32.896442][ T3307] x64_sys_call+0x29fa/0x2dc0 [ 32.901317][ T3307] do_syscall_64+0xc9/0x1c0 [ 32.906123][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.912333][ T3307] [ 32.914676][ T3307] value changed: 0x04 -> 0x03 [ 32.920144][ T3307] [ 32.922516][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 32.928950][ T3307] CPU: 0 UID: 0 PID: 3307 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller #0 [ 32.938538][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 32.949939][ T3307] ================================================================== [ 32.960655][ T3300] veth1_macvtap: entered promiscuous mode [ 32.971378][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.982289][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.992473][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.003152][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.013676][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.020462][ T3449] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.024662][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.043723][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.054440][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.066209][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.078980][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.087860][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096765][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.105855][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.117917][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.129784][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.139841][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.150727][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.161258][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.173526][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.184906][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.197179][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.209631][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.221366][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.230963][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.240514][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249587][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0