last executing test programs: 992.146995ms ago: executing program 1 (id=9): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) shutdown(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 887.053647ms ago: executing program 1 (id=12): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) 842.476097ms ago: executing program 1 (id=14): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) 762.022549ms ago: executing program 1 (id=17): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 761.602449ms ago: executing program 4 (id=18): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5f}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 528.818272ms ago: executing program 4 (id=22): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40a440) 404.959094ms ago: executing program 4 (id=25): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x1c5ed000) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) 368.476824ms ago: executing program 2 (id=28): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x7) 355.647275ms ago: executing program 0 (id=29): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) 349.001055ms ago: executing program 1 (id=30): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f0000000240)='.\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 335.683525ms ago: executing program 3 (id=31): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 333.668885ms ago: executing program 4 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 321.740055ms ago: executing program 2 (id=33): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 312.092585ms ago: executing program 0 (id=34): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x3, 0xfffffffe, @loopback, 0x3}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 292.999676ms ago: executing program 3 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000002c0)='./mnt/file0\x00', 0xffffffffffffffff, 0x0) 277.454436ms ago: executing program 2 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 276.233376ms ago: executing program 1 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 252.811086ms ago: executing program 0 (id=38): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x34, r1, 0x211, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200000000000000}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 251.395906ms ago: executing program 4 (id=39): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r0) 209.254627ms ago: executing program 0 (id=40): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) fadvise64(0xffffffffffffffff, 0x10, 0x2, 0x0) 193.345687ms ago: executing program 3 (id=41): unshare(0x22020600) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000140)=0x3, 0x4) getsockopt$MRT6(r0, 0x29, 0xcf, 0xffffffffffffffff, &(0x7f00000000c0)) 184.720007ms ago: executing program 2 (id=42): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 170.076428ms ago: executing program 3 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 168.205208ms ago: executing program 0 (id=44): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r1}) 141.293118ms ago: executing program 3 (id=45): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="10008100c2", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) 110.614639ms ago: executing program 2 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 105.020088ms ago: executing program 0 (id=47): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) 60.539299ms ago: executing program 3 (id=48): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f00009c1000/0x3000)=nil, 0x3000) 33.86338ms ago: executing program 4 (id=49): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='6', 0x1}], 0x1) 0s ago: executing program 2 (id=50): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000"}, 0x45) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 32.977725][ T29] audit: type=1400 audit(1750522089.193:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.978841][ T3296] cgroup: Unknown subsys name 'net' [ 33.000527][ T29] audit: type=1400 audit(1750522089.193:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.027896][ T29] audit: type=1400 audit(1750522089.223:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.161191][ T3296] cgroup: Unknown subsys name 'cpuset' [ 33.167355][ T3296] cgroup: Unknown subsys name 'rlimit' [ 33.298821][ T29] audit: type=1400 audit(1750522089.513:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.323162][ T29] audit: type=1400 audit(1750522089.513:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.343693][ T29] audit: type=1400 audit(1750522089.523:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.364117][ T29] audit: type=1400 audit(1750522089.523:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.372623][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.384525][ T29] audit: type=1400 audit(1750522089.523:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.417915][ T29] audit: type=1400 audit(1750522089.523:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.441485][ T29] audit: type=1400 audit(1750522089.613:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.494641][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.609968][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 34.618689][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 34.706517][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 34.727904][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.735151][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.742586][ T3306] bridge_slave_0: entered allmulticast mode [ 34.748942][ T3306] bridge_slave_0: entered promiscuous mode [ 34.771931][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.779044][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.786435][ T3306] bridge_slave_1: entered allmulticast mode [ 34.792967][ T3306] bridge_slave_1: entered promiscuous mode [ 34.799234][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 34.808192][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.815279][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.822495][ T3308] bridge_slave_0: entered allmulticast mode [ 34.828975][ T3308] bridge_slave_0: entered promiscuous mode [ 34.837579][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.844783][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.851987][ T3308] bridge_slave_1: entered allmulticast mode [ 34.858388][ T3308] bridge_slave_1: entered promiscuous mode [ 34.885250][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.905031][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.917853][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.937299][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.955148][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.962272][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.969411][ T3313] bridge_slave_0: entered allmulticast mode [ 34.975903][ T3313] bridge_slave_0: entered promiscuous mode [ 34.983287][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.992478][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.999658][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.006856][ T3313] bridge_slave_1: entered allmulticast mode [ 35.013215][ T3313] bridge_slave_1: entered promiscuous mode [ 35.053996][ T3308] team0: Port device team_slave_0 added [ 35.069009][ T3306] team0: Port device team_slave_0 added [ 35.078274][ T3308] team0: Port device team_slave_1 added [ 35.092369][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.102285][ T3306] team0: Port device team_slave_1 added [ 35.123770][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.142997][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.150067][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.157288][ T3312] bridge_slave_0: entered allmulticast mode [ 35.163748][ T3312] bridge_slave_0: entered promiscuous mode [ 35.170494][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.177445][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.203619][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.228830][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.235941][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.243148][ T3312] bridge_slave_1: entered allmulticast mode [ 35.249424][ T3312] bridge_slave_1: entered promiscuous mode [ 35.255857][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.262984][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.288900][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.302236][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.309348][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.316533][ T3317] bridge_slave_0: entered allmulticast mode [ 35.323072][ T3317] bridge_slave_0: entered promiscuous mode [ 35.334668][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.341686][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.367712][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.389364][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.396498][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.403844][ T3317] bridge_slave_1: entered allmulticast mode [ 35.410423][ T3317] bridge_slave_1: entered promiscuous mode [ 35.417481][ T3313] team0: Port device team_slave_0 added [ 35.424368][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.431365][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.457350][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.469245][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.480026][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.499191][ T3313] team0: Port device team_slave_1 added [ 35.532515][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.543256][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.557285][ T3312] team0: Port device team_slave_0 added [ 35.563422][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.570443][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.596387][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.619271][ T3308] hsr_slave_0: entered promiscuous mode [ 35.625336][ T3308] hsr_slave_1: entered promiscuous mode [ 35.632163][ T3312] team0: Port device team_slave_1 added [ 35.638260][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.645244][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.671239][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.687285][ T3317] team0: Port device team_slave_0 added [ 35.718520][ T3317] team0: Port device team_slave_1 added [ 35.740918][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.747970][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.774004][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.787072][ T3306] hsr_slave_0: entered promiscuous mode [ 35.793314][ T3306] hsr_slave_1: entered promiscuous mode [ 35.799249][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.806847][ T3306] Cannot create hsr debugfs directory [ 35.827701][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.834812][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.860760][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.880026][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.887077][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.913135][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.926085][ T3313] hsr_slave_0: entered promiscuous mode [ 35.932394][ T3313] hsr_slave_1: entered promiscuous mode [ 35.938324][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.945951][ T3313] Cannot create hsr debugfs directory [ 35.960482][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.967448][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.993506][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.031355][ T3312] hsr_slave_0: entered promiscuous mode [ 36.037269][ T3312] hsr_slave_1: entered promiscuous mode [ 36.043153][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.050723][ T3312] Cannot create hsr debugfs directory [ 36.095348][ T3317] hsr_slave_0: entered promiscuous mode [ 36.101591][ T3317] hsr_slave_1: entered promiscuous mode [ 36.107479][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.115169][ T3317] Cannot create hsr debugfs directory [ 36.248584][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.264867][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.278029][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.289517][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.307128][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.317066][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.326205][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.334889][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.372275][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.381931][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.390913][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.400096][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.442455][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.451178][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.463131][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.472283][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.491381][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.521404][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.531927][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.547815][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.556705][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.565722][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.574642][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.586541][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.593682][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.611388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.618465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.629025][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.649261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.656500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.678092][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.685258][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.699451][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.713585][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.728487][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.745973][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.763635][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.774169][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.787507][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.794768][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.804700][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.811812][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.820672][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.827721][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.837268][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.844370][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.937202][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.962425][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.978115][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.001210][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.008505][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.021647][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.033773][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.055250][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.062404][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.108592][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.118393][ T3308] veth0_vlan: entered promiscuous mode [ 37.144411][ T3308] veth1_vlan: entered promiscuous mode [ 37.196446][ T3308] veth0_macvtap: entered promiscuous mode [ 37.219045][ T3308] veth1_macvtap: entered promiscuous mode [ 37.251146][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.271539][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.292647][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.301486][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.310248][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.319084][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.334843][ T3312] veth0_vlan: entered promiscuous mode [ 37.344035][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.371110][ T3312] veth1_vlan: entered promiscuous mode [ 37.381581][ T3306] veth0_vlan: entered promiscuous mode [ 37.389610][ T3306] veth1_vlan: entered promiscuous mode [ 37.423561][ T3313] veth0_vlan: entered promiscuous mode [ 37.433205][ T3312] veth0_macvtap: entered promiscuous mode [ 37.442763][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.449685][ T3312] veth1_macvtap: entered promiscuous mode [ 37.467748][ T3313] veth1_vlan: entered promiscuous mode [ 37.477862][ T3306] veth0_macvtap: entered promiscuous mode [ 37.485787][ T3306] veth1_macvtap: entered promiscuous mode [ 37.514342][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.524052][ T3313] veth0_macvtap: entered promiscuous mode [ 37.542300][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.552021][ T3313] veth1_macvtap: entered promiscuous mode [ 37.562453][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.571704][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.581723][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.590594][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.599350][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.608132][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.625258][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.634116][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.642844][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.651655][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.667211][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.675932][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.701863][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.710815][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.719527][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.728290][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.744351][ T3317] veth0_vlan: entered promiscuous mode [ 37.753084][ T3481] xt_hashlimit: max too large, truncated to 1048576 [ 37.784660][ T3317] veth1_vlan: entered promiscuous mode [ 37.865477][ T3494] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 37.869425][ T3317] veth0_macvtap: entered promiscuous mode [ 37.912100][ T3317] veth1_macvtap: entered promiscuous mode [ 37.948010][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.979489][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.993958][ T3508] mmap: syz.4.15 (3508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.999233][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.014675][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.023487][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.032297][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.057843][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 38.057861][ T29] audit: type=1400 audit(1750522094.273:112): avc: denied { create } for pid=3512 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.066556][ C0] hrtimer: interrupt took 86217 ns [ 38.101199][ T29] audit: type=1400 audit(1750522094.293:113): avc: denied { write } for pid=3513 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.120482][ T29] audit: type=1400 audit(1750522094.293:114): avc: denied { connect } for pid=3513 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.139839][ T29] audit: type=1400 audit(1750522094.313:115): avc: denied { name_connect } for pid=3513 comm="syz.1.17" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.211444][ T29] audit: type=1400 audit(1750522094.423:116): avc: denied { setopt } for pid=3512 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.238389][ T29] audit: type=1400 audit(1750522094.453:117): avc: denied { create } for pid=3517 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.257692][ T29] audit: type=1400 audit(1750522094.453:118): avc: denied { write } for pid=3517 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.284011][ T29] audit: type=1400 audit(1750522094.453:119): avc: denied { create } for pid=3524 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.303423][ T3529] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 38.309283][ T29] audit: type=1400 audit(1750522094.503:120): avc: denied { ioctl } for pid=3524 comm="syz.2.3" path="socket:[4668]" dev="sockfs" ino=4668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.333862][ T29] audit: type=1400 audit(1750522094.503:121): avc: denied { bind } for pid=3524 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.382210][ T3527] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 38.431909][ T3532] Process accounting resumed [ 38.485802][ T3548] netlink: 'syz.4.32': attribute type 10 has an invalid length. [ 38.515557][ T3548] team0: Cannot enslave team device to itself [ 38.546634][ T3559] loop1: detected capacity change from 0 to 512 [ 38.560783][ T3559] EXT4-fs: Ignoring removed nobh option [ 38.582139][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.652704][ T3559] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.37: corrupted inode contents [ 38.669202][ T3559] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.37: mark_inode_dirty error [ 38.682829][ T3559] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.37: corrupted inode contents [ 38.695496][ T3559] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.37: mark_inode_dirty error [ 38.708556][ T3559] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.37: Failed to acquire dquot type 0 [ 38.720634][ T3559] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.37: corrupted inode contents [ 38.736270][ T3559] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.37: mark_inode_dirty error [ 38.766105][ T3559] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.37: corrupted inode contents [ 38.779270][ T3559] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.37: mark_inode_dirty error [ 38.792817][ T3559] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.37: corrupted inode contents [ 38.805180][ T3559] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 38.816681][ T3584] ================================================================== [ 38.819759][ T3559] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.37: corrupted inode contents [ 38.824780][ T3584] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 38.836634][ T3559] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.37: mark_inode_dirty error [ 38.842811][ T3584] [ 38.842817][ T3584] write to 0xffffc9000ec27bc0 of 4 bytes by interrupt on cpu 0: [ 38.842837][ T3584] pollwake+0xb6/0x100 [ 38.853887][ T3559] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 38.855997][ T3584] __wake_up+0x63/0xb0 [ 38.880657][ T3584] bpf_ringbuf_notify+0x22/0x30 [ 38.885551][ T3584] irq_work_run+0xe2/0x2d0 [ 38.889983][ T3584] __sysvec_irq_work+0x22/0x170 [ 38.894841][ T3584] sysvec_irq_work+0x66/0x80 [ 38.899526][ T3584] asm_sysvec_irq_work+0x1a/0x20 [ 38.904470][ T3584] native_apic_msr_write+0x3d/0x60 [ 38.909602][ T3584] x2apic_send_IPI_self+0x10/0x20 [ 38.914659][ T3584] arch_irq_work_raise+0x46/0x50 [ 38.919616][ T3584] __irq_work_queue_local+0x10f/0x2c0 [ 38.925025][ T3584] irq_work_queue+0x70/0x100 [ 38.929632][ T3584] bpf_ringbuf_discard+0xd3/0xf0 [ 38.934610][ T3584] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 38.940089][ T3584] bpf_trace_run3+0x10f/0x1d0 [ 38.944782][ T3584] __traceiter_kmem_cache_free+0x38/0x60 [ 38.950425][ T3584] kmem_cache_free+0x257/0x300 [ 38.955251][ T3584] kernfs_free_rcu+0x97/0xb0 [ 38.959896][ T3584] rcu_core+0x5a5/0xc00 [ 38.964096][ T3584] rcu_core_si+0xd/0x20 [ 38.968259][ T3584] handle_softirqs+0xba/0x290 [ 38.972966][ T3584] run_ksoftirqd+0x1c/0x30 [ 38.977395][ T3584] smpboot_thread_fn+0x32b/0x530 [ 38.982361][ T3584] kthread+0x486/0x510 [ 38.986526][ T3584] ret_from_fork+0xdd/0x150 [ 38.991038][ T3584] ret_from_fork_asm+0x1a/0x30 [ 38.995819][ T3584] [ 38.998163][ T3584] read to 0xffffc9000ec27bc0 of 4 bytes by task 3584 on cpu 1: [ 39.005734][ T3584] do_sys_poll+0x99c/0xbd0 [ 39.010176][ T3584] __se_sys_ppoll+0x1b9/0x200 [ 39.014885][ T3584] __x64_sys_ppoll+0x67/0x80 [ 39.019497][ T3584] x64_sys_call+0x2de5/0x2fb0 [ 39.024196][ T3584] do_syscall_64+0xd2/0x200 [ 39.028737][ T3584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.034662][ T3584] [ 39.036997][ T3584] value changed: 0x00000000 -> 0x00000001 [ 39.042727][ T3584] [ 39.045057][ T3584] Reported by Kernel Concurrency Sanitizer on: [ 39.051253][ T3584] CPU: 1 UID: 0 PID: 3584 Comm: syz.0.47 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 39.063516][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.073591][ T3584] ================================================================== [ 39.119076][ T3589] SELinux: failed to load policy [ 39.134951][ T3559] EXT4-fs (loop1): 1 truncate cleaned up [ 39.142146][ T3559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.155263][ T3559] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.206085][ T3559] syz.1.37 (3559) used greatest stack depth: 9768 bytes left [ 39.214572][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.