last executing test programs: 4.794949934s ago: executing program 4 (id=286): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680), 0x0, 0x4044004) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) 3.017075293s ago: executing program 2 (id=315): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01010000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 2.929002545s ago: executing program 2 (id=316): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) 2.780445619s ago: executing program 0 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0800040064010104080008000001000008"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 2.766951449s ago: executing program 0 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 2.649810542s ago: executing program 1 (id=326): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7a420d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e86fd16c00843fa07cd9170919f4d07a12ad38db3f9effcfe1d631a48150e33ce07b3516fefab9587043a908dac8b0ffe361ec8e0fe7531f6d6d858cdabf7600f3a2bd90bce672cba7d366ae4ac6e33813f18340349422230cfe1d8c5757eb139321d44b57159089c68c13d7806cdbebeb42953f6f1670a313278a13076defab61b2016cf636ed37c7e7e1c49a4fb1d6a3d249e189087b37e724b6b24824bce4f77ab6f8a8d2f571d23c5120d75440e8eeda120467b5046b316e39aea9b6c7fa65eb4db56a3fed78c25fcde3afa956dee186fcad0b83f3d50a153f269113f5d9f1ccdff5ba86390c95b3a4ac782cd1121253f728b9b28a3cf59ebd82b0439d2f439e9cd00ca11a3f73515b6256b0faa56063ab761d5860a002c27fede7ce87b6336a4a146f2286ee32bb12e5a8bef04ba8cdb901c602a80eec7e74c947f88f6939ad240db8bc4baf655b941d1fc166fcbd2a64b5691e9145847ebc3ff5f8c07b8265c00176fa4617b6b7249aa801a090d4c65e36cfbbbca28913a892c3a7dd856fdf1f9a7279acfeee9fe51d14f87e4928f07f80145f54afb9a94fce7e76d38b64858327883b8f7141ccac8de649b7eb216d1b6c63f6d4d56dd9f11a2b36a6b3913917c378931e1ba3ec16aec67ef2bab2f1336a6990f7a78ab8acbc81d4ef49dc9bf02e6bae05118c706aeafa332e785ab59140d41ec0d00261ef9dd1735e19954cf1e8042b84185fa8bea4878e22ae53841b9c9752c950e5b21c7e7212b0297f22675cf8baae246e3c46a33e7228633954253add2592dbb7335b24569c834977a53ef23a84f7819deabd2c499422f23e7b682dc7f81b5d47b2ed330b83bb4f6c8f976539a8bf0d1f9b88d534c672d329ba41009f75c928", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 2.627281422s ago: executing program 1 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x84) 2.566950453s ago: executing program 3 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548", 0xf}], 0x2) 2.566593893s ago: executing program 1 (id=331): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) epoll_create(0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) eventfd(0x1) socket(0x10, 0x3, 0x0) io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x0, 0x3, 0x4}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.566332703s ago: executing program 1 (id=332): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.363367438s ago: executing program 3 (id=333): pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0208000001000000000000"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2.29307391s ago: executing program 3 (id=334): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x60, 0x30, 0x58f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.25178044s ago: executing program 3 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@remote, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x4d5, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.773832051s ago: executing program 0 (id=336): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0x7, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0x3, 0x6, @remote}, 0x14) close(0x4) 1.626572504s ago: executing program 1 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.605150925s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x44}}, 0x0) 1.575250785s ago: executing program 0 (id=339): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 1.523296517s ago: executing program 4 (id=340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be0", 0x86}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c", 0x3f}], 0x2}}, {{0x0, 0x0, &(0x7f0000002e40)=[{0x0}, {&(0x7f0000001e00)="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", 0x375}], 0x2, &(0x7f0000002e80)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.454400718s ago: executing program 2 (id=341): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000005b42"], 0x38}}, 0x0) 1.289457142s ago: executing program 4 (id=342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x84) 987.449528ms ago: executing program 3 (id=343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 446.51704ms ago: executing program 3 (id=344): pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02080000010000000000000100000000"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 252.420184ms ago: executing program 0 (id=345): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) 251.661244ms ago: executing program 1 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 251.515774ms ago: executing program 4 (id=347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) 181.623516ms ago: executing program 4 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="090000001700000008000000040000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r2}, 0x38) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 127.335307ms ago: executing program 0 (id=349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) 56.739299ms ago: executing program 2 (id=350): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680), 0x0, 0x4044004) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) 32.194749ms ago: executing program 2 (id=351): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 0s ago: executing program 4 (id=352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 29.160194][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 29.160212][ T28] audit: type=1400 audit(1784681110.120:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.189806][ T28] audit: type=1400 audit(1784681110.150:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.190512][ T3283] cgroup: Unknown subsys name 'net' [ 29.217716][ T28] audit: type=1400 audit(1784681110.180:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.352393][ T3283] cgroup: Unknown subsys name 'cpuset' [ 29.358624][ T3283] cgroup: Unknown subsys name 'rlimit' [ 29.488116][ T28] audit: type=1400 audit(1784681110.450:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.513683][ T28] audit: type=1400 audit(1784681110.450:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.534365][ T28] audit: type=1400 audit(1784681110.450:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.548460][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.554955][ T28] audit: type=1400 audit(1784681110.450:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.584095][ T28] audit: type=1400 audit(1784681110.450:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.608493][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.609156][ T28] audit: type=1400 audit(1784681110.450:134): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.641049][ T28] audit: type=1400 audit(1784681110.480:135): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.515502][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.522766][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.529935][ T3302] bridge_slave_0: entered allmulticast mode [ 31.536578][ T3302] bridge_slave_0: entered promiscuous mode [ 31.543399][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.550697][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.558015][ T3302] bridge_slave_1: entered allmulticast mode [ 31.564422][ T3302] bridge_slave_1: entered promiscuous mode [ 31.617717][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.640107][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.681245][ T3302] team0: Port device team_slave_0 added [ 31.699309][ T3302] team0: Port device team_slave_1 added [ 31.722494][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.729516][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.755556][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.766262][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.773484][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.780634][ T3295] bridge_slave_0: entered allmulticast mode [ 31.787160][ T3295] bridge_slave_0: entered promiscuous mode [ 31.807097][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.814105][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.840286][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.851507][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.858641][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.865875][ T3295] bridge_slave_1: entered allmulticast mode [ 31.872470][ T3295] bridge_slave_1: entered promiscuous mode [ 31.927002][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.934274][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.941387][ T3296] bridge_slave_0: entered allmulticast mode [ 31.947808][ T3296] bridge_slave_0: entered promiscuous mode [ 31.959999][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.981112][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.988425][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.995602][ T3296] bridge_slave_1: entered allmulticast mode [ 32.002205][ T3296] bridge_slave_1: entered promiscuous mode [ 32.014497][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.025684][ T3302] hsr_slave_0: entered promiscuous mode [ 32.031568][ T3302] hsr_slave_1: entered promiscuous mode [ 32.045710][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.053013][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.060114][ T3300] bridge_slave_0: entered allmulticast mode [ 32.066758][ T3300] bridge_slave_0: entered promiscuous mode [ 32.091125][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.098309][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.105463][ T3300] bridge_slave_1: entered allmulticast mode [ 32.111878][ T3300] bridge_slave_1: entered promiscuous mode [ 32.123161][ T3295] team0: Port device team_slave_0 added [ 32.128820][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.135930][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.143090][ T3301] bridge_slave_0: entered allmulticast mode [ 32.149550][ T3301] bridge_slave_0: entered promiscuous mode [ 32.157262][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.176809][ T3295] team0: Port device team_slave_1 added [ 32.183751][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.192962][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.200071][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.207209][ T3301] bridge_slave_1: entered allmulticast mode [ 32.213525][ T3301] bridge_slave_1: entered promiscuous mode [ 32.220688][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.238906][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.275964][ T3296] team0: Port device team_slave_0 added [ 32.281976][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.288945][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.314890][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.331303][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.343649][ T3296] team0: Port device team_slave_1 added [ 32.349512][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.356665][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.382762][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.394244][ T3300] team0: Port device team_slave_0 added [ 32.400897][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.425127][ T3300] team0: Port device team_slave_1 added [ 32.442103][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.449095][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.475053][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.490874][ T3301] team0: Port device team_slave_0 added [ 32.509953][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.516995][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.543041][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.560763][ T3301] team0: Port device team_slave_1 added [ 32.582358][ T3295] hsr_slave_0: entered promiscuous mode [ 32.588419][ T3295] hsr_slave_1: entered promiscuous mode [ 32.594437][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 32.600168][ T3295] Cannot create hsr debugfs directory [ 32.605847][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.612817][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.639045][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.668307][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.675418][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.701377][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.712335][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.719306][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.745252][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.756912][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.763930][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.789908][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.828077][ T3296] hsr_slave_0: entered promiscuous mode [ 32.834343][ T3296] hsr_slave_1: entered promiscuous mode [ 32.840188][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.845983][ T3296] Cannot create hsr debugfs directory [ 32.868629][ T3301] hsr_slave_0: entered promiscuous mode [ 32.874690][ T3301] hsr_slave_1: entered promiscuous mode [ 32.880471][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.886232][ T3301] Cannot create hsr debugfs directory [ 32.915400][ T3300] hsr_slave_0: entered promiscuous mode [ 32.921459][ T3300] hsr_slave_1: entered promiscuous mode [ 32.927359][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.933161][ T3300] Cannot create hsr debugfs directory [ 32.981007][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.989366][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.006024][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.014277][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.035362][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.043872][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.061568][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.070191][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.157050][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.165945][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.173923][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.182485][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.190055][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.198746][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.206580][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.215426][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.246576][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.254960][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.262758][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.271173][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.279710][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.288377][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.296148][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.304897][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.337637][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.346789][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.356576][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.365102][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.380336][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.389190][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.396890][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.406054][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.434654][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.443249][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.451077][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.459887][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.467838][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.476387][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.484288][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.492783][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.505021][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.527568][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.539049][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.546159][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.571926][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.579013][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.592872][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.617572][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.628014][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.647500][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.657081][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.664144][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.675774][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.682833][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.693176][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.705879][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.716276][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.742214][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.749586][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.766741][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.782463][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.789560][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.800846][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.812226][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.824656][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.831754][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.847273][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.854517][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.864049][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.871128][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.879996][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.887171][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.926369][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.937085][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.063949][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.119005][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.217863][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.232047][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.275095][ T3302] veth0_vlan: entered promiscuous mode [ 34.293650][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.311331][ T3302] veth1_vlan: entered promiscuous mode [ 34.354082][ T3302] veth0_macvtap: entered promiscuous mode [ 34.375117][ T3302] veth1_macvtap: entered promiscuous mode [ 34.397777][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.409901][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.440468][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.450029][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.467260][ T3295] veth0_vlan: entered promiscuous mode [ 34.473604][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.482589][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.495705][ T3296] veth0_vlan: entered promiscuous mode [ 34.512578][ T3295] veth1_vlan: entered promiscuous mode [ 34.519293][ T3296] veth1_vlan: entered promiscuous mode [ 34.536086][ T3301] veth0_vlan: entered promiscuous mode [ 34.544809][ T3300] veth0_vlan: entered promiscuous mode [ 34.553277][ T3301] veth1_vlan: entered promiscuous mode [ 34.566922][ T3295] veth0_macvtap: entered promiscuous mode [ 34.576594][ T3295] veth1_macvtap: entered promiscuous mode [ 34.587411][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 34.587540][ T28] audit: type=1400 audit(1784681115.550:146): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.LcuGxd/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.592901][ T3296] veth0_macvtap: entered promiscuous mode [ 34.599557][ T28] audit: type=1400 audit(1784681115.550:147): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.622408][ T3300] veth1_vlan: entered promiscuous mode [ 34.630290][ T28] audit: type=1400 audit(1784681115.560:148): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.LcuGxd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.663157][ T3296] veth1_macvtap: entered promiscuous mode [ 34.678620][ T28] audit: type=1400 audit(1784681115.560:149): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.692020][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.706698][ T28] audit: type=1400 audit(1784681115.560:150): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.LcuGxd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.741299][ T28] audit: type=1400 audit(1784681115.560:151): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.LcuGxd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.749011][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.771460][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.778966][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.792807][ T28] audit: type=1400 audit(1784681115.560:152): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.806617][ T3300] veth0_macvtap: entered promiscuous mode [ 34.819256][ T28] audit: type=1400 audit(1784681115.590:153): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.831133][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.848066][ T28] audit: type=1400 audit(1784681115.590:154): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.883382][ T3300] veth1_macvtap: entered promiscuous mode [ 34.889386][ T28] audit: type=1400 audit(1784681115.850:155): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.893184][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.925123][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.939272][ T3301] veth0_macvtap: entered promiscuous mode [ 34.948319][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.957919][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.975640][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.983655][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.001115][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.019547][ T3301] veth1_macvtap: entered promiscuous mode [ 35.026158][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.035931][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.053703][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.056300][ T3508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.067258][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.089275][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.093362][ T3508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.115877][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.130848][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.132620][ T3508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.140832][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.148765][ T3508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.166487][ T3508] Zero length message leads to an empty skb [ 35.181151][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.196583][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.228430][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.237447][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.249606][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.910994][ T3542] syz.3.16 (3542) used greatest stack depth: 11168 bytes left [ 36.084664][ T3552] ======================================================= [ 36.084664][ T3552] WARNING: The mand mount option has been deprecated and [ 36.084664][ T3552] and is ignored by this kernel. Remove the mand [ 36.084664][ T3552] option from the mount to silence this warning. [ 36.084664][ T3552] ======================================================= [ 36.258741][ T3559] process 'syz.2.23' launched './file0' with NULL argv: empty string added [ 36.268826][ T3561] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.306440][ T3559] Invalid argument reading file caps for ./file0 [ 36.548666][ T3573] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 36.994218][ T3588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 38.102371][ T409] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.121867][ T3612] Invalid argument reading file caps for ./file0 [ 38.493433][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 39.408057][ T3625] Invalid argument reading file caps for ./file0 [ 39.706046][ T3613] syz.4.43 (3613) used greatest stack depth: 10656 bytes left [ 39.793139][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 39.793158][ T28] audit: type=1400 audit(1784681120.760:208): avc: denied { bind } for pid=3638 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.861762][ T28] audit: type=1400 audit(1784681120.810:209): avc: denied { setopt } for pid=3638 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.921705][ T28] audit: type=1400 audit(1784681120.860:210): avc: denied { write } for pid=3638 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.961696][ T28] audit: type=1400 audit(1784681120.860:211): avc: denied { read } for pid=3638 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.121754][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.127909][ T3608] Bluetooth: hci0: command 0x1003 tx timeout [ 40.216103][ T28] audit: type=1400 audit(1784681121.180:212): avc: denied { read write } for pid=3650 comm="syz.1.58" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.242337][ T28] audit: type=1400 audit(1784681121.180:213): avc: denied { open } for pid=3650 comm="syz.1.58" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.395668][ T3637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 40.404840][ T3637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 40.415459][ T3642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 40.425440][ T3642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 40.465303][ T28] audit: type=1400 audit(1784681121.430:214): avc: denied { bind } for pid=3663 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.515043][ T28] audit: type=1400 audit(1784681121.480:215): avc: denied { create } for pid=3669 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.541503][ T28] audit: type=1400 audit(1784681121.480:216): avc: denied { bind } for pid=3669 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.561141][ T28] audit: type=1400 audit(1784681121.480:217): avc: denied { listen } for pid=3669 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.604447][ T3680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 40.731373][ T3698] process '/newroot/16/file0' started with executable stack [ 40.777784][ T3708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.83'. [ 40.786838][ T3708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.83'. [ 40.796478][ T3708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.83'. [ 40.805637][ T3708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.83'. [ 41.514866][ T3731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 41.927828][ T3741] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 42.977114][ T3774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.317387][ T3799] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.356313][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.365144][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.374395][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.385470][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.148524][ T3828] netlink: 'syz.3.134': attribute type 4 has an invalid length. [ 44.297664][ T3830] Invalid argument reading file caps for ./file0 [ 44.899225][ T3849] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 45.115105][ T3864] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 45.137049][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 45.137065][ T28] audit: type=1400 audit(1784681126.100:232): avc: denied { create } for pid=3865 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.210434][ T28] audit: type=1400 audit(1784681126.130:233): avc: denied { bind } for pid=3865 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.274142][ T28] audit: type=1400 audit(1784681126.130:234): avc: denied { setopt } for pid=3865 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.330853][ T28] audit: type=1400 audit(1784681126.130:235): avc: denied { write } for pid=3865 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.689488][ T3882] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 45.838466][ T3891] __nla_validate_parse: 12 callbacks suppressed [ 45.838499][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 45.914450][ T3893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.164'. [ 45.956122][ T28] audit: type=1400 audit(1784681126.920:236): avc: denied { create } for pid=3894 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.371627][ T3913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3913 comm=syz.4.175 [ 46.389524][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 46.445471][ T3920] netlink: 68 bytes leftover after parsing attributes in process `syz.4.176'. [ 46.490617][ T3925] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 46.764790][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 46.793825][ T28] audit: type=1400 audit(1784681127.760:237): avc: denied { write } for pid=3943 comm="syz.0.188" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.837008][ T3946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.189'. [ 46.887442][ T3950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.896066][ T3950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.409010][ T28] audit: type=1400 audit(1784681128.370:238): avc: denied { name_connect } for pid=3966 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 47.435746][ T28] audit: type=1400 audit(1784681128.390:239): avc: denied { write } for pid=3966 comm="syz.4.196" lport=56211 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 47.466726][ T28] audit: type=1400 audit(1784681128.390:240): avc: denied { setopt } for pid=3966 comm="syz.4.196" lport=56211 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 47.841353][ T28] audit: type=1400 audit(1784681128.800:241): avc: denied { read write } for pid=3989 comm="syz.1.205" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.331222][ T4010] netlink: 64 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.343351][ T4010] ip6erspan0: entered promiscuous mode [ 49.064362][ T4041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 49.129168][ T4045] capability: warning: `syz.2.225' uses 32-bit capabilities (legacy support in use) [ 49.476850][ T4075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 50.454022][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 50.454042][ T28] audit: type=1400 audit(1784681130.690:247): avc: denied { name_bind } for pid=4077 comm="syz.3.238" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.641739][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 51.681818][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 51.712588][ T28] audit: type=1400 audit(1784681132.680:248): avc: denied { bind } for pid=4116 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.742489][ T28] audit: type=1400 audit(1784681132.680:249): avc: denied { write } for pid=4116 comm="syz.4.251" path="socket:[6714]" dev="sockfs" ino=6714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.774457][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 51.808321][ T28] audit: type=1400 audit(1784681132.770:250): avc: denied { create } for pid=4128 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.815885][ T4130] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 51.846208][ T28] audit: type=1400 audit(1784681132.790:251): avc: denied { setopt } for pid=4128 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.396664][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 52.455720][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 52.506652][ T4162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 52.524642][ T4164] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 52.989180][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 53.196044][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 53.349570][ T28] audit: type=1400 audit(1784681134.310:252): avc: denied { bind } for pid=4203 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.367775][ T4206] netlink: 756 bytes leftover after parsing attributes in process `syz.2.285'. [ 53.372989][ T28] audit: type=1400 audit(1784681134.310:253): avc: denied { node_bind } for pid=4203 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 53.571154][ T28] audit: type=1400 audit(1784681134.530:254): avc: denied { create } for pid=4232 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.591316][ T28] audit: type=1400 audit(1784681134.530:255): avc: denied { write } for pid=4232 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.322648][ T4352] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 54.329232][ T4352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.341964][ T4352] vhci_hcd vhci_hcd.0: Device attached [ 54.354685][ T4353] vhci_hcd: cannot find the pending unlink 0 [ 54.365620][ T4353] vhci_hcd: connection closed [ 54.366836][ T4200] vhci_hcd vhci_hcd.2: stop threads [ 54.378843][ T4200] vhci_hcd vhci_hcd.2: release socket [ 54.384555][ T4200] vhci_hcd vhci_hcd.2: disconnect device [ 55.011117][ T4399] netlink: 68 bytes leftover after parsing attributes in process `syz.2.314'. [ 58.107532][ T3295] ================================================================== [ 58.115678][ T3295] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 58.123180][ T3295] [ 58.125536][ T3295] read-write to 0xffff888101dd73b8 of 8 bytes by task 4489 on cpu 1: [ 58.133639][ T3295] shmem_recalc_inode+0x3a/0x1f0 [ 58.138709][ T3295] shmem_get_folio_gfp+0x7c4/0xd90 [ 58.143862][ T3295] shmem_write_begin+0xfc/0x1f0 [ 58.148751][ T3295] generic_perform_write+0x186/0x490 [ 58.154064][ T3295] shmem_file_write_iter+0xc5/0xf0 [ 58.159227][ T3295] __kernel_write_iter+0x30f/0x590 [ 58.164374][ T3295] dump_user_range+0xa73/0xd00 [ 58.169175][ T3295] elf_core_dump+0x21c0/0x2340 [ 58.174049][ T3295] coredump_write+0xaf9/0xdd0 [ 58.178864][ T3295] vfs_coredump+0x2770/0x3290 [ 58.183607][ T3295] get_signal+0xd33/0xf10 [ 58.187971][ T3295] arch_do_signal_or_restart+0x96/0x480 [ 58.193902][ T3295] irqentry_exit+0x14d/0x610 [ 58.198537][ T3295] asm_exc_page_fault+0x26/0x30 [ 58.203434][ T3295] [ 58.205802][ T3295] read to 0xffff888101dd73b8 of 8 bytes by task 3295 on cpu 0: [ 58.213372][ T3295] shmem_getattr+0x41/0x200 [ 58.217917][ T3295] vfs_getattr_nosec+0x146/0x1e0 [ 58.222904][ T3295] vfs_getattr+0x48/0x60 [ 58.227193][ T3295] vfs_statx_path+0x28/0x140 [ 58.231928][ T3295] vfs_statx+0xc4/0x170 [ 58.236133][ T3295] vfs_fstatat+0x118/0x170 [ 58.240576][ T3295] __se_sys_newfstatat+0x55/0x3e0 [ 58.245639][ T3295] __x64_sys_newfstatat+0x55/0x70 [ 58.250701][ T3295] x64_sys_call+0x2c64/0x3020 [ 58.255417][ T3295] do_syscall_64+0x136/0x3c0 [ 58.260037][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.265967][ T3295] [ 58.268343][ T3295] value changed: 0x000000000000013e -> 0x0000000000000142 [ 58.275479][ T3295] [ 58.277825][ T3295] Reported by Kernel Concurrency Sanitizer on: [ 58.283999][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 58.293492][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.303577][ T3295] ==================================================================