last executing test programs: 459.147138ms ago: executing program 2 (id=3): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 405.581729ms ago: executing program 3 (id=12): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 297.920959ms ago: executing program 3 (id=16): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @private=0xa010102}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x3}}}}}}, 0x0) 283.726189ms ago: executing program 3 (id=17): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 265.227339ms ago: executing program 4 (id=18): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="f4000900062b8925fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 228.243949ms ago: executing program 1 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 184.75178ms ago: executing program 0 (id=21): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x6a) 184.4462ms ago: executing program 1 (id=22): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) 184.0943ms ago: executing program 3 (id=23): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) connect$pppl2tp(r0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x3}}, 0x2e) 178.951739ms ago: executing program 4 (id=24): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 166.10426ms ago: executing program 1 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="9500000000000000000000000000000085180000feffffff95"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 149.22249ms ago: executing program 1 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmdt(0x0) 141.71308ms ago: executing program 3 (id=27): semget$private(0x0, 0x4, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x0, 0xf001}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 141.34062ms ago: executing program 4 (id=28): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {0x401}, {}, {}, {}, {0x0, 0xd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 119.61216ms ago: executing program 0 (id=29): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r2}, 0xc) 118.81873ms ago: executing program 4 (id=30): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) finit_module(r0, 0x0, 0x3) 93.14908ms ago: executing program 4 (id=31): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 93.02956ms ago: executing program 0 (id=32): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) 61.86087ms ago: executing program 1 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x0) 61.48241ms ago: executing program 1 (id=34): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb}, 0xb) sendfile(r0, r0, &(0x7f0000000240), 0x7f03) 50.81342ms ago: executing program 0 (id=35): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 40.48214ms ago: executing program 4 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5e0, &(0x7f0000000000)="$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") 36.67963ms ago: executing program 0 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080016804400018005001100"], 0x30}}, 0x0) 4.123231ms ago: executing program 0 (id=38): unshare(0x68060200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @remote}], 0x10) 0s ago: executing program 3 (id=39): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000580)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff00000001100003000000deff0000000200000000000000000000f5e1d1a4d290cad25b240e58247c4d153e9e9304b27c95c0e1293765d6ec52aad9dd9ca788ce997cbe42fd306bc87d04d08bbf75b77e02ac9afc9cebbc162b4bf251d7a9db", 0x9e}], 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) kernel console output (not intermixed with test programs): [ 18.059572][ T29] audit: type=1400 audit(1731439969.087:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 21.368043][ T29] audit: type=1400 audit(1731439972.397:82): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.369059][ T3301] cgroup: Unknown subsys name 'net' [ 21.390732][ T29] audit: type=1400 audit(1731439972.397:83): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.418066][ T29] audit: type=1400 audit(1731439972.427:84): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.574364][ T3301] cgroup: Unknown subsys name 'cpuset' [ 21.580432][ T3301] cgroup: Unknown subsys name 'rlimit' [ 21.686962][ T29] audit: type=1400 audit(1731439972.717:85): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.710239][ T29] audit: type=1400 audit(1731439972.717:86): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.718923][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.730634][ T29] audit: type=1400 audit(1731439972.717:87): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.759541][ T29] audit: type=1400 audit(1731439972.717:88): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.779859][ T29] audit: type=1400 audit(1731439972.717:89): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.781120][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.804669][ T29] audit: type=1400 audit(1731439972.717:90): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.804694][ T29] audit: type=1400 audit(1731439972.767:91): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.837462][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 22.871281][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 22.935772][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 22.950720][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 22.970298][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.977443][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.984534][ T3315] bridge_slave_0: entered allmulticast mode [ 22.990897][ T3315] bridge_slave_0: entered promiscuous mode [ 23.012525][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.019692][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.026827][ T3315] bridge_slave_1: entered allmulticast mode [ 23.032979][ T3315] bridge_slave_1: entered promiscuous mode [ 23.078915][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.088050][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.095133][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.102357][ T3321] bridge_slave_0: entered allmulticast mode [ 23.108753][ T3321] bridge_slave_0: entered promiscuous mode [ 23.119171][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.126329][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.133514][ T3313] bridge_slave_0: entered allmulticast mode [ 23.139844][ T3313] bridge_slave_0: entered promiscuous mode [ 23.146180][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 23.155527][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.168763][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.175832][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.182946][ T3321] bridge_slave_1: entered allmulticast mode [ 23.189354][ T3321] bridge_slave_1: entered promiscuous mode [ 23.199889][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.206953][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.214072][ T3318] bridge_slave_0: entered allmulticast mode [ 23.220375][ T3318] bridge_slave_0: entered promiscuous mode [ 23.226690][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.233736][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.240783][ T3313] bridge_slave_1: entered allmulticast mode [ 23.247199][ T3313] bridge_slave_1: entered promiscuous mode [ 23.267396][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.274501][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.281557][ T3318] bridge_slave_1: entered allmulticast mode [ 23.287951][ T3318] bridge_slave_1: entered promiscuous mode [ 23.305328][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.315054][ T3315] team0: Port device team_slave_0 added [ 23.321521][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.352676][ T3315] team0: Port device team_slave_1 added [ 23.359221][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.369410][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.379465][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.402713][ T3313] team0: Port device team_slave_0 added [ 23.409138][ T3313] team0: Port device team_slave_1 added [ 23.430524][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.440123][ T3321] team0: Port device team_slave_0 added [ 23.452794][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.459777][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.485660][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.496710][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.503696][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.529691][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.540977][ T3321] team0: Port device team_slave_1 added [ 23.568898][ T3318] team0: Port device team_slave_0 added [ 23.575236][ T3318] team0: Port device team_slave_1 added [ 23.584964][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.592066][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.599254][ T3314] bridge_slave_0: entered allmulticast mode [ 23.605816][ T3314] bridge_slave_0: entered promiscuous mode [ 23.612350][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.619309][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.645271][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.657027][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.663988][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.689959][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.710008][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.717134][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.724446][ T3314] bridge_slave_1: entered allmulticast mode [ 23.730724][ T3314] bridge_slave_1: entered promiscuous mode [ 23.746948][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.753909][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.779846][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.805804][ T3315] hsr_slave_0: entered promiscuous mode [ 23.811711][ T3315] hsr_slave_1: entered promiscuous mode [ 23.817891][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.824844][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.850777][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.863345][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.870318][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.896240][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.907803][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.917023][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.923990][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.949883][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.977939][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.993180][ T3313] hsr_slave_0: entered promiscuous mode [ 23.999195][ T3313] hsr_slave_1: entered promiscuous mode [ 24.005073][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.012609][ T3313] Cannot create hsr debugfs directory [ 24.052078][ T3314] team0: Port device team_slave_0 added [ 24.058413][ T3314] team0: Port device team_slave_1 added [ 24.066006][ T3318] hsr_slave_0: entered promiscuous mode [ 24.071954][ T3318] hsr_slave_1: entered promiscuous mode [ 24.077831][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.085452][ T3318] Cannot create hsr debugfs directory [ 24.097455][ T3321] hsr_slave_0: entered promiscuous mode [ 24.103345][ T3321] hsr_slave_1: entered promiscuous mode [ 24.109131][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.116689][ T3321] Cannot create hsr debugfs directory [ 24.148708][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.155729][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.181625][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.194468][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.201451][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.227425][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.291285][ T3314] hsr_slave_0: entered promiscuous mode [ 24.297186][ T3314] hsr_slave_1: entered promiscuous mode [ 24.303125][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.310709][ T3314] Cannot create hsr debugfs directory [ 24.406957][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.415196][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.431454][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.439702][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.466744][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.475367][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.484022][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.492623][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.525052][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.535119][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.544075][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.561041][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.572964][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.582050][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.590854][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.599535][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.628736][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.637546][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.645811][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.654721][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.682754][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.706496][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.730978][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.739415][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.746469][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.755489][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.762616][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.798693][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.819692][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.830339][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.842038][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.849122][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.867060][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.875687][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.886733][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.893791][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.912630][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.923042][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.938629][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.945697][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.954541][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.961585][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.974412][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.981523][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.998259][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.009137][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.016236][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.027534][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.043547][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.053971][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.071319][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.081801][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.118066][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.129819][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.163569][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.170746][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.190288][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.197430][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.226539][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.237051][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.259413][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.269816][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.322193][ T3313] veth0_vlan: entered promiscuous mode [ 25.336148][ T3313] veth1_vlan: entered promiscuous mode [ 25.380092][ T3313] veth0_macvtap: entered promiscuous mode [ 25.387666][ T3318] veth0_vlan: entered promiscuous mode [ 25.395408][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.403303][ T3313] veth1_macvtap: entered promiscuous mode [ 25.412287][ T3318] veth1_vlan: entered promiscuous mode [ 25.436055][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.444698][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.452691][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.461540][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.470298][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.479110][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.496072][ T3321] veth0_vlan: entered promiscuous mode [ 25.503729][ T3315] veth0_vlan: entered promiscuous mode [ 25.519908][ T3315] veth1_vlan: entered promiscuous mode [ 25.527950][ T3321] veth1_vlan: entered promiscuous mode [ 25.538828][ T3318] veth0_macvtap: entered promiscuous mode [ 25.550530][ T3315] veth0_macvtap: entered promiscuous mode [ 25.562963][ T3321] veth0_macvtap: entered promiscuous mode [ 25.580348][ T3321] veth1_macvtap: entered promiscuous mode [ 25.589430][ T3318] veth1_macvtap: entered promiscuous mode [ 25.596423][ T3315] veth1_macvtap: entered promiscuous mode [ 25.608997][ T3314] veth0_vlan: entered promiscuous mode [ 25.619775][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.630268][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.641576][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.650097][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.655488][ T3314] veth1_vlan: entered promiscuous mode [ 25.676575][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.687130][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.700593][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.709478][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.719960][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.729892][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.740439][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.751424][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.761421][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.771955][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.781778][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.792198][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.802014][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.812533][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.823213][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.834110][ T3321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.842825][ T3321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.851561][ T3321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.860292][ T3321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.878205][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.888777][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.898636][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.909069][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.921022][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.930339][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.940949][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.950825][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.961341][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.971245][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.981795][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.993079][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.004614][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.013446][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.022230][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.031059][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.044995][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.053772][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.062576][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.071414][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.101668][ T3314] veth0_macvtap: entered promiscuous mode [ 26.126868][ T3314] veth1_macvtap: entered promiscuous mode [ 26.151166][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.161703][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.171523][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.181952][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.191894][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.202338][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.212287][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.222717][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.234186][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.244912][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.255456][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.265434][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.275868][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.285685][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.296134][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.306061][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.316496][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.327643][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.336244][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.344966][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.353805][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.362688][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.378918][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 26.378931][ T29] audit: type=1400 audit(1731439977.407:130): avc: denied { open } for pid=3465 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.404033][ T29] audit: type=1400 audit(1731439977.407:131): avc: denied { kernel } for pid=3465 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.423261][ T29] audit: type=1400 audit(1731439977.407:132): avc: denied { read } for pid=3465 comm="syz.4.10" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.447249][ T29] audit: type=1400 audit(1731439977.407:133): avc: denied { open } for pid=3465 comm="syz.4.10" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.471599][ T29] audit: type=1400 audit(1731439977.407:134): avc: denied { ioctl } for pid=3465 comm="syz.4.10" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 26.524330][ T3468] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 26.593571][ T29] audit: type=1400 audit(1731439977.617:135): avc: denied { write } for pid=3476 comm="syz.3.12" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.617759][ T29] audit: type=1400 audit(1731439977.617:136): avc: denied { map_create } for pid=3479 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.636638][ T29] audit: type=1400 audit(1731439977.617:137): avc: denied { map_read map_write } for pid=3479 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.691636][ T29] audit: type=1326 audit(1731439977.687:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fd94e719 code=0x7ffc0000 [ 26.710474][ T3480] nfs4: Bad value for 'source' [ 26.714840][ T29] audit: type=1326 audit(1731439977.687:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fd94e719 code=0x7ffc0000 [ 26.862166][ T3517] Invalid ELF header magic: != ELF [ 26.955650][ T3533] loop4: detected capacity change from 0 to 2048 [ 26.965956][ T3016] ================================================================== [ 26.974056][ T3016] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 26.980676][ T3016] [ 26.982996][ T3016] read-write to 0xffff8881006cce40 of 4 bytes by task 3472 on cpu 1: [ 26.991060][ T3016] dont_mount+0x2a/0x40 [ 26.995224][ T3016] vfs_unlink+0x298/0x430 [ 26.999562][ T3016] do_unlinkat+0x236/0x4c0 [ 27.003979][ T3016] __x64_sys_unlink+0x2e/0x40 [ 27.008676][ T3016] x64_sys_call+0x280f/0x2d60 [ 27.013369][ T3016] do_syscall_64+0xc9/0x1c0 [ 27.017887][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.023808][ T3016] [ 27.026132][ T3016] read to 0xffff8881006cce40 of 4 bytes by task 3016 on cpu 0: [ 27.027558][ T3537] capability: warning: `syz.3.39' uses 32-bit capabilities (legacy support in use) [ 27.033666][ T3016] lookup_fast+0xd9/0x2a0 [ 27.033692][ T3016] walk_component+0x3f/0x230 [ 27.051842][ T3016] path_lookupat+0x10a/0x2b0 [ 27.056426][ T3016] filename_lookup+0x127/0x300 [ 27.061180][ T3016] do_readlinkat+0x89/0x210 [ 27.065679][ T3016] __x64_sys_readlink+0x47/0x60 [ 27.070521][ T3016] x64_sys_call+0x13c3/0x2d60 [ 27.075192][ T3016] do_syscall_64+0xc9/0x1c0 [ 27.079688][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.085581][ T3016] [ 27.087890][ T3016] value changed: 0x00600008 -> 0x00008008 [ 27.093590][ T3016] [ 27.095900][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 27.102041][ T3016] CPU: 0 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 27.112264][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 27.122302][ T3016] ==================================================================