last executing test programs: 1.200876774s ago: executing program 0 (id=7): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.060603135s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 929.258806ms ago: executing program 0 (id=9): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)='=', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340), &(0x7f0000000400)=0x8) 862.790576ms ago: executing program 0 (id=10): io_uring_setup(0x4f02, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) 729.089056ms ago: executing program 0 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}}], 0x2, 0x0) 712.679697ms ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 704.463417ms ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 469.154738ms ago: executing program 4 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 383.150418ms ago: executing program 1 (id=13): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 198.259259ms ago: executing program 4 (id=14): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 179.083759ms ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3d081e, &(0x7f0000000200), 0x1, 0x515, &(0x7f0000000800)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000080)='./file0\x00') 107.67046ms ago: executing program 3 (id=15): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) 107.14203ms ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 50.11372ms ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 45.66543ms ago: executing program 4 (id=17): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000002c0)=""/209) 14.89949ms ago: executing program 0 (id=18): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 326.36µs ago: executing program 2 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="fb", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 0s ago: executing program 4 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 34.117041][ T29] audit: type=1400 audit(1732248325.077:81): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.118359][ T3307] cgroup: Unknown subsys name 'net' [ 34.139833][ T29] audit: type=1400 audit(1732248325.077:82): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.167271][ T29] audit: type=1400 audit(1732248325.097:83): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.187115][ T29] audit: type=1400 audit(1732248325.107:84): avc: denied { read } for pid=3000 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.307744][ T3307] cgroup: Unknown subsys name 'cpuset' [ 34.313959][ T3307] cgroup: Unknown subsys name 'rlimit' [ 34.454071][ T29] audit: type=1400 audit(1732248325.407:85): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.477376][ T29] audit: type=1400 audit(1732248325.407:86): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.498008][ T29] audit: type=1400 audit(1732248325.407:87): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.509239][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.518469][ T29] audit: type=1400 audit(1732248325.407:88): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.547318][ T29] audit: type=1400 audit(1732248325.407:89): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.572209][ T29] audit: type=1400 audit(1732248325.407:90): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.588319][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.700743][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.719872][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.753129][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 35.793763][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.800881][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.808205][ T3322] bridge_slave_0: entered allmulticast mode [ 35.814617][ T3322] bridge_slave_0: entered promiscuous mode [ 35.833785][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.840941][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.848341][ T3322] bridge_slave_1: entered allmulticast mode [ 35.854857][ T3322] bridge_slave_1: entered promiscuous mode [ 35.865841][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.873249][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.880671][ T3316] bridge_slave_0: entered allmulticast mode [ 35.887297][ T3316] bridge_slave_0: entered promiscuous mode [ 35.906267][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.913687][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.921192][ T3316] bridge_slave_1: entered allmulticast mode [ 35.927668][ T3316] bridge_slave_1: entered promiscuous mode [ 35.984318][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.000581][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.009776][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.016980][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.024287][ T3326] bridge_slave_0: entered allmulticast mode [ 36.031194][ T3326] bridge_slave_0: entered promiscuous mode [ 36.038433][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.047562][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 36.061924][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.077927][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.085018][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.092294][ T3326] bridge_slave_1: entered allmulticast mode [ 36.098958][ T3326] bridge_slave_1: entered promiscuous mode [ 36.112403][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.133867][ T3322] team0: Port device team_slave_0 added [ 36.140648][ T3322] team0: Port device team_slave_1 added [ 36.149383][ T3316] team0: Port device team_slave_0 added [ 36.180396][ T3316] team0: Port device team_slave_1 added [ 36.188894][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.222343][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.238925][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.245882][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.271880][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.288283][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.295348][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.321320][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.341619][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.348734][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.355893][ T3319] bridge_slave_0: entered allmulticast mode [ 36.362536][ T3319] bridge_slave_0: entered promiscuous mode [ 36.374099][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.381104][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.407312][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.418389][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.425335][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.451379][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.467038][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.474195][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.481458][ T3319] bridge_slave_1: entered allmulticast mode [ 36.487885][ T3319] bridge_slave_1: entered promiscuous mode [ 36.500978][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.508192][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.515540][ T3329] bridge_slave_0: entered allmulticast mode [ 36.521984][ T3329] bridge_slave_0: entered promiscuous mode [ 36.530834][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.538042][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.545322][ T3329] bridge_slave_1: entered allmulticast mode [ 36.551732][ T3329] bridge_slave_1: entered promiscuous mode [ 36.558464][ T3326] team0: Port device team_slave_0 added [ 36.576287][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.587145][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.601143][ T3326] team0: Port device team_slave_1 added [ 36.641174][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.648251][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.674978][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.691583][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.701547][ T3319] team0: Port device team_slave_0 added [ 36.709688][ T3322] hsr_slave_0: entered promiscuous mode [ 36.715600][ T3322] hsr_slave_1: entered promiscuous mode [ 36.733162][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.740252][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.766467][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.778105][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.795612][ T3319] team0: Port device team_slave_1 added [ 36.808427][ T3316] hsr_slave_0: entered promiscuous mode [ 36.814491][ T3316] hsr_slave_1: entered promiscuous mode [ 36.820452][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.828035][ T3316] Cannot create hsr debugfs directory [ 36.859073][ T3329] team0: Port device team_slave_0 added [ 36.870562][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.877570][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.903703][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.916577][ T3326] hsr_slave_0: entered promiscuous mode [ 36.922947][ T3326] hsr_slave_1: entered promiscuous mode [ 36.929073][ T3326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.936817][ T3326] Cannot create hsr debugfs directory [ 36.948251][ T3329] team0: Port device team_slave_1 added [ 36.959257][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.966217][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.992494][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.041384][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.048629][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.074790][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.103221][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.110313][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.136353][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.151126][ T3319] hsr_slave_0: entered promiscuous mode [ 37.157295][ T3319] hsr_slave_1: entered promiscuous mode [ 37.163450][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.171171][ T3319] Cannot create hsr debugfs directory [ 37.256089][ T3329] hsr_slave_0: entered promiscuous mode [ 37.262269][ T3329] hsr_slave_1: entered promiscuous mode [ 37.268395][ T3329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.275952][ T3329] Cannot create hsr debugfs directory [ 37.351237][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.367697][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.381884][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.395253][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.410383][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.419495][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.428576][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.438627][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.462510][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.472362][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.481410][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.490811][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.516883][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.526613][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.535538][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.552085][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.577702][ T3329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.598986][ T3329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.611083][ T3329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.619813][ T3329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.649828][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.702902][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.713332][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.733496][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.740621][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.757675][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.766350][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.781715][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.790022][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.797111][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.809058][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.825218][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.834370][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.841518][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.855169][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.862289][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.876327][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.883548][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.893146][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.906238][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.913467][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.922302][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.929404][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.939044][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.946130][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.962306][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.972787][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.018058][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.029729][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.045403][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.056005][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.074731][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.081845][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.108676][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.115771][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.146659][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.190950][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.217810][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.230138][ T3329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.240627][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.259404][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.321137][ T3322] veth0_vlan: entered promiscuous mode [ 38.331522][ T3322] veth1_vlan: entered promiscuous mode [ 38.366080][ T3322] veth0_macvtap: entered promiscuous mode [ 38.388843][ T3322] veth1_macvtap: entered promiscuous mode [ 38.413748][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.425215][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.442234][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.455189][ T3316] veth0_vlan: entered promiscuous mode [ 38.471361][ T3322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.480273][ T3322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.489127][ T3322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.497928][ T3322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.521372][ T3316] veth1_vlan: entered promiscuous mode [ 38.543254][ T3319] veth0_vlan: entered promiscuous mode [ 38.559351][ T3319] veth1_vlan: entered promiscuous mode [ 38.572482][ T3326] veth0_vlan: entered promiscuous mode [ 38.585572][ T3316] veth0_macvtap: entered promiscuous mode [ 38.599083][ T3326] veth1_vlan: entered promiscuous mode [ 38.609671][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.633046][ T3316] veth1_macvtap: entered promiscuous mode [ 38.650856][ T3319] veth0_macvtap: entered promiscuous mode [ 38.659493][ T3319] veth1_macvtap: entered promiscuous mode [ 38.668891][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.679407][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.690367][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.706888][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.717365][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.730703][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.739361][ T3329] veth0_vlan: entered promiscuous mode [ 38.752957][ T3326] veth0_macvtap: entered promiscuous mode [ 38.767190][ T3329] veth1_vlan: entered promiscuous mode [ 38.774883][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.783729][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.792564][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.801373][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.811713][ T3463] process 'syz.0.7' launched './file0' with NULL argv: empty string added [ 38.816528][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.830873][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.840808][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.851384][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.865305][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.877665][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.888181][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.898152][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.908729][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.922547][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.937878][ T3326] veth1_macvtap: entered promiscuous mode [ 38.950625][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.959624][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.968490][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977360][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.008895][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.019575][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.029610][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.040117][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.050144][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.060714][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.071763][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.089829][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.100534][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.110470][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.120964][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.130842][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.140309][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 39.140326][ T29] audit: type=1400 audit(1732248330.097:132): avc: denied { create } for pid=3469 comm="syz.0.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.141421][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.179698][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.197745][ T3329] veth0_macvtap: entered promiscuous mode [ 39.208591][ T3326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.217417][ T3326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.226228][ T3326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.235014][ T3326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.260061][ T3329] veth1_macvtap: entered promiscuous mode [ 39.291362][ T29] audit: type=1326 audit(1732248330.247:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f8a5e819 code=0x7ffc0000 [ 39.329754][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.340360][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.346831][ T29] audit: type=1326 audit(1732248330.247:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f8a5e819 code=0x7ffc0000 [ 39.350336][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.373540][ T29] audit: type=1326 audit(1732248330.247:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa1f8a5e819 code=0x7ffc0000 [ 39.383915][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.407220][ T29] audit: type=1326 audit(1732248330.247:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f8a5e819 code=0x7ffc0000 [ 39.416984][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.417004][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.440395][ T29] audit: type=1326 audit(1732248330.287:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f8a5e819 code=0x7ffc0000 [ 39.484041][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.494662][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.506224][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.514647][ T29] audit: type=1400 audit(1732248330.457:138): avc: denied { create } for pid=3475 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.534095][ T29] audit: type=1400 audit(1732248330.457:139): avc: denied { connect } for pid=3475 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.600755][ T29] audit: type=1400 audit(1732248330.547:140): avc: denied { read } for pid=3479 comm="syz.4.12" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.601793][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.624874][ T29] audit: type=1400 audit(1732248330.547:141): avc: denied { open } for pid=3479 comm="syz.4.12" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.635210][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.635222][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.635238][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.635249][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.635264][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.710411][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.720859][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.773301][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.790572][ T3329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.799587][ T3329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.808440][ T3329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.817261][ T3329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.829388][ T3486] xt_nat: multiple ranges no longer supported [ 39.840373][ T3488] loop3: detected capacity change from 0 to 512 [ 39.860652][ T3483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.979380][ T3319] ================================================================== [ 39.987518][ T3319] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_block_update_hint_alloc [ 39.996244][ T3319] [ 39.998589][ T3319] read-write to 0xffffffff88c092ec of 4 bytes by task 3329 on cpu 1: [ 40.006717][ T3319] pcpu_block_update_hint_alloc+0x5db/0x6a0 [ 40.012656][ T3319] pcpu_alloc_area+0x488/0x4b0 [ 40.017520][ T3319] pcpu_alloc_noprof+0x4bb/0x10a0 [ 40.022597][ T3319] xt_percpu_counter_alloc+0x79/0x110 [ 40.028068][ T3319] translate_table+0x921/0xf70 [ 40.032968][ T3319] do_ipt_set_ctl+0x7bd/0x8b0 [ 40.037693][ T3319] nf_setsockopt+0x195/0x1b0 [ 40.042312][ T3319] ip_setsockopt+0xea/0x100 [ 40.046905][ T3319] tcp_setsockopt+0x93/0xb0 [ 40.051411][ T3319] sock_common_setsockopt+0x64/0x80 [ 40.056614][ T3319] __sys_setsockopt+0x187/0x200 [ 40.061472][ T3319] __x64_sys_setsockopt+0x66/0x80 [ 40.066504][ T3319] x64_sys_call+0x282e/0x2dc0 [ 40.071195][ T3319] do_syscall_64+0xc9/0x1c0 [ 40.075707][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.081608][ T3319] [ 40.083953][ T3319] read to 0xffffffff88c092ec of 4 bytes by task 3319 on cpu 0: [ 40.091533][ T3319] pcpu_alloc_noprof+0x9b6/0x10a0 [ 40.096583][ T3319] xt_percpu_counter_alloc+0x79/0x110 [ 40.101972][ T3319] translate_table+0x9b1/0x1040 [ 40.106853][ T3319] do_ip6t_set_ctl+0x7cc/0x8c0 [ 40.111626][ T3319] nf_setsockopt+0x195/0x1b0 [ 40.116249][ T3319] ipv6_setsockopt+0x10f/0x130 [ 40.121037][ T3319] tcp_setsockopt+0x93/0xb0 [ 40.125573][ T3319] sock_common_setsockopt+0x64/0x80 [ 40.130833][ T3319] __sys_setsockopt+0x187/0x200 [ 40.135745][ T3319] __x64_sys_setsockopt+0x66/0x80 [ 40.140870][ T3319] x64_sys_call+0x282e/0x2dc0 [ 40.145562][ T3319] do_syscall_64+0xc9/0x1c0 [ 40.150073][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.155972][ T3319] [ 40.158296][ T3319] value changed: 0x0000006e -> 0x0000006d [ 40.164138][ T3319] [ 40.166491][ T3319] Reported by Kernel Concurrency Sanitizer on: [ 40.172649][ T3319] CPU: 0 UID: 0 PID: 3319 Comm: syz-executor Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 40.183191][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 40.193340][ T3319] ================================================================== [ 40.849405][ T3483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.890261][ T3483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.939234][ T3483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.992627][ T3483] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.003484][ T3483] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.014533][ T3483] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.025763][ T3483] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0