last executing test programs: 2.246815305s ago: executing program 1 (id=2): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = syz_io_uring_setup(0x15e7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='8', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) fcntl$lock(r7, 0x7, &(0x7f00000006c0)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioperm(0x0, 0x3, 0x80005) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='[[-\\\x8d%\xbc+\x00') fcntl$lock(r8, 0x26, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.335314354s ago: executing program 4 (id=23): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 1.328218326s ago: executing program 1 (id=25): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @local}}}, 0x118) 1.306427659s ago: executing program 1 (id=26): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000180)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}]}, 0xf5, 0x2e5, &(0x7f0000000540)="$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") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f0000000f40)={&(0x7f0000000bc0)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)="69d14fc811590e75cd49a31488640891", 0x1000e}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003300000001e0a01020000000000000000010011000900020073797a3227000000040003800900010073797a30"], 0xb4}}, 0x0) r1 = socket(0x22, 0x2, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x0, 0x5, 0x9, 0x400}, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x6}, 0x90) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.196702786s ago: executing program 4 (id=28): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a010088a8ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 1.180992438s ago: executing program 4 (id=29): r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100005070000fa00000000000000001a", @ANYRES32=r4, @ANYBLOB="ff00000000000000140012000c00010076657468"], 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xff}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.139756745s ago: executing program 4 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3e, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r0, r1, &(0x7f0000000100), 0x100000000010001) 1.070204475s ago: executing program 3 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.068056096s ago: executing program 2 (id=34): iopl(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.03534169s ago: executing program 3 (id=35): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) clock_getres(0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) io_setup(0x1, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) socket$inet(0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 950.705234ms ago: executing program 2 (id=36): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @local}}}, 0x118) 933.228336ms ago: executing program 2 (id=37): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000400000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000807000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 915.873209ms ago: executing program 2 (id=38): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = syz_io_uring_setup(0x15e7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='8', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) fcntl$lock(r7, 0x7, &(0x7f00000006c0)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioperm(0x0, 0x3, 0x80005) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='[[-\\\x8d%\xbc+\x00') fcntl$lock(r8, 0x26, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 439.031122ms ago: executing program 1 (id=50): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a010088a8ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 421.193385ms ago: executing program 1 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x1000, 0x5}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8, 0x6}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}}]}, 0x48}}, 0x0) 370.289573ms ago: executing program 1 (id=53): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$inet6(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000240)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$eJzs289rHFUcAPDv7CataVMTS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTbPpJlvdzwcmeW/mLe99d+btvjdvJ4CeNZr+SSIGI+L3iBiqZusLjFb/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvzTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmR0s4NPlssdrq67DtSkk74uNoS2FKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNRm/Y2LJBvHP4Xr2wpsi9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96Tsejfm+YnN6njh1d++6LVsdrxX7ql9edjwawd1/v21r9mdnpp+k5irnXjk4iRvmbxJ2srAUlEHI6IkW3WMf/0N0dbHbt9/JvowDpT+euIp6rnfyUa4s8lm69PTtwTpbnjE/lVsdEvv159s1X9dxR/B6Tnf1/T638t/uGkdr12sf06rv7xecs5zXav/z3J23X7PpxeWro0GbEneb3a6Nr9Uw3lptbLp/GPHWve/w/G+jtxJCLSi/jhiHgkIh7N2v5YRDweEcc2if+nl594r27H2GAb8e+sNP7Zts7/emJPNO5pniie//G7ukqHo4340/N/spIay/Zs5fNvK+3a3tUMAAAA/z2FiBiMpDC+li4Uxserv+E/FPsKpYXFpWfOLnxwcbb6jMBw9BfyO11DNfdDJ7NpfZ6fasifyO4bf1kcqOTHZxZKs90OHnrc/hb9P/VnsdutA3ac57Wgd+n/0Lv0f+hd+j/0rib9f6Ab7QB2X7Pv/4+70A5g9zX0f8t+0EPM/6F36f/Qu/R/6EmLA3H7h+QlJDYkonBXNENihxLd/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojH8DAAD//ygv5wk=") r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000013c0), 0x4) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) close(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x40505331, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x80045300, 0x0) tkill(r1, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000001040)=0x2, 0x4) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r4, &(0x7f0000000200)='./file0\x00') 338.797227ms ago: executing program 0 (id=55): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='pimreg1\x00'}) r4 = socket$inet6(0xa, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xe8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 315.324561ms ago: executing program 0 (id=56): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @loopback}, r2}}, 0x48) 287.763925ms ago: executing program 4 (id=57): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10) r1 = io_uring_setup(0x6a0b, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001680)={0x9, 0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/101, 0x65}], 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001dc0)={0x1, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, 0x8}, 0x20) 275.204447ms ago: executing program 0 (id=58): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 237.381633ms ago: executing program 0 (id=59): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x0, @private1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, 0x38, "96f89ca997bbe21d7101571760d82ecb1fafd2748d9b75eb8924e320ca8bf0d9c1243d7ed57a2326b9c52b0b26c299d4767661bbd8db2697"}, &(0x7f00000000c0)=0x40) 165.022484ms ago: executing program 0 (id=60): r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e8020000000000002900000004"], 0x2e8}}], 0x2, 0x0) 164.794364ms ago: executing program 0 (id=61): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000180)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}]}, 0xf5, 0x2e5, &(0x7f0000000540)="$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") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f0000000f40)={&(0x7f0000000bc0)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)="69d14fc811590e75cd49a31488640891", 0x1000e}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003300000001e0a01020000000000000000010011000900020073797a3227000000040003800900010073797a30"], 0xb4}}, 0x0) r1 = socket(0x22, 0x2, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, [@generic={0x0, 0x5, 0x9, 0x400}, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x6}, 0x90) socket$nl_sock_diag(0x10, 0x3, 0x4) 98.027114ms ago: executing program 3 (id=62): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a010088a8ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 90.863126ms ago: executing program 4 (id=63): iopl(0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 64.94786ms ago: executing program 2 (id=64): r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100005070000fa00000000000000001a", @ANYRES32=r4, @ANYBLOB="ff00000000000000140012000c00010076657468"], 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xff}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 33.229524ms ago: executing program 3 (id=65): r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)) mq_notify(r0, 0x0) 19.128996ms ago: executing program 2 (id=66): set_mempolicy(0x4005, &(0x7f0000000280)=0x103, 0x4) r0 = memfd_create(&(0x7f0000000580)='\x00\xac=\x9d\xd2?\xbe\xfd!\xee\xc97`_\tz\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10[&\x02k`(\x91^6\x04\x89r{raA\xb2\xb2\x12c\x11\x01Z<\xad\x97\xb8\xdc\xa6x\xcb\x89\xce\x17\xba\xe3\x0eS\"\xea\x9d\x8ej\xa8\xfft\xc5\xa8\xf6\x96\xbb1-w\rp\x91\xc7\xd3V\x18^h.D\xa2\xdd\xeb\xa3@\xc7\x92#_\xfd\xf9\x15\xd5\xed\xfbv\xd7\x0f\'\x86kG\v\xb9\x1fn\xe0M\xef\x06\x00\x00\x00t\xaes\xebi\x89\xec\"\x8f\r\x82\xffl\xf9\xff\x83\x8a\x98\xd3z\xd9\xbf\xff\x1c\r\xf5\x98k13\f\xd71\xf5\n\xb2\f\x84\xfa\x97\xab\xca\xa3\xb5\xad\xa8\x8c\xbdi\xb8H4\x8e\xe0\xd7*\xc2\xb0+|hR\x13\xa1tz\ac\xbc\x10RM\xbfR\x10\xcf\xd0!p\x058%\xb3\x1e\bj^D\x1786\xfc3\xb6r\xfc\xd0\xa6\x06\xfa{\xd2cE4\xbd7\x02\xa1E\x87\xa6\xf8\x86I\xfb\x1c\xcfb\xcb\xa9k\xbe\x84\xc8B{\xba', 0x7) fallocate(r0, 0x0, 0x0, 0x40) 18.547037ms ago: executing program 3 (id=67): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='pimreg1\x00'}) r4 = socket$inet6(0xa, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xe8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 0s ago: executing program 3 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3e, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r0, r1, &(0x7f0000000100), 0x100000000010001) kernel console output (not intermixed with test programs): syzkaller login: [ 16.395284][ T2795] udevd (2795) used greatest stack depth: 11936 bytes left [ 18.190644][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 18.190660][ T29] audit: type=1400 audit(1719598478.005:76): avc: denied { transition } for pid=2961 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.200347][ T2961] sh (2961) used greatest stack depth: 11872 bytes left [ 18.218653][ T29] audit: type=1400 audit(1719598478.005:77): avc: denied { noatsecure } for pid=2961 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.244567][ T29] audit: type=1400 audit(1719598478.005:78): avc: denied { write } for pid=2961 comm="sh" path="pipe:[508]" dev="pipefs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.266625][ T29] audit: type=1400 audit(1719598478.005:79): avc: denied { rlimitinh } for pid=2961 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.285346][ T29] audit: type=1400 audit(1719598478.005:80): avc: denied { siginh } for pid=2961 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.875411][ T2964] sftp-server (2964) used greatest stack depth: 11616 bytes left [ 21.981380][ T29] audit: type=1400 audit(1719598481.795:81): avc: denied { read } for pid=2766 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 24.398353][ T29] audit: type=1400 audit(1719598484.205:82): avc: denied { mounton } for pid=3071 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.399653][ T3071] cgroup: Unknown subsys name 'net' [ 24.421160][ T29] audit: type=1400 audit(1719598484.205:83): avc: denied { mount } for pid=3071 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.448529][ T29] audit: type=1400 audit(1719598484.235:84): avc: denied { unmount } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.590942][ T3071] cgroup: Unknown subsys name 'rlimit' [ 24.745337][ T29] audit: type=1400 audit(1719598484.555:85): avc: denied { create } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.767809][ T29] audit: type=1400 audit(1719598484.555:86): avc: denied { write } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.788244][ T29] audit: type=1400 audit(1719598484.555:87): avc: denied { read } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.804045][ T3072] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.808604][ T29] audit: type=1400 audit(1719598484.565:88): avc: denied { mounton } for pid=3071 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.842082][ T29] audit: type=1400 audit(1719598484.565:89): avc: denied { mount } for pid=3071 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.856327][ T3071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.865299][ T29] audit: type=1400 audit(1719598484.635:90): avc: denied { relabelto } for pid=3072 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.865328][ T29] audit: type=1400 audit(1719598484.635:91): avc: denied { write } for pid=3072 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.425458][ T3079] chnl_net:caif_netlink_parms(): no params data found [ 25.521431][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.528531][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.535742][ T3079] bridge_slave_0: entered allmulticast mode [ 25.542197][ T3079] bridge_slave_0: entered promiscuous mode [ 25.564266][ T3086] chnl_net:caif_netlink_parms(): no params data found [ 25.575882][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.582983][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.590192][ T3079] bridge_slave_1: entered allmulticast mode [ 25.596586][ T3079] bridge_slave_1: entered promiscuous mode [ 25.631297][ T3079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.643931][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 25.656547][ T3079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.679918][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 25.693686][ T3084] chnl_net:caif_netlink_parms(): no params data found [ 25.718367][ T3079] team0: Port device team_slave_0 added [ 25.725028][ T3079] team0: Port device team_slave_1 added [ 25.745295][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.752485][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.759763][ T3086] bridge_slave_0: entered allmulticast mode [ 25.766538][ T3086] bridge_slave_0: entered promiscuous mode [ 25.795035][ T3079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.802037][ T3079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.828104][ T3079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.839150][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.846236][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.853523][ T3086] bridge_slave_1: entered allmulticast mode [ 25.860106][ T3086] bridge_slave_1: entered promiscuous mode [ 25.875423][ T3079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.882503][ T3079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.908550][ T3079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.950593][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.962875][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.977336][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.984464][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.991631][ T3084] bridge_slave_0: entered allmulticast mode [ 25.998034][ T3084] bridge_slave_0: entered promiscuous mode [ 26.005235][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.012391][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.019779][ T3085] bridge_slave_0: entered allmulticast mode [ 26.026098][ T3085] bridge_slave_0: entered promiscuous mode [ 26.047762][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.054903][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.062164][ T3084] bridge_slave_1: entered allmulticast mode [ 26.068719][ T3084] bridge_slave_1: entered promiscuous mode [ 26.075132][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.082276][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.089443][ T3085] bridge_slave_1: entered allmulticast mode [ 26.095882][ T3085] bridge_slave_1: entered promiscuous mode [ 26.112869][ T3086] team0: Port device team_slave_0 added [ 26.132860][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.140328][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.147559][ T3087] bridge_slave_0: entered allmulticast mode [ 26.154096][ T3087] bridge_slave_0: entered promiscuous mode [ 26.161181][ T3086] team0: Port device team_slave_1 added [ 26.167019][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.174318][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.181500][ T3087] bridge_slave_1: entered allmulticast mode [ 26.187814][ T3087] bridge_slave_1: entered promiscuous mode [ 26.196275][ T3079] hsr_slave_0: entered promiscuous mode [ 26.202329][ T3079] hsr_slave_1: entered promiscuous mode [ 26.214924][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.245225][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.255540][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.270433][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.291554][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.311781][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.321320][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.328269][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.354288][ T3086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.365605][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.372598][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.398519][ T3086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.415550][ T3084] team0: Port device team_slave_0 added [ 26.435031][ T3085] team0: Port device team_slave_0 added [ 26.441493][ T3087] team0: Port device team_slave_0 added [ 26.448066][ T3084] team0: Port device team_slave_1 added [ 26.477395][ T3085] team0: Port device team_slave_1 added [ 26.483677][ T3087] team0: Port device team_slave_1 added [ 26.513144][ T3086] hsr_slave_0: entered promiscuous mode [ 26.519300][ T3086] hsr_slave_1: entered promiscuous mode [ 26.525438][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.533065][ T3086] Cannot create hsr debugfs directory [ 26.553455][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.560452][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.586447][ T3084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.597746][ T3084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.604761][ T3084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.630704][ T3084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.651357][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.658407][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.684374][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.695411][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.702428][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.728358][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.739639][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.746593][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.772558][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.794204][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.801332][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.827331][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.870382][ T3084] hsr_slave_0: entered promiscuous mode [ 26.876476][ T3084] hsr_slave_1: entered promiscuous mode [ 26.882518][ T3084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.890139][ T3084] Cannot create hsr debugfs directory [ 26.907920][ T3085] hsr_slave_0: entered promiscuous mode [ 26.914010][ T3085] hsr_slave_1: entered promiscuous mode [ 26.920020][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.927577][ T3085] Cannot create hsr debugfs directory [ 26.973484][ T3087] hsr_slave_0: entered promiscuous mode [ 26.979731][ T3087] hsr_slave_1: entered promiscuous mode [ 26.985626][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.993326][ T3087] Cannot create hsr debugfs directory [ 27.066017][ T3079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.083711][ T3079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.097049][ T3079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.124632][ T3079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.177774][ T3086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.192287][ T3086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.201253][ T3086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.212459][ T3086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.240635][ T3084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.253240][ T3084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.263032][ T3084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.272159][ T3084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.319268][ T3087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.332361][ T3085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.342087][ T3085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.351058][ T3087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.367291][ T3085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.375949][ T3087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.385059][ T3087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.399435][ T3085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.413291][ T3079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.441973][ T3079] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.483878][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.493410][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.500508][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.515194][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.522363][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.547493][ T3079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.557941][ T3079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.572837][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.592371][ T3084] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.614355][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.621497][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.631088][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.638146][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.665382][ T3086] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.687729][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.697806][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.705033][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.717486][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.735643][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.747334][ T3079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.760363][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.775132][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.782428][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.793618][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.800833][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.809881][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.816996][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.833205][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.840340][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.850551][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.857674][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.907402][ T3087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.936120][ T3084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.001088][ T3085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.011495][ T3085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.034405][ T3079] veth0_vlan: entered promiscuous mode [ 28.057709][ T3079] veth1_vlan: entered promiscuous mode [ 28.087735][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.101954][ T3079] veth0_macvtap: entered promiscuous mode [ 28.130263][ T3084] veth0_vlan: entered promiscuous mode [ 28.138378][ T3084] veth1_vlan: entered promiscuous mode [ 28.154272][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.162597][ T3079] veth1_macvtap: entered promiscuous mode [ 28.183302][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.217251][ T3079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.241765][ T3079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.266944][ T3087] veth0_vlan: entered promiscuous mode [ 28.277913][ T3079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.286825][ T3079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.295641][ T3079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.304409][ T3079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.315148][ T3084] veth0_macvtap: entered promiscuous mode [ 28.327510][ T3087] veth1_vlan: entered promiscuous mode [ 28.347340][ T3084] veth1_macvtap: entered promiscuous mode [ 28.363891][ T3086] veth0_vlan: entered promiscuous mode [ 28.374391][ T3084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.385049][ T3084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.396810][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.415580][ T3084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.426225][ T3084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.437904][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.450527][ T3086] veth1_vlan: entered promiscuous mode [ 28.461521][ T3087] veth0_macvtap: entered promiscuous mode [ 28.477860][ T3084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.486824][ T3084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.495684][ T3084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.504515][ T3084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.517407][ T3087] veth1_macvtap: entered promiscuous mode [ 28.525060][ T3086] veth0_macvtap: entered promiscuous mode [ 28.543033][ T3215] syz.0.1 (3215) used greatest stack depth: 11216 bytes left [ 28.550583][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.561080][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.570966][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.581481][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.596200][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.612771][ T3086] veth1_macvtap: entered promiscuous mode [ 28.622508][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.633047][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.642957][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.653419][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.664357][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.690341][ T3087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.699356][ T3087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.708136][ T3087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.716967][ T3087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.731388][ T3225] netlink: 'syz.0.7': attribute type 6 has an invalid length. [ 28.746652][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.757351][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.767340][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.777890][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.787734][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.798258][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.810121][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.817490][ T3085] veth0_vlan: entered promiscuous mode [ 28.831332][ T3231] loop0: detected capacity change from 0 to 128 [ 28.835771][ T3085] veth1_vlan: entered promiscuous mode [ 28.844689][ T3231] ======================================================= [ 28.844689][ T3231] WARNING: The mand mount option has been deprecated and [ 28.844689][ T3231] and is ignored by this kernel. Remove the mand [ 28.844689][ T3231] option from the mount to silence this warning. [ 28.844689][ T3231] ======================================================= [ 28.890667][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.901291][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.911206][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.921759][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.931602][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.942125][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.953030][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.972622][ T3086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.981549][ T3086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.990438][ T3086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.999262][ T3086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.052667][ T3085] veth0_macvtap: entered promiscuous mode [ 29.063332][ T3085] veth1_macvtap: entered promiscuous mode [ 29.098554][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.109217][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.119132][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.129741][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.139643][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.150206][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.160109][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.170609][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.182550][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.194199][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.204704][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.214627][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.225089][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.235004][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.245696][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.255674][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.266252][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.278731][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.290156][ T3085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.299025][ T3085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.307772][ T3085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.316586][ T3085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.571167][ T3266] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 29.595170][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 29.595187][ T29] audit: type=1400 audit(1719598489.405:152): avc: denied { read write } for pid=3267 comm="syz.4.13" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.626557][ T29] audit: type=1400 audit(1719598489.405:153): avc: denied { open } for pid=3267 comm="syz.4.13" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.638549][ T3270] netlink: 'syz.4.14': attribute type 6 has an invalid length. [ 29.684850][ T29] audit: type=1400 audit(1719598489.495:154): avc: denied { create } for pid=3271 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.707935][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 29.718342][ T29] audit: type=1400 audit(1719598489.515:155): avc: denied { ioctl } for pid=3271 comm="syz.0.15" path="socket:[3066]" dev="sockfs" ino=3066 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.742552][ T29] audit: type=1400 audit(1719598489.515:156): avc: denied { write } for pid=3271 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.761811][ T29] audit: type=1400 audit(1719598489.515:157): avc: denied { create } for pid=3271 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.782130][ T29] audit: type=1400 audit(1719598489.525:158): avc: denied { bind } for pid=3271 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.787218][ T3277] vlan2: entered allmulticast mode [ 29.802077][ T29] audit: type=1400 audit(1719598489.525:159): avc: denied { setopt } for pid=3271 comm="syz.0.15" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.827145][ T29] audit: type=1400 audit(1719598489.525:160): avc: denied { connect } for pid=3271 comm="syz.0.15" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.875936][ T29] audit: type=1400 audit(1719598489.685:161): avc: denied { setopt } for pid=3278 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.970511][ T3289] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.060116][ T3299] loop1: detected capacity change from 0 to 128 [ 30.076452][ T3286] loop0: detected capacity change from 0 to 512 [ 30.091340][ T3286] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.104840][ T3302] netlink: 'syz.3.27': attribute type 6 has an invalid length. [ 30.116308][ T3286] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.129506][ T3286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.165300][ T3286] EXT4-fs (loop0): 1 truncate cleaned up [ 30.178453][ T3310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 30.204882][ T3286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.287568][ T3321] vlan2: entered allmulticast mode [ 30.457375][ T3079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.528464][ T3342] netlink: 'syz.0.40': attribute type 6 has an invalid length. [ 30.556033][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 30.834867][ T3363] vlan2: entered allmulticast mode [ 30.929135][ T3363] syz.0.49 (3363) used greatest stack depth: 10824 bytes left [ 30.940912][ T3367] netlink: 'syz.1.51': attribute type 6 has an invalid length. [ 30.951111][ T3369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 31.022449][ T3371] loop1: detected capacity change from 0 to 512 [ 31.032843][ T3371] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.048776][ T3371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.073808][ T3371] EXT4-fs (loop1): 1 truncate cleaned up [ 31.081114][ T3371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.164598][ T3393] loop0: detected capacity change from 0 to 128 [ 31.209558][ T3065] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 31.259914][ T3398] vlan2: entered allmulticast mode [ 31.290999][ T3403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 31.340295][ T3087] ================================================================== [ 31.348455][ T3087] BUG: KCSAN: data-race in __fsnotify_parent / fsnotify_put_mark [ 31.356294][ T3087] [ 31.358617][ T3087] write to 0xffff8881001ca324 of 4 bytes by task 3065 on cpu 1: [ 31.366249][ T3087] fsnotify_put_mark+0x2d8/0x5d0 [ 31.371202][ T3087] __se_sys_inotify_rm_watch+0x105/0x180 [ 31.376860][ T3087] __x64_sys_inotify_rm_watch+0x31/0x40 [ 31.382427][ T3087] x64_sys_call+0x1b06/0x2d70 [ 31.387205][ T3087] do_syscall_64+0xc9/0x1c0 [ 31.391730][ T3087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.397638][ T3087] [ 31.399964][ T3087] read to 0xffff8881001ca324 of 4 bytes by task 3087 on cpu 0: [ 31.407509][ T3087] __fsnotify_parent+0xd4/0x370 [ 31.412386][ T3087] __fput+0x1f7/0x660 [ 31.416381][ T3087] __fput_sync+0x44/0x60 [ 31.420628][ T3087] __se_sys_close+0x101/0x1b0 [ 31.425334][ T3087] __x64_sys_close+0x1f/0x30 [ 31.429935][ T3087] x64_sys_call+0x25f1/0x2d70 [ 31.434624][ T3087] do_syscall_64+0xc9/0x1c0 [ 31.439143][ T3087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.445052][ T3087] [ 31.447374][ T3087] value changed: 0x00002008 -> 0x00000000 [ 31.453095][ T3087] [ 31.455421][ T3087] Reported by Kernel Concurrency Sanitizer on: [ 31.461579][ T3087] CPU: 0 PID: 3087 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 31.471826][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 31.481898][ T3087] ================================================================== [ 31.516133][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.