last executing test programs: 1.324876945s ago: executing program 3 (id=4): r0 = semget$private(0x0, 0x4000000009, 0x42a) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000180), 0xda0ee37e35a9928a) shutdown(0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r2, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) 889.368826ms ago: executing program 4 (id=5): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') 775.230531ms ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 700.942715ms ago: executing program 1 (id=7): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) 631.815849ms ago: executing program 2 (id=3): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="17", 0x1}], 0x1}, 0xc000) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 595.056771ms ago: executing program 1 (id=8): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40009}, 0x40804) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'xfrm0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 530.363204ms ago: executing program 1 (id=9): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5, 0x2}, 0x8) 502.760665ms ago: executing program 1 (id=10): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 446.242458ms ago: executing program 0 (id=1): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007c80)=[{&(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000002900)=[@sndrcv={0x30, 0x84, 0x1, {0x765, 0xf5c8, 0x20b, 0xfffffff9, 0x3, 0x7, 0x7, 0x1, r3}}], 0x30, 0x4000080}], 0x1, 0x4000888) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r3, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f00000000c0)=0x84) 429.397229ms ago: executing program 3 (id=11): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 408.25036ms ago: executing program 3 (id=12): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="9a", 0x1}], 0x1) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 384.415951ms ago: executing program 0 (id=13): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xca, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 343.797533ms ago: executing program 0 (id=14): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0xc49, 0x1, 0x0, 0x0) r3 = msgget$private(0x0, 0x7ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgrcv(r3, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r3, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) 260.710767ms ago: executing program 3 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012100800083a00fe8000000000000000000000000000bbfe800000000004"], 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 61.099507ms ago: executing program 1 (id=16): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x1}, 0x40010000) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="1843464c42450bd173d61b75181053e7d6e9333c6c4e4418", 0x18}], 0x1}, 0x20000001) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 36.294348ms ago: executing program 3 (id=17): socket$kcm(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}}) socket(0x1d, 0x2, 0x6) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffdef, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 0s ago: executing program 3 (id=18): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x9002}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x3, r1, 0x72fb2cc9}, 0xc) kernel console output (not intermixed with test programs): [ 17.865390][ T28] audit: type=1400 audit(1774357743.959:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.887623][ T28] audit: type=1400 audit(1774357743.959:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.910500][ T28] audit: type=1400 audit(1774357743.959:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.933664][ T28] audit: type=1400 audit(1774357743.959:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.956970][ T28] audit: type=1400 audit(1774357743.959:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 22.565805][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 22.565820][ T28] audit: type=1400 audit(1774357748.659:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.595506][ T28] audit: type=1400 audit(1774357748.689:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.596447][ T3299] cgroup: Unknown subsys name 'net' [ 22.623662][ T28] audit: type=1400 audit(1774357748.709:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.755418][ T3299] cgroup: Unknown subsys name 'cpuset' [ 22.761569][ T3299] cgroup: Unknown subsys name 'rlimit' [ 22.891541][ T28] audit: type=1400 audit(1774357748.979:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.926259][ T28] audit: type=1400 audit(1774357748.979:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.947283][ T28] audit: type=1400 audit(1774357748.979:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.968347][ T28] audit: type=1400 audit(1774357748.979:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.989400][ T28] audit: type=1400 audit(1774357748.989:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.995242][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.010625][ T28] audit: type=1400 audit(1774357749.009:78): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.045318][ T28] audit: type=1400 audit(1774357749.009:79): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.082003][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.902448][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.998359][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.005755][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.013152][ T3311] bridge_slave_0: entered allmulticast mode [ 25.020012][ T3311] bridge_slave_0: entered promiscuous mode [ 25.029359][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.036541][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.043729][ T3311] bridge_slave_1: entered allmulticast mode [ 25.050279][ T3311] bridge_slave_1: entered promiscuous mode [ 25.089490][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.102112][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.134576][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 25.153607][ T3311] team0: Port device team_slave_0 added [ 25.162284][ T3311] team0: Port device team_slave_1 added [ 25.176634][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 25.193215][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 25.223696][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.231290][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.257821][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.273274][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.280358][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.306808][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.346529][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.378074][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.385332][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.392484][ T3310] bridge_slave_0: entered allmulticast mode [ 25.399069][ T3310] bridge_slave_0: entered promiscuous mode [ 25.408165][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.415861][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.423190][ T3315] bridge_slave_0: entered allmulticast mode [ 25.429721][ T3315] bridge_slave_0: entered promiscuous mode [ 25.440693][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.448089][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.455628][ T3315] bridge_slave_1: entered allmulticast mode [ 25.462302][ T3315] bridge_slave_1: entered promiscuous mode [ 25.481700][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.488821][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.496353][ T3310] bridge_slave_1: entered allmulticast mode [ 25.502967][ T3310] bridge_slave_1: entered promiscuous mode [ 25.514427][ T3311] hsr_slave_0: entered promiscuous mode [ 25.520621][ T3311] hsr_slave_1: entered promiscuous mode [ 25.527770][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.554517][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.561911][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.569194][ T3314] bridge_slave_0: entered allmulticast mode [ 25.575969][ T3314] bridge_slave_0: entered promiscuous mode [ 25.583731][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.607040][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.614321][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.622108][ T3314] bridge_slave_1: entered allmulticast mode [ 25.628959][ T3314] bridge_slave_1: entered promiscuous mode [ 25.648085][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.658528][ T3315] team0: Port device team_slave_0 added [ 25.665284][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.693058][ T3315] team0: Port device team_slave_1 added [ 25.699865][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.710280][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.749724][ T3310] team0: Port device team_slave_0 added [ 25.755523][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.762619][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.770005][ T3316] bridge_slave_0: entered allmulticast mode [ 25.776616][ T3316] bridge_slave_0: entered promiscuous mode [ 25.787944][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.795054][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.821140][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.835039][ T3310] team0: Port device team_slave_1 added [ 25.845427][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.852583][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.859971][ T3316] bridge_slave_1: entered allmulticast mode [ 25.866588][ T3316] bridge_slave_1: entered promiscuous mode [ 25.873731][ T3314] team0: Port device team_slave_0 added [ 25.879906][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.887097][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.913170][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.941898][ T3314] team0: Port device team_slave_1 added [ 25.954414][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.962112][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.988602][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.028627][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.035810][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.062453][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.074596][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.095826][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.102917][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.129223][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.140373][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.147525][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.174163][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.189869][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.201287][ T3315] hsr_slave_0: entered promiscuous mode [ 26.207694][ T3315] hsr_slave_1: entered promiscuous mode [ 26.213504][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 26.219310][ T3315] Cannot create hsr debugfs directory [ 26.241802][ T3310] hsr_slave_0: entered promiscuous mode [ 26.248116][ T3310] hsr_slave_1: entered promiscuous mode [ 26.254491][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 26.260247][ T3310] Cannot create hsr debugfs directory [ 26.294566][ T3316] team0: Port device team_slave_0 added [ 26.308356][ T3316] team0: Port device team_slave_1 added [ 26.332534][ T3314] hsr_slave_0: entered promiscuous mode [ 26.338703][ T3314] hsr_slave_1: entered promiscuous mode [ 26.344947][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 26.350692][ T3314] Cannot create hsr debugfs directory [ 26.382538][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.390237][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.416647][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.430170][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.441435][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.454553][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.461615][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.488152][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.506552][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.527727][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.569823][ T3316] hsr_slave_0: entered promiscuous mode [ 26.576142][ T3316] hsr_slave_1: entered promiscuous mode [ 26.582015][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 26.588024][ T3316] Cannot create hsr debugfs directory [ 26.635474][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.646658][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.661859][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.671317][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.735445][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.748855][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.758204][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.769440][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.779386][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.811799][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.821086][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.830223][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.839828][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.856400][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.879241][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.886539][ T1633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.895957][ T1633] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.903180][ T1633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.912858][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.921819][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.936017][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.945691][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.962955][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.975992][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.003649][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.010901][ T2233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.024065][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.031168][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.041961][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.055408][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.096752][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.133925][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.141188][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.152266][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.159417][ T2233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.171174][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.206464][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.223866][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.243116][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.270965][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.284100][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.309895][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.316979][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.330399][ T3311] veth0_vlan: entered promiscuous mode [ 27.353334][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.360701][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.386115][ T3311] veth1_vlan: entered promiscuous mode [ 27.397494][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.409630][ T3311] veth0_macvtap: entered promiscuous mode [ 27.419539][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.444298][ T2233] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.451532][ T2233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.466393][ T2233] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.473584][ T2233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.487277][ T3311] veth1_macvtap: entered promiscuous mode [ 27.502997][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.522157][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.564206][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.571786][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.585413][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.596955][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 27.596981][ T28] audit: type=1400 audit(1774357753.689:90): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.ASK0f7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.605201][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.640905][ T28] audit: type=1400 audit(1774357753.689:91): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.641246][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.670891][ T28] audit: type=1400 audit(1774357753.689:92): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.ASK0f7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.701438][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.704967][ T28] audit: type=1400 audit(1774357753.689:93): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.739446][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.752063][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.757479][ T28] audit: type=1400 audit(1774357753.689:94): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.ASK0f7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.802275][ T3310] veth0_vlan: entered promiscuous mode [ 27.813356][ T3310] veth1_vlan: entered promiscuous mode [ 27.819983][ T3315] veth0_vlan: entered promiscuous mode [ 27.824850][ T28] audit: type=1400 audit(1774357753.689:95): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.ASK0f7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.827605][ T3315] veth1_vlan: entered promiscuous mode [ 27.859451][ T28] audit: type=1400 audit(1774357753.689:96): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.870636][ T3315] veth0_macvtap: entered promiscuous mode [ 27.884999][ T28] audit: type=1400 audit(1774357753.729:97): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.902069][ T3310] veth0_macvtap: entered promiscuous mode [ 27.913623][ T28] audit: type=1400 audit(1774357753.729:98): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=3984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.936725][ T3474] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 27.949802][ T3315] veth1_macvtap: entered promiscuous mode [ 27.956663][ T28] audit: type=1400 audit(1774357753.829:99): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.976544][ T3310] veth1_macvtap: entered promiscuous mode [ 27.998323][ T3314] veth0_vlan: entered promiscuous mode [ 28.006552][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.016254][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.030637][ T3314] veth1_vlan: entered promiscuous mode [ 28.040561][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.048372][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.058335][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.071139][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.078795][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.087782][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.104065][ T2233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.114390][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.125589][ T1633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.136105][ T1633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.145290][ T1633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.167127][ T3314] veth0_macvtap: entered promiscuous mode [ 28.206840][ T3314] veth1_macvtap: entered promiscuous mode [ 28.252835][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.269797][ T3485] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.277302][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.301380][ T1633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.311681][ T1633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.326884][ T1633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.344452][ T1633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.358968][ T3316] veth0_vlan: entered promiscuous mode [ 28.375817][ T3316] veth1_vlan: entered promiscuous mode [ 28.413294][ T3316] veth0_macvtap: entered promiscuous mode [ 28.436809][ T3316] veth1_macvtap: entered promiscuous mode [ 28.481201][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.500619][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.519880][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.529311][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.539366][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.551273][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.099519][ T3528] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 29.108040][ T3489] ================================================================== [ 29.116159][ T3489] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 29.123374][ T3489] [ 29.125692][ T3489] read-write to 0xffff8881035aaaec of 4 bytes by task 3482 on cpu 0: [ 29.133745][ T3489] fifo_open+0x86/0x5d0 [ 29.138079][ T3489] do_dentry_open+0x4ca/0xa90 [ 29.142844][ T3489] vfs_open+0x37/0x1e0 [ 29.147107][ T3489] path_openat+0x1b70/0x2050 [ 29.151798][ T3489] do_file_open+0x16c/0x290 [ 29.156354][ T3489] do_sys_openat2+0x94/0x130 [ 29.160960][ T3489] __x64_sys_creat+0x65/0x90 [ 29.165730][ T3489] x64_sys_call+0x2ea0/0x3020 [ 29.170489][ T3489] do_syscall_64+0x12c/0x370 [ 29.175069][ T3489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.181237][ T3489] [ 29.183639][ T3489] read to 0xffff8881035aaaec of 4 bytes by task 3489 on cpu 1: [ 29.191179][ T3489] wait_for_partner+0x117/0x1e0 [ 29.196204][ T3489] fifo_open+0x4b1/0x5d0 [ 29.200426][ T3489] do_dentry_open+0x4ca/0xa90 [ 29.205097][ T3489] vfs_open+0x37/0x1e0 [ 29.209214][ T3489] path_openat+0x1b70/0x2050 [ 29.213889][ T3489] do_file_open+0x16c/0x290 [ 29.218388][ T3489] file_open_name+0xfa/0x120 [ 29.223007][ T3489] __se_sys_acct+0x8c/0x500 [ 29.227501][ T3489] __x64_sys_acct+0x1f/0x30 [ 29.232002][ T3489] x64_sys_call+0x2e7f/0x3020 [ 29.236672][ T3489] do_syscall_64+0x12c/0x370 [ 29.241275][ T3489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.247188][ T3489] [ 29.249512][ T3489] value changed: 0x00000001 -> 0x00000002 [ 29.255213][ T3489] [ 29.257523][ T3489] Reported by Kernel Concurrency Sanitizer on: [ 29.263762][ T3489] CPU: 1 UID: 0 PID: 3489 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 29.272788][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.282947][ T3489] ================================================================== [ 29.315565][ C1] hrtimer: interrupt took 26746 ns