last executing test programs: 4.65252285s ago: executing program 3 (id=4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x6332}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/17, 0x11}, 0x100}], 0x2, 0x14322, 0x0) 4.521602853s ago: executing program 3 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000060013000600000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) 4.458175714s ago: executing program 3 (id=17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 2.562224559s ago: executing program 0 (id=61): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x16a, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 2.450337732s ago: executing program 0 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) 2.410614903s ago: executing program 0 (id=69): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 2.351925814s ago: executing program 1 (id=71): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0) 2.271434266s ago: executing program 1 (id=72): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000334000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb08000140000000000900010073797a30000000000900020073797a32000000002c000000050a01020000000000000000020000000c00024000000000000000010900010073797a30"], 0xb4}}, 0x0) 2.066988941s ago: executing program 2 (id=75): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') pread64(r1, &(0x7f0000001240)=""/4085, 0xff5, 0x1) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 2.036586142s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="140800000000009465f381ab504f", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.966212573s ago: executing program 1 (id=77): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) 1.966016623s ago: executing program 2 (id=78): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_io_uring_setup(0x2, &(0x7f0000000600)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 1.912453565s ago: executing program 0 (id=79): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x7c, 0x23ff, 0x7ff, 0x0, 0xe}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 1.907447095s ago: executing program 2 (id=80): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000180)) 1.810332467s ago: executing program 0 (id=81): r0 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gadgetfs\x06', &(0x7f0000000200)='({^)\x18\x00', 0x0) 1.054347065s ago: executing program 0 (id=82): mlockall(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9f4c7000) setuid(0xee00) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 1.051156565s ago: executing program 4 (id=83): syz_open_dev$vcsu(&(0x7f0000000080), 0x5345, 0x101200) r0 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) 1.027029566s ago: executing program 1 (id=84): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x178, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14c, 0x2, [@TCA_BPF_ACT={0x148, 0x1, [@m_mpls={0xc4, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x95, 0x6, "eb877e9e8495a1a375598e9a962b37d7fb37fd7beedff7c43aabb2d9f821f15bffdd02aa75ac45706a461e3f2e6202a1e3e158f54d51dca102119e4ffe03c94e1c632c950939b990aac5ec4905ddae3ae7be3e3eff2673dcff3ff7f5cc0a424270ce1e9e77bbd63995aa924a5adafeb228c5227fa5e962452f8bcb7b8370e137610ff84b4d890b40c39300b160a2723f6f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x80, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x55, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 918.796368ms ago: executing program 2 (id=85): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 917.133488ms ago: executing program 1 (id=86): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0xfffffffffffffffc, 0x4, 0x8001, 0x4, 0x100, 0xbb, 0xfffffffffffff77a, 0x6, 0x100000001, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1002, 0x4, 0x4e, 0x403, 0x8000000000005a, 0x3, 0x1}) 718.267613ms ago: executing program 2 (id=87): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") 718.183803ms ago: executing program 4 (id=88): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000440)={&(0x7f00000003c0)="9324ee0d4547794f19d0f2010ad35d90184150e47c69a6ddd3a4b94a22f8cc16075981af0e116460279b11067b550e477429a4ee90a95903cedf7ef78f751390389cab3e9a94ef20c41eeff69980d1e74d1b7d1d7d931afe90e9d39f411e042e8288", 0x62}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) 706.759383ms ago: executing program 4 (id=89): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) 614.508165ms ago: executing program 4 (id=90): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 495.031868ms ago: executing program 2 (id=91): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[], 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 86.092438ms ago: executing program 3 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x2000}}]}}}]}, 0x78}}, 0xc040) 45.583309ms ago: executing program 3 (id=93): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000"], 0x15, 0x4850}}], 0x1, 0x20040804) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 36.485429ms ago: executing program 4 (id=94): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce220000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 0s ago: executing program 1 (id=95): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimes(0x0, 0x0) kernel console output (not intermixed with test programs): [ 23.693753][ T28] audit: type=1400 audit(1785001371.021:103): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.715814][ T28] audit: type=1400 audit(1785001371.021:104): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.799122][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 24.799139][ T28] audit: type=1400 audit(1785001372.131:114): avc: denied { write } for pid=3191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.833998][ T28] audit: type=1400 audit(1785001372.161:115): avc: denied { write } for pid=3202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.932669][ T28] audit: type=1400 audit(1785001372.261:116): avc: denied { write } for pid=3205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.962878][ T28] audit: type=1400 audit(1785001372.291:117): avc: denied { write } for pid=3216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.124744][ T28] audit: type=1400 audit(1785001372.451:118): avc: denied { write } for pid=3219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.154965][ T28] audit: type=1400 audit(1785001372.481:119): avc: denied { write } for pid=3230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.386513][ T28] audit: type=1400 audit(1785001372.721:120): avc: denied { write } for pid=3233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.417401][ T28] audit: type=1400 audit(1785001372.751:121): avc: denied { write } for pid=3245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.909740][ T28] audit: type=1400 audit(1785001374.241:122): avc: denied { write } for pid=3249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.940386][ T28] audit: type=1400 audit(1785001374.271:123): avc: denied { write } for pid=3260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 30.034406][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 30.034424][ T28] audit: type=1400 audit(1785001377.361:126): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.063614][ T28] audit: type=1400 audit(1785001377.391:127): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.066209][ T3281] cgroup: Unknown subsys name 'net' [ 30.091496][ T28] audit: type=1400 audit(1785001377.421:128): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.206525][ T3281] cgroup: Unknown subsys name 'cpuset' [ 30.212808][ T3281] cgroup: Unknown subsys name 'rlimit' [ 30.323958][ T28] audit: type=1400 audit(1785001377.651:129): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.347474][ T28] audit: type=1400 audit(1785001377.661:130): avc: denied { create } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.375112][ T28] audit: type=1400 audit(1785001377.661:131): avc: denied { write } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.396491][ T28] audit: type=1400 audit(1785001377.661:132): avc: denied { read } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.417306][ T28] audit: type=1400 audit(1785001377.681:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.432594][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.439029][ T28] audit: type=1400 audit(1785001377.681:134): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.472041][ T28] audit: type=1400 audit(1785001377.681:135): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.542801][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.847534][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.854785][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.862103][ T3295] bridge_slave_0: entered allmulticast mode [ 31.868731][ T3295] bridge_slave_0: entered promiscuous mode [ 31.875647][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.882818][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.890002][ T3296] bridge_slave_0: entered allmulticast mode [ 31.896770][ T3296] bridge_slave_0: entered promiscuous mode [ 31.921106][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.928417][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.935607][ T3295] bridge_slave_1: entered allmulticast mode [ 31.942328][ T3295] bridge_slave_1: entered promiscuous mode [ 31.948957][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.956145][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.963385][ T3296] bridge_slave_1: entered allmulticast mode [ 31.969830][ T3296] bridge_slave_1: entered promiscuous mode [ 32.037684][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.048060][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.059893][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.067208][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.074394][ T3300] bridge_slave_0: entered allmulticast mode [ 32.080931][ T3300] bridge_slave_0: entered promiscuous mode [ 32.093074][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.103416][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.115412][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.122686][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.129882][ T3300] bridge_slave_1: entered allmulticast mode [ 32.136434][ T3300] bridge_slave_1: entered promiscuous mode [ 32.168507][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.175686][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.182901][ T3299] bridge_slave_0: entered allmulticast mode [ 32.189498][ T3299] bridge_slave_0: entered promiscuous mode [ 32.202724][ T3296] team0: Port device team_slave_0 added [ 32.217608][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.224948][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.232152][ T3299] bridge_slave_1: entered allmulticast mode [ 32.238741][ T3299] bridge_slave_1: entered promiscuous mode [ 32.245782][ T3295] team0: Port device team_slave_0 added [ 32.252269][ T3296] team0: Port device team_slave_1 added [ 32.264368][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.274932][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.290115][ T3295] team0: Port device team_slave_1 added [ 32.305194][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.312436][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.319624][ T3302] bridge_slave_0: entered allmulticast mode [ 32.326150][ T3302] bridge_slave_0: entered promiscuous mode [ 32.351510][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.358734][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.366063][ T3302] bridge_slave_1: entered allmulticast mode [ 32.372648][ T3302] bridge_slave_1: entered promiscuous mode [ 32.384676][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.394176][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.401310][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.427258][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.438416][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.445422][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.471542][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.482916][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.489943][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.516240][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.532811][ T3300] team0: Port device team_slave_0 added [ 32.539708][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.549109][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.556197][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.582275][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.601062][ T3300] team0: Port device team_slave_1 added [ 32.619493][ T3299] team0: Port device team_slave_0 added [ 32.627267][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.646927][ T3299] team0: Port device team_slave_1 added [ 32.659456][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.674020][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.681146][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.707308][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.744365][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.751500][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.777608][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.793492][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.800620][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.827148][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.844150][ T3302] team0: Port device team_slave_0 added [ 32.850855][ T3302] team0: Port device team_slave_1 added [ 32.862915][ T3296] hsr_slave_0: entered promiscuous mode [ 32.869139][ T3296] hsr_slave_1: entered promiscuous mode [ 32.875491][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.882553][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.908729][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.921897][ T3295] hsr_slave_0: entered promiscuous mode [ 32.927936][ T3295] hsr_slave_1: entered promiscuous mode [ 32.933972][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 32.939755][ T3295] Cannot create hsr debugfs directory [ 32.956272][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.963286][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.989659][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.003915][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.010964][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.037046][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.076944][ T3302] hsr_slave_0: entered promiscuous mode [ 33.083107][ T3302] hsr_slave_1: entered promiscuous mode [ 33.089032][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.094775][ T3302] Cannot create hsr debugfs directory [ 33.127660][ T3300] hsr_slave_0: entered promiscuous mode [ 33.133675][ T3300] hsr_slave_1: entered promiscuous mode [ 33.139667][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.145478][ T3300] Cannot create hsr debugfs directory [ 33.174927][ T3299] hsr_slave_0: entered promiscuous mode [ 33.181417][ T3299] hsr_slave_1: entered promiscuous mode [ 33.187691][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 33.193478][ T3299] Cannot create hsr debugfs directory [ 33.383249][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.392165][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.399971][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.408693][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.416547][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.425354][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.436106][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.445225][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.465841][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.474398][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.485111][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.494120][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.502266][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.511018][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.519432][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.527954][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.560905][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.569626][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.577605][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.586584][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.594578][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.603898][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.611750][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.620364][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.659087][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.668207][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.679357][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.688058][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.696575][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.705530][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.713519][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.722628][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.771271][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.793447][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.801266][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.810024][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.818242][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.826662][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.834370][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.843413][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.853078][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.862102][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.884307][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.893429][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.911697][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.918928][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.930231][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.939963][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.951941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.959095][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.969352][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.976479][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.990317][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.997710][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.009436][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.016642][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.037290][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.044393][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.062843][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.091043][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.108004][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.115120][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.124466][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.131574][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.174621][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.212667][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.243551][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.250853][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.269534][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.276765][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.433851][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.466581][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.505895][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.576539][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.608080][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.689729][ T3296] veth0_vlan: entered promiscuous mode [ 34.708641][ T3296] veth1_vlan: entered promiscuous mode [ 34.723681][ T3295] veth0_vlan: entered promiscuous mode [ 34.746892][ T3296] veth0_macvtap: entered promiscuous mode [ 34.760441][ T3295] veth1_vlan: entered promiscuous mode [ 34.775608][ T3296] veth1_macvtap: entered promiscuous mode [ 34.800751][ T3302] veth0_vlan: entered promiscuous mode [ 34.818733][ T3302] veth1_vlan: entered promiscuous mode [ 34.829786][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.847639][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.855958][ T3295] veth0_macvtap: entered promiscuous mode [ 34.868777][ T3299] veth0_vlan: entered promiscuous mode [ 34.888636][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.898203][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.908208][ T3300] veth0_vlan: entered promiscuous mode [ 34.916903][ T3299] veth1_vlan: entered promiscuous mode [ 34.926451][ T3295] veth1_macvtap: entered promiscuous mode [ 34.932813][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.941655][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.952128][ T3300] veth1_vlan: entered promiscuous mode [ 34.977312][ T3302] veth0_macvtap: entered promiscuous mode [ 34.987414][ T3300] veth0_macvtap: entered promiscuous mode [ 34.997420][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.015596][ T3299] veth0_macvtap: entered promiscuous mode [ 35.023383][ T3302] veth1_macvtap: entered promiscuous mode [ 35.031368][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.039384][ T3300] veth1_macvtap: entered promiscuous mode [ 35.047447][ T3299] veth1_macvtap: entered promiscuous mode [ 35.048843][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.064505][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.087499][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.096680][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 35.096695][ T28] audit: type=1400 audit(1785001382.421:155): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.128175][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137352][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.149402][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.154739][ T28] audit: type=1400 audit(1785001382.421:156): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.160229][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.182191][ T28] audit: type=1400 audit(1785001382.421:157): avc: denied { ioctl } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.215057][ T28] audit: type=1400 audit(1785001382.551:158): avc: denied { prog_load } for pid=3501 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.234214][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 35.235559][ T28] audit: type=1400 audit(1785001382.551:159): avc: denied { bpf } for pid=3501 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.245131][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 35.272587][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.285531][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.297152][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.313317][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.329587][ T311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.331793][ T3505] netlink: 'syz.2.6': attribute type 11 has an invalid length. [ 35.339949][ T311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.347901][ T3505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6'. [ 35.378420][ T311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.387651][ T311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.403636][ T311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.413010][ T311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.432580][ T311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.446236][ T311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.474484][ T28] audit: type=1400 audit(1785001382.801:160): avc: denied { mount } for pid=3508 comm="syz.2.7" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.504633][ T311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.515504][ T311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.534266][ T311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.544208][ T311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.562799][ T28] audit: type=1400 audit(1785001382.891:161): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.639602][ T28] audit: type=1400 audit(1785001382.911:162): avc: denied { name_bind } for pid=3513 comm="syz.0.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.719648][ T28] audit: type=1400 audit(1785001383.011:163): avc: denied { map_create } for pid=3521 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.747066][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.775156][ T28] audit: type=1400 audit(1785001383.011:164): avc: denied { map_read map_write } for pid=3521 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.946847][ T3544] loop4: detected capacity change from 0 to 2048 [ 36.079123][ T3544] loop4: p1 p3 p4 [ 36.111120][ T3544] loop4: p4 size 589824 extends beyond EOD, truncated [ 36.220950][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 36.230852][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 36.242390][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 36.342180][ T3553] syz.0.21 (3553) used greatest stack depth: 11256 bytes left [ 36.485646][ T3558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.496803][ T3558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.531347][ T3576] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 36.594780][ T3580] ======================================================= [ 36.594780][ T3580] WARNING: The mand mount option has been deprecated and [ 36.594780][ T3580] and is ignored by this kernel. Remove the mand [ 36.594780][ T3580] option from the mount to silence this warning. [ 36.594780][ T3580] ======================================================= [ 36.834986][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 37.330938][ T3617] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 37.395120][ T3621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 37.533671][ T3627] tap0: tun_chr_ioctl cmd 1074025677 [ 37.539782][ T3627] tap0: linktype set to 774 [ 37.837753][ T3645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 37.869809][ T3645] Zero length message leads to an empty skb [ 37.968088][ T3653] capability: warning: `syz.2.68' uses 32-bit capabilities (legacy support in use) [ 38.011702][ T3653] program syz.2.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.040488][ T3657] loop4: detected capacity change from 0 to 1024 [ 38.075467][ T3657] EXT4-fs: Ignoring removed bh option [ 38.133411][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.209132][ T3657] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.321417][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.671205][ T3701] loop2: detected capacity change from 0 to 512 [ 39.727030][ T3701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.788394][ T3701] EXT4-fs (loop2): 1 orphan inode deleted [ 39.798800][ T3701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.811766][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 39.823399][ T12] loop2: lost filesystem error report for type 5 error -117 [ 39.823786][ T3701] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.118622][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.271147][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 40.271165][ T28] audit: type=1400 audit(1785001643.606:234): avc: denied { execute } for pid=3708 comm="syz.2.91" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 40.338087][ T3713] loop3: detected capacity change from 0 to 256 [ 40.374370][ T3376] ================================================================== [ 40.382516][ T3376] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 40.389659][ T3376] [ 40.392007][ T3376] read-write to 0xffff888237c2a8e4 of 4 bytes by task 9 on cpu 0: [ 40.399812][ T3376] wq_worker_running+0x9b/0x120 [ 40.404688][ T3376] schedule_timeout+0xca/0x180 [ 40.409480][ T3376] wait_for_common+0xef/0x1d0 [ 40.414175][ T3376] usb_start_wait_urb+0x12c/0x220 [ 40.419240][ T3376] usb_control_msg+0x182/0x240 [ 40.424016][ T3376] hub_ext_port_status+0xc2/0x470 [ 40.429055][ T3376] hub_event+0x47e/0x2aa0 [ 40.433424][ T3376] process_scheduled_works+0x4d4/0x9a0 [ 40.438895][ T3376] worker_thread+0x569/0x750 [ 40.443502][ T3376] kthread+0x221/0x270 [ 40.447601][ T3376] ret_from_fork+0x146/0x330 [ 40.452297][ T3376] ret_from_fork_asm+0x1a/0x30 [ 40.457129][ T3376] [ 40.459459][ T3376] read to 0xffff888237c2a8e4 of 4 bytes by task 3376 on cpu 1: [ 40.467010][ T3376] kick_pool+0x49/0x2d0 [ 40.471194][ T3376] __queue_work+0x8e9/0xb90 [ 40.475744][ T3376] queue_work_on+0xa9/0x140 [ 40.480272][ T3376] process_srcu+0xa39/0xd90 [ 40.484802][ T3376] process_scheduled_works+0x4d4/0x9a0 [ 40.490279][ T3376] worker_thread+0x569/0x750 [ 40.494924][ T3376] kthread+0x221/0x270 [ 40.499036][ T3376] ret_from_fork+0x146/0x330 [ 40.503652][ T3376] ret_from_fork_asm+0x1a/0x30 [ 40.508464][ T3376] [ 40.510807][ T3376] value changed: 0x00000000 -> 0x00000001 [ 40.516622][ T3376] [ 40.518951][ T3376] Reported by Kernel Concurrency Sanitizer on: [ 40.525123][ T3376] CPU: 1 UID: 0 PID: 3376 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.534523][ T3376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 40.544675][ T3376] Workqueue: rcu_gp process_srcu [ 40.549663][ T3376] ================================================================== [ 40.590343][ T28] audit: type=1400 audit(1785001643.926:235): avc: denied { mount } for pid=3712 comm="syz.3.93" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.650688][ T28] audit: type=1400 audit(1785001643.976:236): avc: denied { read write } for pid=3712 comm="syz.3.93" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.696589][ T28] audit: type=1400 audit(1785001643.976:237): avc: denied { open } for pid=3712 comm="syz.3.93" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.743715][ T28] audit: type=1400 audit(1785001643.996:238): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.695431][ T3686] syz.2.80 (3686) used greatest stack depth: 11168 bytes left