last executing test programs: 4.931761913s ago: executing program 3 (id=384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 4.049117201s ago: executing program 4 (id=391): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x2000}, 0x28) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.850844379s ago: executing program 4 (id=395): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c300e0ff0000000095000000000000003d5f2c6999f6f59f090fe21194843354b1a168b08d6b60abc55a66dee6fde1b7f2c651cd5d239657d7a43356216f4abc79f35851f2051c419e2fc74910a6a90b06e53a4ce43a59391e0cfc920735b82c807fa1416549dcb87e8abac0d3e4aa31e2496efa69191bff32b5f0ca242e9f213a6a"], 0x0, 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x20}}, 0x8000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='(]\x00', &(0x7f0000000180)='./file0\x00', r2) 2.654405465s ago: executing program 4 (id=396): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f00000000c0)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Eb2z7zzzzjOz43l2NtrZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiqc9UKtXkYEQsnU0Hq8+0mgtbzO+P9/N1zRbrjUiK/2J0NA51uw793+rs+4pfx+NI99GRGC2a0bh29333PPa/w0P95bdI6JM6tsO4JOKNIqnLzw1F3I5E7qDv/OyWF/nnSvF7Lmvk7Wa+UJvL0rzdTKenpioPnZltp7P5fNY+1+5kC2m9ldU6zVZ6sn4qrU5PT6bZ+LnmUmNupjaf9Tsf/fJEpTKVPjW+mNVa7WbjoafG2/Uz+fx83pgrYyYqr0YR82hxID6dd9JOVltI04uXli9MbpdqEVRd17N/3fN15MF7Pnzlg79dulAckIMGSXoH5kS1OjFRnXpk+pFHK5XhicrE+o7KBnEjIoYiiojbctDyWXdg9SSxeydv+JSGuvU/Yj7yaMRSnI000hgqf6/+jMRozEQrmrFQPP7DyIb5N9X/Lzz0l99ttd6yfr9VFPXRG1X+0Orsw1HW/6PdR0cH1P/ipLwxj539HLjVJa78NuK9bjZr+6/Ga3EtLsdzsRzLcSFevjHnk+d2W3+Gdhg32n8mto6biywakUc7mpHHQtTKnrTXk8Z0TMVUVOKZOBOz0Y40ZiOP+ciiHeeiHZ3IyiOqHq3IohadaEYr0jgZ9TgVaVRjOqZjMtLIYjzORTOWohFzMRO1cpSLcanc75Mb8rrvm88mb/z+w7eL6RtB1S02JClezBVBf13Xvf446RXzB2JH9f9Abw+uj0giHd7jWsSu6v9T2Wn8Lpy1YXeslPV/eK/TAAAAAG6jpHz3PYmIkbi/nJrN57Ov7XVaAAAAwC4q/675SNGMFFP3R1Jc/1c2iXz/jucGAAAA7I6k/IxdEhFj8UB3qv9xqc3eBAAAAAD+A5X///9o0YxFvF52uP4HAACAz5lvDbrH/gf7evfYby/uT+7qRS+efTC5Uiumald6fb3mqzdG7MweTg72BimbqeFrdycRMVzPjiT9u19+vL/bflSOcHj1BoSD7vWftFojyfXBCcTWCZSP4rtxrBtz7Hy3Pd+f013L2Gw+n43Xm/OPVZPemyOdV1649I2IYu3fbiwcTOLipeUL48+/uHy+zOV6Mcr1K73bwye3kMtKbw/E/Ztv8Uj5QYzeese6662s3f6h7uJDW68zWbvON+N4N+b4WLcdW7/9o8U6q+OPVaNWOzjUyc52XllZs/W9LKqfcsvfjBPdmBMnT3SbTbKYWJfFCzdnMbE2i53tiy2zKPSzePvY62f//qtmkk1ul8Xkp8wCYK9cLO/6s1qFDpRV6F8rXUX931B3+3c13/Qs98Wf9M6hG85yF1dfZfSXX1PrhmN3qvubcbIM+cXJ7uuJ4cPr6soTZV2pbHJGf+nSS7/undEffveHP/r60d/8eLW6bThHP9F9VTA4i3fjVDey18S9v7ypuhVDVMs9+70NVfWdYol3BlbV9vxEMlLs+f+5Mbt8niJiYnKq8nCl8shEjJQvFXrN4Ez37/woAeDzZtvv2NnBt/A8vPlVdfQr3r03/qRgPJ6PF2M5zsfp8tMGEfHA5qOOrfkzhNPbXLWOrfmGl9PbXFuuxk5sjN1/IokBsZNr9tj//6Bs/nH7nhMAuN2Ob1OHd1L/T/euu2Pz6+4NtfxU94tz+1fHMbiWb+Yrt3uHAMB/gaz1UTLWeStptfLFZ6rT09Va50yWtpr1p9NWPjOXpXmjk7XqZ2qNuSxdbDU7zXr/DfGZrJ22lxYXmx930tlmK11stvOz5Te/p72vfm9nC7XGq1FvL85ntXaW1puNTq3eSWfydj1dXHpyPm+fyVrlwu3FrJ7P5vVaJ2820nZzqVXPxtO0nWVrAvOZrNHJZ/NispEutvKFWut6RMwvLWTpTNaut/LFTrM7YH9deWO22VqoDdj8P9/BXQ0AnxlXX7t2+bnl5Qsvr59YSTb2bD7xxx3EXI1Y2evNBADWWFulAQAAAAAAAAAAAACAz6abP65X9G77kb61EyNxC8EbJvbHJ1nq8zvxpfe6T8tuDLjJOPu2XOqu1Z4D657Tfb2DZe/3zy1PPPv445cHxTz5+qEzf8oith9n838pV+++6eiNtw5G7Pvp97s9T9ypLX0/ulsRw7e0+EqyRcyenZIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKB/BwAA//8J+U2N") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100"], 0x48) r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000180)=0xb) 1.671890247s ago: executing program 4 (id=402): socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) 1.382202856s ago: executing program 2 (id=405): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18f3ffff01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 1.306048688s ago: executing program 2 (id=408): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0x8}}}, &(0x7f0000000140)=0x84) r0 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x802) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x800) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) 1.232516291s ago: executing program 2 (id=410): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.220353241s ago: executing program 3 (id=384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.177175012s ago: executing program 3 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40805}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.113679105s ago: executing program 3 (id=413): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x20000000, 0x0) timerfd_create(0x1, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1.082003345s ago: executing program 2 (id=414): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, 0x0) 1.011205708s ago: executing program 0 (id=415): r0 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) 1.009542668s ago: executing program 2 (id=416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x7, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 933.60769ms ago: executing program 3 (id=417): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 840.526543ms ago: executing program 0 (id=418): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x3c8, 0x2f8, 0x2f8, 0x0, 0x3c8, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [0x0, 0xffffffff], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@ipv6={@private0, @remote, [0xff000000], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 796.850495ms ago: executing program 1 (id=419): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 780.078925ms ago: executing program 0 (id=420): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x209, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x8, 0x0, 0x0, 0x20000000}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 740.095646ms ago: executing program 1 (id=421): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r1, 0x1) 707.208418ms ago: executing program 0 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 661.435009ms ago: executing program 4 (id=423): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x2040400) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x640080, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 589.204261ms ago: executing program 0 (id=424): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x5}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x9c}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0x4, 0x8}, {0x2, 0x0, 0xf, 0x8}], 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 588.882541ms ago: executing program 4 (id=425): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) 495.441784ms ago: executing program 1 (id=426): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 408.995347ms ago: executing program 0 (id=427): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x30012}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 368.971368ms ago: executing program 1 (id=428): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000), 0x598920d9ddedd54a, 0x3}}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 351.044879ms ago: executing program 1 (id=429): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x180, 0x0, 0x0, 0x308, 0x308, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={{}, {0x5, 0x400, 'bm\x00', "40636f53c22242659aa55f0c4e93d0424f3618e5fb405d94ecaca3ad0eb6598e7cd28455d20ac15e0a4bd7701f84472ef2415fc1dbfa8442240796cd9f53908b31766f7608cbc41260396685637e7995552f53174d29a6db74a62512bea357b04005ca3a841238c3becf753080a2043e3a78d683b1e60fdc2ece67bd672b1f09", 0x1e, 0x3, {0x80}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x0, 0xbbff6ca0a9dbfd9f}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffed) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, 0x0}) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000800000008", @ANYRES8, @ANYRES16], 0x50) 302.28287ms ago: executing program 1 (id=430): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) 144.121715ms ago: executing program 2 (id=431): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 0s ago: executing program 3 (id=432): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) close(r1) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) kernel console output (not intermixed with test programs): [ 25.668210][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 25.668228][ T28] audit: type=1400 audit(1780187063.641:123): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.702834][ T28] audit: type=1400 audit(1780187063.681:124): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 33.355089][ T28] audit: type=1400 audit(1780187071.331:125): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.378241][ T28] audit: type=1400 audit(1780187071.351:126): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.380595][ T3286] cgroup: Unknown subsys name 'net' [ 33.406085][ T28] audit: type=1400 audit(1780187071.381:127): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.503712][ T3286] cgroup: Unknown subsys name 'cpuset' [ 33.510098][ T3286] cgroup: Unknown subsys name 'rlimit' [ 33.621043][ T28] audit: type=1400 audit(1780187071.591:128): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.650786][ T28] audit: type=1400 audit(1780187071.601:129): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.672993][ T28] audit: type=1400 audit(1780187071.601:130): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.694382][ T28] audit: type=1400 audit(1780187071.601:131): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.714947][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.714948][ T28] audit: type=1400 audit(1780187071.611:132): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.715027][ T28] audit: type=1400 audit(1780187071.611:133): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.772015][ T28] audit: type=1400 audit(1780187071.621:134): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.801126][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.098705][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.106138][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.113360][ T3299] bridge_slave_0: entered allmulticast mode [ 35.119851][ T3299] bridge_slave_0: entered promiscuous mode [ 35.147983][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.155235][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.162417][ T3299] bridge_slave_1: entered allmulticast mode [ 35.169145][ T3299] bridge_slave_1: entered promiscuous mode [ 35.203306][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.210424][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.217723][ T3304] bridge_slave_0: entered allmulticast mode [ 35.224215][ T3304] bridge_slave_0: entered promiscuous mode [ 35.244783][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.251892][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.259089][ T3304] bridge_slave_1: entered allmulticast mode [ 35.265538][ T3304] bridge_slave_1: entered promiscuous mode [ 35.277914][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.305957][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.340791][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.347972][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.355272][ T3298] bridge_slave_0: entered allmulticast mode [ 35.361738][ T3298] bridge_slave_0: entered promiscuous mode [ 35.369148][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.385536][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.392805][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.400021][ T3303] bridge_slave_0: entered allmulticast mode [ 35.406641][ T3303] bridge_slave_0: entered promiscuous mode [ 35.413699][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.420804][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.428031][ T3303] bridge_slave_1: entered allmulticast mode [ 35.434536][ T3303] bridge_slave_1: entered promiscuous mode [ 35.441179][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.448338][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.455548][ T3298] bridge_slave_1: entered allmulticast mode [ 35.462148][ T3298] bridge_slave_1: entered promiscuous mode [ 35.469392][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.484244][ T3299] team0: Port device team_slave_0 added [ 35.510001][ T3299] team0: Port device team_slave_1 added [ 35.535417][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.542573][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.549820][ T3305] bridge_slave_0: entered allmulticast mode [ 35.556261][ T3305] bridge_slave_0: entered promiscuous mode [ 35.568738][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.579327][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.589367][ T3304] team0: Port device team_slave_0 added [ 35.595417][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.602716][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.609898][ T3305] bridge_slave_1: entered allmulticast mode [ 35.616500][ T3305] bridge_slave_1: entered promiscuous mode [ 35.623138][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.630158][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.656202][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.668083][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.678235][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.688030][ T3304] team0: Port device team_slave_1 added [ 35.698351][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.705439][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.731405][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.764372][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.787746][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.794784][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.820744][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.832455][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.839447][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.865374][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.876988][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.887011][ T3303] team0: Port device team_slave_0 added [ 35.893554][ T3298] team0: Port device team_slave_0 added [ 35.900820][ T3298] team0: Port device team_slave_1 added [ 35.914780][ T3303] team0: Port device team_slave_1 added [ 35.951912][ T3299] hsr_slave_0: entered promiscuous mode [ 35.958013][ T3299] hsr_slave_1: entered promiscuous mode [ 35.964315][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.971319][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.997430][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.009131][ T3305] team0: Port device team_slave_0 added [ 36.015700][ T3305] team0: Port device team_slave_1 added [ 36.039136][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.046160][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.072166][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.088525][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.095620][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.121624][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.139848][ T3304] hsr_slave_0: entered promiscuous mode [ 36.145928][ T3304] hsr_slave_1: entered promiscuous mode [ 36.151725][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.157504][ T3304] Cannot create hsr debugfs directory [ 36.171553][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.178745][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.204687][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.231364][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.238470][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.264471][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.276701][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.283816][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.309763][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.347003][ T3298] hsr_slave_0: entered promiscuous mode [ 36.353120][ T3298] hsr_slave_1: entered promiscuous mode [ 36.359028][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 36.364792][ T3298] Cannot create hsr debugfs directory [ 36.400794][ T3303] hsr_slave_0: entered promiscuous mode [ 36.406792][ T3303] hsr_slave_1: entered promiscuous mode [ 36.412676][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.418422][ T3303] Cannot create hsr debugfs directory [ 36.463085][ T3305] hsr_slave_0: entered promiscuous mode [ 36.469182][ T3305] hsr_slave_1: entered promiscuous mode [ 36.475154][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.480893][ T3305] Cannot create hsr debugfs directory [ 36.631492][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.640440][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.650325][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.659428][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.667226][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.675981][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.686010][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.694586][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.724677][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.733589][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.741236][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.750226][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.761202][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.770218][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.780819][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.789907][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.815136][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.823954][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.831660][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.840681][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.848290][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.857207][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.864937][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.873500][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.909969][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.918897][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.927290][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.936867][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.944800][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.953438][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.961349][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.970194][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.993559][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.002374][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.010577][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.019107][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.027458][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.036348][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.044869][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.053612][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.111000][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.134600][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.150273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.158913][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.168801][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.185392][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.195174][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.206033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.213185][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.230044][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.237149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.246383][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.253450][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.269066][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.284502][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.300057][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.307170][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.317644][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.324741][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.351980][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.364985][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.372087][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.384475][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.398142][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.405227][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.450034][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.468180][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.475368][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.497262][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.504406][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.706859][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.725204][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.742348][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.813111][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.831196][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.954732][ T3304] veth0_vlan: entered promiscuous mode [ 37.963252][ T3299] veth0_vlan: entered promiscuous mode [ 37.984991][ T3304] veth1_vlan: entered promiscuous mode [ 38.010084][ T3299] veth1_vlan: entered promiscuous mode [ 38.030421][ T3305] veth0_vlan: entered promiscuous mode [ 38.039063][ T3305] veth1_vlan: entered promiscuous mode [ 38.063059][ T3304] veth0_macvtap: entered promiscuous mode [ 38.076750][ T3298] veth0_vlan: entered promiscuous mode [ 38.082908][ T3304] veth1_macvtap: entered promiscuous mode [ 38.089778][ T3303] veth0_vlan: entered promiscuous mode [ 38.108514][ T3305] veth0_macvtap: entered promiscuous mode [ 38.116766][ T3299] veth0_macvtap: entered promiscuous mode [ 38.125660][ T3298] veth1_vlan: entered promiscuous mode [ 38.133870][ T3305] veth1_macvtap: entered promiscuous mode [ 38.142857][ T3303] veth1_vlan: entered promiscuous mode [ 38.150610][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.159558][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.167104][ T3299] veth1_macvtap: entered promiscuous mode [ 38.187150][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.195997][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.209448][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.218996][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.228024][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.238965][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.247624][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.266810][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.276736][ T3298] veth0_macvtap: entered promiscuous mode [ 38.289298][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298207][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.310068][ T3298] veth1_macvtap: entered promiscuous mode [ 38.317082][ T3303] veth0_macvtap: entered promiscuous mode [ 38.323912][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.332803][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.343019][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.351861][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.364040][ T3303] veth1_macvtap: entered promiscuous mode [ 38.374661][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.374678][ T28] audit: type=1400 audit(1780187076.351:145): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.aBH57M/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.384737][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.411975][ T28] audit: type=1400 audit(1780187076.351:146): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.418447][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.450311][ T28] audit: type=1400 audit(1780187076.351:147): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.aBH57M/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.477316][ T28] audit: type=1400 audit(1780187076.351:148): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.499619][ T28] audit: type=1400 audit(1780187076.351:149): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.aBH57M/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.527969][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.528343][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.551128][ T28] audit: type=1400 audit(1780187076.351:150): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.aBH57M/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.559544][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.583146][ T28] audit: type=1400 audit(1780187076.361:151): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.606491][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.613995][ T28] audit: type=1400 audit(1780187076.391:152): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.617223][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.637437][ T28] audit: type=1400 audit(1780187076.391:153): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=4779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.674733][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.686780][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.696625][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.706311][ T28] audit: type=1400 audit(1780187076.681:154): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.749369][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.758374][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.772327][ T3505] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 38.797438][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.807042][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.823198][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.840880][ T3508] loop1: detected capacity change from 0 to 512 [ 38.897881][ T3508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.913566][ T3508] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.948929][ T3505] syz.3.4 (3505) used greatest stack depth: 10360 bytes left [ 38.987936][ T3508] Cannot find add_set index 0 as target [ 39.254032][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.303953][ T3534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 39.322377][ T3536] loop4: detected capacity change from 0 to 256 [ 39.332335][ T3536] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.381246][ T3536] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.451194][ T3536] netlink: 399 bytes leftover after parsing attributes in process `syz.4.13'. [ 39.469558][ T3401] IPVS: starting estimator thread 0... [ 39.478367][ T3536] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 39.506368][ T3536] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 39.574369][ T3550] IPVS: using max 2352 ests per chain, 117600 per kthread [ 39.704448][ T3552] syz.1.20 (3552) used greatest stack depth: 10112 bytes left [ 39.810827][ T3400] IPVS: starting estimator thread 0... [ 39.903790][ T3571] IPVS: using max 2112 ests per chain, 105600 per kthread [ 39.921435][ T3576] loop4: detected capacity change from 0 to 1024 [ 39.962035][ T3576] EXT4-fs: Ignoring removed bh option [ 40.000290][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.102746][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.342180][ T3597] loop4: detected capacity change from 0 to 128 [ 40.671858][ T3613] Zero length message leads to an empty skb [ 40.736931][ T3619] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 40.965155][ T3626] loop1: detected capacity change from 0 to 128 [ 41.000364][ T3626] ======================================================= [ 41.000364][ T3626] WARNING: The mand mount option has been deprecated and [ 41.000364][ T3626] and is ignored by this kernel. Remove the mand [ 41.000364][ T3626] option from the mount to silence this warning. [ 41.000364][ T3626] ======================================================= [ 41.067627][ T3619] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 41.136155][ T3619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.155617][ T3619] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 41.188955][ T3619] syz.0.46 (3619) used greatest stack depth: 9792 bytes left [ 41.229353][ T3630] loop4: detected capacity change from 0 to 1024 [ 41.334834][ T3641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 41.363003][ T3641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 42.449334][ T3651] infiniband syz2: set active [ 42.454273][ T3651] infiniband syz2: added bond_slave_1 [ 42.470501][ T3651] RDS/IB: syz2: added [ 42.482464][ T3651] smc: adding ib device syz2 with port count 1 [ 42.490135][ T3651] smc: ib device syz2 port 1 has no pnetid [ 42.709767][ T3682] netlink: 'syz.4.68': attribute type 16 has an invalid length. [ 42.732150][ T3682] netlink: 'syz.4.68': attribute type 17 has an invalid length. [ 42.746754][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.796316][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.897330][ T3689] syz.1.71 uses obsolete (PF_INET,SOCK_PACKET) [ 43.101694][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.108918][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.130022][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.137183][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.306323][ T3693] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 43.715802][ T3731] loop2: detected capacity change from 0 to 512 [ 43.727071][ T3728] Illegal XDP return value 4294967274 on prog (id 22) dev syz_tun, expect packet loss! [ 43.755559][ T3731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.792065][ T3731] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.842590][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 43.849033][ T28] audit: type=1400 audit(1780187081.811:240): avc: denied { remount } for pid=3725 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.851225][ T3731] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 43.916625][ T28] audit: type=1400 audit(1780187081.891:241): avc: denied { unmount } for pid=3725 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.953372][ T3731] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.031485][ T3686] syz.3.70 (3686) used greatest stack depth: 9112 bytes left [ 44.085860][ T28] audit: type=1400 audit(1780187082.061:242): avc: denied { ioctl } for pid=3764 comm="syz.3.81" path="socket:[5306]" dev="sockfs" ino=5306 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.115532][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 44.145593][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 44.179515][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 44.560009][ T28] audit: type=1400 audit(1780187082.531:243): avc: denied { create } for pid=3830 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.596363][ T28] audit: type=1400 audit(1780187082.561:244): avc: denied { bind } for pid=3830 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.662277][ T28] audit: type=1400 audit(1780187082.561:245): avc: denied { listen } for pid=3830 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.705243][ T28] audit: type=1400 audit(1780187082.561:246): avc: denied { connect } for pid=3830 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.787755][ T28] audit: type=1400 audit(1780187082.561:247): avc: denied { write } for pid=3830 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.840198][ T28] audit: type=1400 audit(1780187082.601:248): avc: denied { watch_reads } for pid=3832 comm="syz.0.87" path="/11" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.916192][ T28] audit: type=1400 audit(1780187082.811:249): avc: denied { create } for pid=3844 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.955314][ T3414] IPVS: starting estimator thread 0... [ 45.062848][ T3860] IPVS: using max 2304 ests per chain, 115200 per kthread [ 45.140458][ T3876] loop1: detected capacity change from 0 to 128 [ 45.150021][ T3876] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 45.172924][ T3876] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.193918][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.210626][ T3878] loop4: detected capacity change from 0 to 512 [ 45.218730][ T3876] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.240435][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.302140][ T3872] netlink: 22 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.359554][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.389804][ T3878] FAT-fs (loop4): FAT read failed (blocknr 128) [ 45.415262][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.433695][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.461951][ T3872] netlink: 22 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.508319][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.532322][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.554696][ T3872] netlink: 22 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.561115][ T3890] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 45.567191][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 45.594329][ T3893] loop4: detected capacity change from 0 to 512 [ 45.626185][ T3893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.645211][ T3893] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.942391][ T3910] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 45.953079][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.976224][ T3910] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 46.094370][ T3857] IPVS: starting estimator thread 0... [ 46.135801][ T3919] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 46.165347][ T3921] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 46.182683][ T3917] IPVS: using max 2304 ests per chain, 115200 per kthread [ 46.251588][ T3922] bond1: entered allmulticast mode [ 46.271378][ T3922] bond1 (unregistering): Released all slaves [ 46.419367][ T3927] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 47.169924][ T3964] netlink: 'syz.0.135': attribute type 39 has an invalid length. [ 47.175917][ T3955] loop3: detected capacity change from 0 to 512 [ 47.285603][ T3955] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 47.326742][ T3955] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.350396][ T3955] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.380748][ T3955] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 47.433652][ T3955] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #16: comm syz.3.131: inode has both inline data and extents flags [ 47.475693][ T3955] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.484020][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 47.501989][ C0] EXT4-fs (loop3): initial error at time 1780187085: ext4_orphan_get:1397: inode 16 [ 47.513092][ C0] EXT4-fs (loop3): last error at time 1780187085: ext4_orphan_get:1397: inode 16 [ 47.525081][ T3955] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.131: couldn't read orphan inode 16 (err -117) [ 47.542909][ T3955] loop3: lost filesystem error report for type 5 error -117 [ 47.581548][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.658588][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.437396][ T4044] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 48.877898][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 48.877916][ T28] audit: type=1400 audit(1780187086.851:276): avc: denied { ioctl } for pid=4092 comm="syz.1.155" path="socket:[5621]" dev="sockfs" ino=5621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.914177][ T4107] tipc: Started in network mode [ 48.933372][ T4107] tipc: Node identity 2007ff, cluster identity 4711 [ 48.964507][ T4107] tipc: Node number set to 2099199 [ 48.980077][ T3807] tipc: Subscription rejected, illegal request [ 49.016039][ T4095] loop3: detected capacity change from 0 to 128 [ 49.087413][ T28] audit: type=1400 audit(1780187087.061:277): avc: denied { create } for pid=4118 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.187150][ T28] audit: type=1400 audit(1780187087.161:278): avc: denied { read } for pid=4124 comm="syz.2.162" path="socket:[6482]" dev="sockfs" ino=6482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.221476][ T4121] loop0: detected capacity change from 0 to 8192 [ 49.253671][ T28] audit: type=1400 audit(1780187087.211:279): avc: denied { write } for pid=4094 comm="syz.3.154" path="socket:[5642]" dev="sockfs" ino=5642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.681133][ T4166] netlink: 'syz.2.169': attribute type 10 has an invalid length. [ 49.724684][ T4166] syz_tun: entered promiscuous mode [ 49.744793][ T4166] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.847642][ T28] audit: type=1400 audit(1780187087.821:280): avc: denied { create } for pid=4178 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.904815][ T28] audit: type=1400 audit(1780187087.841:281): avc: denied { bind } for pid=4178 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.946895][ T28] audit: type=1400 audit(1780187087.841:282): avc: denied { listen } for pid=4178 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.999868][ T28] audit: type=1400 audit(1780187087.851:283): avc: denied { connect } for pid=4178 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.061922][ T28] audit: type=1400 audit(1780187087.851:284): avc: denied { accept } for pid=4178 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.134001][ T28] audit: type=1400 audit(1780187087.851:285): avc: denied { create } for pid=4175 comm="syz.4.171" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.702583][ T4255] __nla_validate_parse: 27 callbacks suppressed [ 50.724998][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.750822][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.758598][ T4257] loop0: detected capacity change from 0 to 128 [ 50.784312][ T4255] netlink: 22 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.795620][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.806016][ T4257] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 50.807637][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.826603][ T4255] netlink: 22 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.837846][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.859048][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.870802][ T4255] netlink: 22 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.885003][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.922177][ T4257] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.959334][ T4257] ext2 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.109516][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.465937][ T4301] xt_hashlimit: size too large, truncated to 1048576 [ 51.561487][ T4305] loop0: detected capacity change from 0 to 512 [ 51.572321][ T4305] EXT4-fs: inline encryption not supported [ 51.585646][ T4305] EXT4-fs (loop0): failed to initialize system zone (-117) [ 51.607815][ T4305] EXT4-fs (loop0): mount failed [ 51.866664][ T4315] loop4: detected capacity change from 0 to 2048 [ 51.945936][ T4315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.025580][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.675899][ T4372] loop3: detected capacity change from 0 to 128 [ 52.692973][ T4366] loop4: detected capacity change from 0 to 512 [ 52.704007][ T4372] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 52.720109][ T4372] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.734678][ T4372] ext2 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.825997][ T4366] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.229: inode has both inline data and extents flags [ 52.848254][ T4366] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.849694][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.852703][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 52.874382][ C0] EXT4-fs (loop4): initial error at time 1780187090: ext4_orphan_get:1397: inode 15 [ 52.882936][ T4366] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.229: couldn't read orphan inode 15 (err -117) [ 52.883826][ C0] EXT4-fs (loop4): last error at time 1780187090: ext4_orphan_get:1397: inode 15 [ 52.921229][ T4366] loop4: lost filesystem error report for type 5 error -117 [ 52.996685][ T4366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.088646][ T4401] loop3: detected capacity change from 0 to 1024 [ 53.131246][ T4385] loop1: detected capacity change from 0 to 8192 [ 53.141349][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.174245][ T4401] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.213447][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.351824][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.179507][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 54.179525][ T28] audit: type=1400 audit(1780187092.151:350): avc: denied { setopt } for pid=4523 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.282923][ T4528] capability: warning: `syz.0.258' uses 32-bit capabilities (legacy support in use) [ 54.331859][ T28] audit: type=1400 audit(1780187092.301:351): avc: denied { setcurrent } for pid=4527 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.380600][ T28] audit: type=1401 audit(1780187092.301:352): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 54.685372][ T4550] loop3: detected capacity change from 0 to 1764 [ 54.716804][ T28] audit: type=1400 audit(1780187092.691:353): avc: denied { create } for pid=4551 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.751154][ T4550] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 54.795745][ T28] audit: type=1400 audit(1780187092.771:354): avc: denied { firmware_load } for pid=4549 comm="syz.3.266" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 54.947818][ T4556] loop0: detected capacity change from 0 to 764 [ 54.981751][ T28] audit: type=1400 audit(1780187092.951:355): avc: denied { mount } for pid=4555 comm="syz.0.271" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 55.130389][ T28] audit: type=1400 audit(1780187093.101:356): avc: denied { read } for pid=4567 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.209334][ T28] audit: type=1400 audit(1780187093.181:357): avc: denied { read write } for pid=4555 comm="syz.0.271" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.234312][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.256938][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.264202][ T28] audit: type=1400 audit(1780187093.181:358): avc: denied { open } for pid=4555 comm="syz.0.271" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.292741][ T28] audit: type=1400 audit(1780187093.181:359): avc: denied { ioctl } for pid=4555 comm="syz.0.271" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.318733][ T4578] loop3: detected capacity change from 0 to 8192 [ 55.632529][ T4601] tipc: Enabling of bearer rejected, failed to enable media [ 55.668248][ T4603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.687197][ T4603] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 55.825262][ T4612] __nla_validate_parse: 88 callbacks suppressed [ 55.825283][ T4612] netlink: 276 bytes leftover after parsing attributes in process `syz.0.293'. [ 55.846713][ T4612] netlink: 276 bytes leftover after parsing attributes in process `syz.0.293'. [ 56.594395][ T4658] process 'syz.2.303' launched './file0' with NULL argv: empty string added [ 56.909212][ T4674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 57.025495][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 57.793997][ T4706] loop1: detected capacity change from 0 to 512 [ 57.809885][ T4706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.826695][ T4706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c018, mo2=0002] [ 57.842299][ T4706] System zones: 1-2, 4-12, 8-8 [ 57.857442][ T4706] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.324: invalid indirect mapped block 256 (level 2) [ 57.873499][ T4706] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.873837][ T4706] EXT4-fs (loop1): 2 truncates cleaned up [ 57.883123][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 57.883142][ C1] EXT4-fs (loop1): initial error at time 1780187095: ext4_free_branches:1023: inode 11 [ 57.883193][ C1] EXT4-fs (loop1): last error at time 1780187095: ext4_free_branches:1023: inode 11 [ 57.952657][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.015141][ T4706] io-wq is not configured for unbound workers [ 58.094386][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.200176][ T4712] loop4: detected capacity change from 0 to 512 [ 58.215189][ T4712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.266064][ T4712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.300280][ T4712] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.352177][ T4714] netlink: 'syz.1.328': attribute type 3 has an invalid length. [ 58.393818][ T4714] netlink: 'syz.1.328': attribute type 7 has an invalid length. [ 58.434246][ T4714] netlink: 198320 bytes leftover after parsing attributes in process `syz.1.328'. [ 58.459204][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.709506][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.727038][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.951344][ T4740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 59.148729][ T4701] syz.2.322 (4701) used greatest stack depth: 8808 bytes left [ 59.221912][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 59.221931][ T28] audit: type=1326 audit(1780187097.191:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.298868][ T28] audit: type=1326 audit(1780187097.191:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.362800][ T28] audit: type=1326 audit(1780187097.191:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.395505][ T28] audit: type=1326 audit(1780187097.211:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.421586][ T28] audit: type=1326 audit(1780187097.211:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.512245][ T28] audit: type=1326 audit(1780187097.211:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.586095][ T28] audit: type=1326 audit(1780187097.211:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.662500][ T28] audit: type=1326 audit(1780187097.211:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.751152][ T28] audit: type=1326 audit(1780187097.211:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 59.855104][ T28] audit: type=1326 audit(1780187097.211:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.2.342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb00399ce59 code=0x7ffc0000 [ 60.177256][ T4770] loop4: detected capacity change from 0 to 1024 [ 61.122359][ T4807] netlink: 276 bytes leftover after parsing attributes in process `syz.2.367'. [ 61.146147][ T4782] loop4: detected capacity change from 0 to 512 [ 61.176690][ T4815] netlink: 276 bytes leftover after parsing attributes in process `syz.2.367'. [ 61.250775][ T4782] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00017272 (sector = 1) [ 61.293957][ T4782] FAT-fs (loop4): Directory bread(block 199916) failed [ 61.319714][ T4782] FAT-fs (loop4): Directory bread(block 199917) failed [ 61.351614][ T4809] loop1: detected capacity change from 0 to 512 [ 61.355701][ T4782] FAT-fs (loop4): Directory bread(block 199918) failed [ 61.419535][ T4782] FAT-fs (loop4): Directory bread(block 199919) failed [ 61.430747][ T4809] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.368: inode has both inline data and extents flags [ 61.452977][ T4809] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.454477][ T4809] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.368: couldn't read orphan inode 15 (err -117) [ 61.463998][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 61.464148][ C0] EXT4-fs (loop1): initial error at time 1780187099: ext4_orphan_get:1397: inode 15 [ 61.464467][ C0] EXT4-fs (loop1): last error at time 1780187099: ext4_orphan_get:1397: inode 15 [ 61.524053][ T4782] FAT-fs (loop4): Directory bread(block 199920) failed [ 61.574206][ T4824] netlink: 'syz.3.373': attribute type 4 has an invalid length. [ 61.583668][ T4809] loop1: lost filesystem error report for type 5 error -117 [ 61.588466][ T4782] FAT-fs (loop4): Directory bread(block 199921) failed [ 61.591877][ T4809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.632344][ T4825] netlink: 'syz.3.373': attribute type 4 has an invalid length. [ 61.648381][ T4782] FAT-fs (loop4): Directory bread(block 199922) failed [ 61.696647][ T4782] FAT-fs (loop4): Directory bread(block 199923) failed [ 61.801389][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.808731][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.822021][ T4782] FAT-fs (loop4): Directory bread(block 199916) failed [ 61.849938][ T4782] FAT-fs (loop4): Directory bread(block 199917) failed [ 61.962937][ T4676] syz.2.313 (4676) used greatest stack depth: 8552 bytes left [ 62.093635][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.140254][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.153664][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00017272 (sector = 1) [ 62.381681][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.390969][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.402193][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.411275][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.411318][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.364039][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 63.461860][ T3803] bridge_slave_1: left allmulticast mode [ 63.477571][ T3803] bridge_slave_1: left promiscuous mode [ 63.506552][ T3803] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.546013][ T3803] bridge_slave_0: left allmulticast mode [ 63.553618][ T3803] bridge_slave_0: left promiscuous mode [ 63.568979][ T3803] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.695155][ T3803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.716152][ T3803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.736087][ T3803] bond0 (unregistering): Released all slaves [ 63.752776][ T4868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.852909][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 63.865181][ T4872] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 63.901110][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 63.976048][ T3807] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 64.074195][ T3803] hsr_slave_0: left promiscuous mode [ 64.087121][ T3803] hsr_slave_1: left promiscuous mode [ 64.102063][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.145684][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.271540][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 64.271637][ T28] audit: type=1400 audit(1780187102.241:415): avc: denied { write } for pid=4904 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.505674][ T3803] team0 (unregistering): Port device team_slave_1 removed [ 64.521332][ T3803] team0 (unregistering): Port device team_slave_0 removed [ 64.640888][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.867578][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.888621][ T28] audit: type=1400 audit(1780187102.861:416): avc: denied { write } for pid=4910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.915380][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.934695][ T4852] bridge_slave_0: entered allmulticast mode [ 64.941663][ T4852] bridge_slave_0: entered promiscuous mode [ 64.949436][ T3803] IPVS: stop unused estimator thread 0... [ 64.961520][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.971102][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.978461][ T4852] bridge_slave_1: entered allmulticast mode [ 64.985514][ T4852] bridge_slave_1: entered promiscuous mode [ 64.991398][ T28] audit: type=1400 audit(1780187102.961:417): avc: denied { write } for pid=4927 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.025779][ T4852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.036564][ T4852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.057615][ T4852] team0: Port device team_slave_0 added [ 65.064408][ T4852] team0: Port device team_slave_1 added [ 65.078092][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.094700][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.102416][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.128830][ T4852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.140923][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.148198][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.174481][ T4852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.230342][ T4852] hsr_slave_0: entered promiscuous mode [ 65.236767][ T4852] hsr_slave_1: entered promiscuous mode [ 65.244541][ T4852] debugfs: 'hsr0' already exists in 'hsr' [ 65.250330][ T4852] Cannot create hsr debugfs directory [ 65.368619][ T28] audit: type=1400 audit(1780187103.341:418): avc: denied { write } for pid=4930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.412887][ T28] audit: type=1400 audit(1780187103.381:419): avc: denied { ioctl } for pid=4942 comm="syz.2.394" path="socket:[9761]" dev="sockfs" ino=9761 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.464726][ T28] audit: type=1400 audit(1780187103.421:420): avc: denied { write } for pid=4948 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.538549][ T28] audit: type=1400 audit(1780187103.431:421): avc: denied { mount } for pid=4941 comm="syz.4.395" name="/" dev="configfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 65.612555][ T4954] loop4: detected capacity change from 0 to 764 [ 65.728206][ T28] audit: type=1400 audit(1780187103.701:422): avc: denied { write } for pid=4955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.793255][ T28] audit: type=1400 audit(1780187103.751:423): avc: denied { write } for pid=4971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.829624][ T28] audit: type=1400 audit(1780187103.801:424): avc: denied { setopt } for pid=4972 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.948518][ T4852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.958312][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.969776][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.977716][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.989306][ T4852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.004416][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.013834][ T4852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.027732][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.036888][ T4852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.048588][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.120543][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.137999][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.149564][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.156707][ T3807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.179553][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.186784][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.474906][ T4852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.651722][ T4852] veth0_vlan: entered promiscuous mode [ 66.669077][ T4852] veth1_vlan: entered promiscuous mode [ 66.699863][ T4852] veth0_macvtap: entered promiscuous mode [ 66.715220][ T4852] veth1_macvtap: entered promiscuous mode [ 66.738734][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.778716][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.809425][ T3801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.818561][ T3801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.848187][ T3801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.863371][ T3801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.034783][ T5077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.410'. [ 67.052428][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'. [ 67.323253][ T5101] netem: change failed [ 67.900905][ T5131] team0: Device gtp0 is of different type [ 68.203152][ T3386] ================================================================== [ 68.211308][ T3386] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 68.218356][ T3386] [ 68.220676][ T3386] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3857 on cpu 0: [ 68.228754][ T3386] wq_worker_running+0x9b/0x120 [ 68.233621][ T3386] schedule_timeout+0xca/0x180 [ 68.238414][ T3386] msleep+0x4f/0x90 [ 68.242239][ T3386] nsim_fib_event+0x48e7/0x4d40 [ 68.247097][ T3386] nsim_fib_event_work+0x13d/0x210 [ 68.252208][ T3386] process_scheduled_works+0x4f0/0x9c0 [ 68.257680][ T3386] worker_thread+0x58a/0x780 [ 68.262286][ T3386] kthread+0x22a/0x280 [ 68.266364][ T3386] ret_from_fork+0x146/0x330 [ 68.270976][ T3386] ret_from_fork_asm+0x1a/0x30 [ 68.275762][ T3386] [ 68.278103][ T3386] read to 0xffff888237c2a8e4 of 4 bytes by task 3386 on cpu 1: [ 68.285645][ T3386] kick_pool+0x49/0x2d0 [ 68.289846][ T3386] __queue_work+0x8b9/0xb00 [ 68.294380][ T3386] queue_work_on+0xa9/0x140 [ 68.298894][ T3386] process_srcu+0xa38/0xd90 [ 68.303407][ T3386] process_scheduled_works+0x4f0/0x9c0 [ 68.308876][ T3386] worker_thread+0x58a/0x780 [ 68.313473][ T3386] kthread+0x22a/0x280 [ 68.317544][ T3386] ret_from_fork+0x146/0x330 [ 68.322144][ T3386] ret_from_fork_asm+0x1a/0x30 [ 68.326917][ T3386] [ 68.329237][ T3386] value changed: 0x00000000 -> 0x00000001 [ 68.334957][ T3386] [ 68.337281][ T3386] Reported by Kernel Concurrency Sanitizer on: [ 68.343448][ T3386] CPU: 1 UID: 0 PID: 3386 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 68.352839][ T3386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.362912][ T3386] Workqueue: rcu_gp process_srcu [ 68.367863][ T3386] ================================================================== [ 68.725491][ T5136] bond0: (slave syz_tun): Releasing backup interface [ 68.867575][ T3801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.993664][ T3801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.116540][ T3801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.185807][ T3801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.261943][ T3801] bridge_slave_1: left allmulticast mode [ 69.267703][ T3801] bridge_slave_1: left promiscuous mode [ 69.273506][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.281237][ T3801] bridge_slave_0: left allmulticast mode [ 69.287110][ T3801] bridge_slave_0: left promiscuous mode [ 69.292967][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.346705][ T3801] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 69.455177][ T3801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.465306][ T3801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.474854][ T3801] bond0 (unregistering): Released all slaves [ 69.482843][ T3801] bond1 (unregistering): Released all slaves [ 69.496052][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 69.496068][ T28] audit: type=1400 audit(1780187107.471:447): avc: denied { read } for pid=3022 comm="dhcpcd" name="n29" dev="tmpfs" ino=2352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.524598][ T28] audit: type=1400 audit(1780187107.471:448): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=2352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.547991][ T28] audit: type=1400 audit(1780187107.471:449): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=2352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.597109][ T3801] hsr_slave_0: left promiscuous mode [ 69.604252][ T3801] hsr_slave_1: left promiscuous mode [ 69.609968][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.617732][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.625482][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.633119][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.643835][ T3801] veth1_macvtap: left promiscuous mode [ 69.649378][ T3801] veth0_macvtap: left promiscuous mode [ 69.655207][ T3801] veth1_vlan: left promiscuous mode [ 69.660557][ T3801] veth0_vlan: left promiscuous mode [ 69.671314][ T28] audit: type=1400 audit(1780187107.641:450): avc: denied { write } for pid=5142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.718848][ T28] audit: type=1400 audit(1780187107.641:451): avc: denied { create } for pid=5142 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.743508][ T28] audit: type=1400 audit(1780187107.641:452): avc: denied { write } for pid=5142 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2357 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.771087][ T28] audit: type=1400 audit(1780187107.641:453): avc: denied { append } for pid=5142 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2357 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.795480][ T28] audit: type=1400 audit(1780187107.681:454): avc: denied { write } for pid=5153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.817643][ T28] audit: type=1400 audit(1780187107.681:455): avc: denied { unlink } for pid=5153 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2357 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.850106][ T3801] team0 (unregistering): Port device team_slave_1 removed [ 69.860347][ T3801] team0 (unregistering): Port device team_slave_0 removed [ 69.895218][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 69.972224][ T28] audit: type=1400 audit(1780187107.941:456): avc: denied { write } for pid=5156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.018115][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.121520][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 70.155555][ T3801] IPVS: stop unused estimator thread 0... [ 70.223015][ T3801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.249804][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.276265][ T3801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.325847][ T3801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.385568][ T3801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.456814][ T3801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.507103][ T3801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.546779][ T3801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.583413][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.596710][ T3801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.679117][ T3801] bridge_slave_1: left allmulticast mode [ 70.685135][ T3801] bridge_slave_1: left promiscuous mode [ 70.690966][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.699185][ T3801] bridge_slave_0: left allmulticast mode [ 70.705296][ T3801] bridge_slave_0: left promiscuous mode [ 70.711051][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.720667][ T3801] bridge_slave_1: left allmulticast mode [ 70.726926][ T3801] bridge_slave_1: left promiscuous mode [ 70.733108][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.740975][ T3801] bridge_slave_0: left allmulticast mode [ 70.747068][ T3801] bridge_slave_0: left promiscuous mode [ 70.753031][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.808282][ T3801] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 70.817233][ T3801] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 70.915721][ T3801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.925780][ T3801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.935230][ T3801] bond0 (unregistering): Released all slaves [ 70.943427][ T3801] bond1 (unregistering): Released all slaves [ 71.025834][ T3801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.035753][ T3801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.045374][ T3801] bond0 (unregistering): Released all slaves [ 71.053439][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 71.076659][ T3801] tipc: Left network mode [ 71.131302][ T3801] hsr_slave_0: left promiscuous mode [ 71.137276][ T3801] hsr_slave_1: left promiscuous mode [ 71.143083][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.150625][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.158823][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.166723][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.176693][ T3801] hsr_slave_0: left promiscuous mode [ 71.182355][ T3801] hsr_slave_1: left promiscuous mode [ 71.188398][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.195990][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.203814][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.211285][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.223819][ T3801] veth1_macvtap: left promiscuous mode [ 71.229356][ T3801] veth0_macvtap: left promiscuous mode [ 71.235030][ T3801] veth1_vlan: left promiscuous mode [ 71.240379][ T3801] veth0_vlan: left promiscuous mode [ 71.246261][ T3801] veth1_macvtap: left promiscuous mode [ 71.251789][ T3801] veth0_macvtap: left promiscuous mode [ 71.257386][ T3801] veth1_vlan: left promiscuous mode [ 71.263352][ T3801] veth0_vlan: left promiscuous mode [ 71.370345][ T3801] team0 (unregistering): Port device team_slave_1 removed [ 71.380638][ T3801] team0 (unregistering): Port device team_slave_0 removed [ 71.448291][ T3801] team0 (unregistering): Port device team_slave_1 removed [ 71.458741][ T3801] team0 (unregistering): Port device team_slave_0 removed [ 71.498044][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 71.606434][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.725842][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.831620][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 71.911411][ T3801] IPVS: stop unused estimator thread 0... [ 71.947859][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 71.976978][ T3801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.025656][ T3801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.070409][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 72.081078][ T3801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.127329][ T3801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.193884][ T3801] bridge_slave_1: left allmulticast mode [ 72.199603][ T3801] bridge_slave_1: left promiscuous mode [ 72.205540][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.213755][ T3801] bridge_slave_0: left allmulticast mode [ 72.219424][ T3801] bridge_slave_0: left promiscuous mode [ 72.225188][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.277354][ T3801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.287392][ T3801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.297072][ T3801] bond0 (unregistering): Released all slaves [ 72.349487][ T3801] hsr_slave_0: left promiscuous mode [ 72.356123][ T3801] hsr_slave_1: left promiscuous mode [ 72.361855][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.371535][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.379223][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.386747][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.397559][ T3801] veth1_macvtap: left promiscuous mode [ 72.403265][ T3801] veth0_macvtap: left promiscuous mode [ 72.408876][ T3801] veth1_vlan: left promiscuous mode [ 72.414545][ T3801] veth0_vlan: left promiscuous mode [ 72.490076][ T3801] team0 (unregistering): Port device team_slave_1 removed [ 72.500394][ T3801] team0 (unregistering): Port device team_slave_0 removed [ 72.535859][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 72.674256][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 72.783059][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 72.890104][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16