last executing test programs: 1.63716651s ago: executing program 3 (id=4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 924.05791ms ago: executing program 2 (id=19): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 877.616694ms ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 841.431058ms ago: executing program 2 (id=23): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="90", 0x1}], 0x1, 0x0, 0x0, 0x8801}}], 0x1, 0x20004031) 812.242381ms ago: executing program 2 (id=24): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) 742.572037ms ago: executing program 0 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x10000000, 0x0, 0x5}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 712.516351ms ago: executing program 2 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 687.998143ms ago: executing program 0 (id=29): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 639.252018ms ago: executing program 0 (id=30): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 621.964329ms ago: executing program 2 (id=31): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 588.545053ms ago: executing program 0 (id=33): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000180), 0x4) 561.819275ms ago: executing program 0 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 268.439014ms ago: executing program 1 (id=44): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 224.859199ms ago: executing program 1 (id=45): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 197.517071ms ago: executing program 1 (id=46): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 196.325801ms ago: executing program 4 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000005c0)="05e2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db7687ba52ef2013317eb7fcc5677e9d263db84603ad6e0b5c95c157538b1030d82b9dea62f83e9350cdfeca784a34541b175b78a6ea1896789f", 0xb9}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 173.671384ms ago: executing program 4 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x6011, r2, 0x0) 154.551665ms ago: executing program 4 (id=49): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 135.903767ms ago: executing program 1 (id=50): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436b", 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 55.765115ms ago: executing program 4 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x9, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 0s ago: executing program 4 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x1b}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @multicast1}, "35158101a84e1706"}}}}}, 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 35.566966][ T29] audit: type=1400 audit(1760019245.032:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.590078][ T29] audit: type=1400 audit(1760019245.052:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.591105][ T3303] cgroup: Unknown subsys name 'net' [ 35.618007][ T29] audit: type=1400 audit(1760019245.082:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.784073][ T3303] cgroup: Unknown subsys name 'cpuset' [ 35.790369][ T3303] cgroup: Unknown subsys name 'rlimit' [ 35.922120][ T29] audit: type=1400 audit(1760019245.382:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.945476][ T29] audit: type=1400 audit(1760019245.392:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.966000][ T29] audit: type=1400 audit(1760019245.392:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.977307][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.986399][ T29] audit: type=1400 audit(1760019245.392:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.015221][ T29] audit: type=1400 audit(1760019245.392:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.040086][ T29] audit: type=1400 audit(1760019245.392:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.053425][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.063466][ T29] audit: type=1400 audit(1760019245.462:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.008291][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.131862][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.139135][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.146790][ T3313] bridge_slave_0: entered allmulticast mode [ 37.153502][ T3313] bridge_slave_0: entered promiscuous mode [ 37.161940][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.169124][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.176494][ T3313] bridge_slave_1: entered allmulticast mode [ 37.183161][ T3313] bridge_slave_1: entered promiscuous mode [ 37.211973][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.234571][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.271467][ T3313] team0: Port device team_slave_0 added [ 37.279768][ T3313] team0: Port device team_slave_1 added [ 37.318336][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.325399][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.351323][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.372470][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.379475][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.405443][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.439770][ T3313] hsr_slave_0: entered promiscuous mode [ 37.446024][ T3313] hsr_slave_1: entered promiscuous mode [ 37.532521][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 37.595436][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 37.630659][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 37.675618][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.682776][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.689965][ T3322] bridge_slave_0: entered allmulticast mode [ 37.696555][ T3322] bridge_slave_0: entered promiscuous mode [ 37.718453][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.725958][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.733277][ T3322] bridge_slave_1: entered allmulticast mode [ 37.739758][ T3322] bridge_slave_1: entered promiscuous mode [ 37.768807][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.795276][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 37.805426][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.819313][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.826518][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.833730][ T3326] bridge_slave_0: entered allmulticast mode [ 37.840179][ T3326] bridge_slave_0: entered promiscuous mode [ 37.851506][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.858691][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.865927][ T3328] bridge_slave_0: entered allmulticast mode [ 37.872276][ T3328] bridge_slave_0: entered promiscuous mode [ 37.885532][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.899830][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.907055][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.914274][ T3326] bridge_slave_1: entered allmulticast mode [ 37.920845][ T3326] bridge_slave_1: entered promiscuous mode [ 37.927119][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.934242][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.941511][ T3328] bridge_slave_1: entered allmulticast mode [ 37.948174][ T3328] bridge_slave_1: entered promiscuous mode [ 37.959377][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.968925][ T3322] team0: Port device team_slave_0 added [ 37.989816][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.999059][ T3322] team0: Port device team_slave_1 added [ 38.004875][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.036616][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.051060][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.065547][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.072697][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.098838][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.111335][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.122236][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.137053][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.144140][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.170433][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.196852][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.204054][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.211239][ T3324] bridge_slave_0: entered allmulticast mode [ 38.217877][ T3324] bridge_slave_0: entered promiscuous mode [ 38.227000][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.234114][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.241275][ T3324] bridge_slave_1: entered allmulticast mode [ 38.247714][ T3324] bridge_slave_1: entered promiscuous mode [ 38.259396][ T3326] team0: Port device team_slave_0 added [ 38.278851][ T3326] team0: Port device team_slave_1 added [ 38.290164][ T3328] team0: Port device team_slave_0 added [ 38.302277][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.317179][ T3328] team0: Port device team_slave_1 added [ 38.323111][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.330182][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.356102][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.376258][ T3322] hsr_slave_0: entered promiscuous mode [ 38.382531][ T3322] hsr_slave_1: entered promiscuous mode [ 38.388414][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 38.394252][ T3322] Cannot create hsr debugfs directory [ 38.400899][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.415235][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.422266][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.448255][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.490232][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.497265][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.523336][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.534715][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.541726][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.567910][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.586572][ T3326] hsr_slave_0: entered promiscuous mode [ 38.592758][ T3326] hsr_slave_1: entered promiscuous mode [ 38.598822][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 38.604599][ T3326] Cannot create hsr debugfs directory [ 38.610928][ T3324] team0: Port device team_slave_0 added [ 38.617818][ T3324] team0: Port device team_slave_1 added [ 38.676395][ T3328] hsr_slave_0: entered promiscuous mode [ 38.682728][ T3328] hsr_slave_1: entered promiscuous mode [ 38.688669][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 38.694445][ T3328] Cannot create hsr debugfs directory [ 38.700905][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.707936][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.734168][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.755440][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.762407][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.788436][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.844890][ T3324] hsr_slave_0: entered promiscuous mode [ 38.850976][ T3324] hsr_slave_1: entered promiscuous mode [ 38.857031][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 38.862757][ T3324] Cannot create hsr debugfs directory [ 38.968362][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.985189][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.994135][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.009279][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.038968][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.049254][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.061978][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.075777][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.092887][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.100318][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.122611][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.129733][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.138683][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.145812][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.168698][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.180159][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.196816][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.207387][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.261947][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.274694][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.295060][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.309512][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.317080][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.326059][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.335408][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.353775][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.360852][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.376783][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.383902][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.393117][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.403152][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.417082][ T2336] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.424187][ T2336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.445967][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.453048][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.479333][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.489864][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.524466][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.539777][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.556640][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.563974][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.586422][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.593599][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.641958][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.650033][ T3313] veth0_vlan: entered promiscuous mode [ 39.666701][ T3313] veth1_vlan: entered promiscuous mode [ 39.686295][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.711515][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.722478][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.731556][ T3313] veth0_macvtap: entered promiscuous mode [ 39.739608][ T3313] veth1_macvtap: entered promiscuous mode [ 39.753038][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.760185][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.775322][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.782477][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.825663][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.837735][ T3322] veth0_vlan: entered promiscuous mode [ 39.846241][ T3322] veth1_vlan: entered promiscuous mode [ 39.870022][ T3322] veth0_macvtap: entered promiscuous mode [ 39.877819][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.889514][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.900076][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.917700][ T3322] veth1_macvtap: entered promiscuous mode [ 39.945175][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.957222][ T175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967801][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.978249][ T175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.999382][ T3326] veth0_vlan: entered promiscuous mode [ 40.006440][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.016066][ T175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.024930][ T175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.040657][ T3326] veth1_vlan: entered promiscuous mode [ 40.053107][ T2310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.069210][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.084813][ T3326] veth0_macvtap: entered promiscuous mode [ 40.095211][ T2310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.115854][ T3326] veth1_macvtap: entered promiscuous mode [ 40.148634][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.162907][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.176689][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.187170][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.219133][ T3328] veth0_vlan: entered promiscuous mode [ 40.232880][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.252479][ T2310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.275073][ T3328] veth1_vlan: entered promiscuous mode [ 40.295669][ T2310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331462][ T2310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353083][ T3328] veth0_macvtap: entered promiscuous mode [ 40.366296][ T175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.387127][ T3328] veth1_macvtap: entered promiscuous mode [ 40.423187][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.440675][ T3491] loop0: detected capacity change from 0 to 512 [ 40.449022][ T3491] EXT4-fs: inline encryption not supported [ 40.458294][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.469571][ T3491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.482785][ T3491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.484590][ T3324] veth0_vlan: entered promiscuous mode [ 40.503280][ T3491] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.505614][ T3324] veth1_vlan: entered promiscuous mode [ 40.522590][ T3491] EXT4-fs (loop0): 1 truncate cleaned up [ 40.529219][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.544289][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.553962][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.563278][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.576937][ T3324] veth0_macvtap: entered promiscuous mode [ 40.588388][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.593189][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.598679][ T3324] veth1_macvtap: entered promiscuous mode [ 40.634648][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 40.634668][ T29] audit: type=1400 audit(1760019250.102:110): avc: denied { create } for pid=3501 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.635892][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.669880][ T29] audit: type=1400 audit(1760019250.132:111): avc: denied { setopt } for pid=3501 comm="syz.0.10" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.690337][ T29] audit: type=1400 audit(1760019250.132:112): avc: denied { connect } for pid=3501 comm="syz.0.10" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.702155][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.726195][ T2310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.728791][ T29] audit: type=1400 audit(1760019250.182:113): avc: denied { write } for pid=3501 comm="syz.0.10" laddr=fe80::a8aa:aaff:feaa:aaaa lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.768402][ T2310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.781322][ T2310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.800487][ T2310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.841653][ T29] audit: type=1400 audit(1760019250.302:114): avc: denied { create } for pid=3507 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.894878][ T29] audit: type=1400 audit(1760019250.352:115): avc: denied { bind } for pid=3507 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.914105][ T29] audit: type=1400 audit(1760019250.352:116): avc: denied { tracepoint } for pid=3507 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.933694][ T29] audit: type=1400 audit(1760019250.352:117): avc: denied { setopt } for pid=3507 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.954310][ T29] audit: type=1400 audit(1760019250.382:118): avc: denied { create } for pid=3511 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.973711][ T29] audit: type=1400 audit(1760019250.382:119): avc: denied { connect } for pid=3511 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.045825][ T3517] sd 0:0:1:0: device reset [ 41.057390][ T3519] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 41.086651][ T3523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3523 comm=syz.2.17 [ 41.372507][ T3549] syz.0.29 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.524876][ T3565] netlink: 'syz.0.36': attribute type 39 has an invalid length. [ 41.533026][ T3566] mmap: syz.1.25 (3566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.605512][ T3570] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.735316][ T3581] ALSA: seq fatal error: cannot create timer (-19) [ 41.748050][ T3584] netlink: 'syz.4.43': attribute type 8 has an invalid length. [ 41.755906][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 41.776074][ T3584] bond0: entered promiscuous mode [ 41.781170][ T3584] bond_slave_0: entered promiscuous mode [ 41.787384][ T3584] bond_slave_1: entered promiscuous mode [ 41.798396][ T3584] veth1_to_bridge: entered promiscuous mode [ 41.805763][ T3584] hsr1: entered promiscuous mode [ 41.914120][ T3599] loop1: detected capacity change from 0 to 128 [ 42.060389][ T2310] ================================================================== [ 42.068528][ T2310] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 42.077998][ T2310] [ 42.080318][ T2310] write to 0xffff88811bd3ab91 of 36 bytes by task 3599 on cpu 0: [ 42.088046][ T2310] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 42.093952][ T2310] generic_perform_write+0x2c2/0x490 [ 42.099255][ T2310] __generic_file_write_iter+0x9e/0x120 [ 42.104826][ T2310] generic_file_write_iter+0x8d/0x2f0 [ 42.110481][ T2310] iter_file_splice_write+0x666/0xa60 [ 42.115853][ T2310] direct_splice_actor+0x156/0x2a0 [ 42.120971][ T2310] splice_direct_to_actor+0x312/0x680 [ 42.126361][ T2310] do_splice_direct+0xda/0x150 [ 42.131131][ T2310] do_sendfile+0x380/0x650 [ 42.135591][ T2310] __x64_sys_sendfile64+0x105/0x150 [ 42.140800][ T2310] x64_sys_call+0x2bb4/0x3000 [ 42.145482][ T2310] do_syscall_64+0xd2/0x200 [ 42.150011][ T2310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.155909][ T2310] [ 42.158228][ T2310] read to 0xffff88811bd3aa00 of 512 bytes by task 2310 on cpu 1: [ 42.165940][ T2310] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 42.171838][ T2310] generic_perform_write+0x2c2/0x490 [ 42.177136][ T2310] shmem_file_write_iter+0xc5/0xf0 [ 42.182270][ T2310] lo_rw_aio+0x69d/0x760 [ 42.186519][ T2310] loop_process_work+0x52d/0xa60 [ 42.191480][ T2310] loop_workfn+0x31/0x40 [ 42.195730][ T2310] process_scheduled_works+0x4cb/0x9d0 [ 42.201203][ T2310] worker_thread+0x582/0x770 [ 42.205791][ T2310] kthread+0x486/0x510 [ 42.209861][ T2310] ret_from_fork+0x122/0x1b0 [ 42.214452][ T2310] ret_from_fork_asm+0x1a/0x30 [ 42.219221][ T2310] [ 42.221538][ T2310] Reported by Kernel Concurrency Sanitizer on: [ 42.227693][ T2310] CPU: 1 UID: 0 PID: 2310 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.237626][ T2310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 42.247683][ T2310] Workqueue: loop1 loop_workfn [ 42.252474][ T2310] ================================================================== [ 42.523370][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.639984][ T3602] syz.1.50: attempt to access beyond end of device [ 42.639984][ T3602] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.653391][ T3602] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 42.662103][ T3599] syz.1.50: attempt to access beyond end of device [ 42.662103][ T3599] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.675494][ T3599] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 42.684851][ T3599] syz.1.50: attempt to access beyond end of device [ 42.684851][ T3599] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.698129][ T3599] Buffer I/O error on dev loop1, logical block 128, lost async page write