last executing test programs: 2.96503764s ago: executing program 0 (id=6): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 2.827106092s ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 2.741827188s ago: executing program 4 (id=5): connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1", 0x12}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.313036563s ago: executing program 0 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) 1.872786969s ago: executing program 4 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x501e5f5b5164a223, 0x70bd21, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x6f1b73e55ef8ef3e, 0xfe, 0x8, 0x4000}, [@RTA_DST={0x8, 0x12, @dev}]}, 0x24}}, 0x4444) 1.819367343s ago: executing program 2 (id=15): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "87e41f3f2518cf22b058fe40b3bfb0888226e54e123436d75a884ae89b4b8ea5dc074df2550d8bfaf75fd05332be6fb3df1d0756f1193298e53b21d91ba047f0"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 1.629429228s ago: executing program 2 (id=16): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x83, 0x0, &(0x7f00000000c0)) 1.620608829s ago: executing program 4 (id=17): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 1.523098597s ago: executing program 2 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.508461488s ago: executing program 4 (id=19): pipe2$watch_queue(&(0x7f0000002240), 0x80) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r4}, 0x18) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x0) 1.375867759s ago: executing program 3 (id=20): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000e0ffffffffd1ec7b7c0335d42f"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.206521232s ago: executing program 0 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 1.171558316s ago: executing program 2 (id=22): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) 1.12161721s ago: executing program 0 (id=23): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xea}) 890.717338ms ago: executing program 3 (id=27): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 871.57766ms ago: executing program 1 (id=28): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH7UpjUbQVD0EvFgpJif1lbxYE5e9KR48bQk6Q9ME2lWsCVCBc8FQdCrR/8A8dKDgtW/wKtHkUKQJN5XZndmMybZtJtuHNl8PvDIe/M2+97MY2bfPN57AZxakxHxVkQMRcRsRNTy42ke4k47ZJ/b3d5cykISzeZ7fyWRRMTO9uZS8V1J/vdc/gVTaUT6RRLPH1Luxq3bH9VXV1du5umZxo2PZzZu3X7l+o361ZWrK2sLC/Pzly/OXnrtct/O9evNdz/84fe3d765M/5Mfbl2N6vv+TyvfB79MhmTnWuy3+v9LqxiT5TiyXCFFQEA4Ehp3vcfbvX/azEUe523Wtz9udLKAQAAAH3RbBZ/AQAAgMGVePcHAACAAVfMA9jZ3lwqQoXTEfiPbS1GxES7/Yv13e2c4c6a3pF963v7aTIi/p76/uUsxAmtwwYAAAA4zX5cbG/8d3D8L41nS587GxFjxd5+fTS5L31w/Cd90OciKdlajHiztLfjbqn9cxNDeerJ1lDhSHLl+urKbESMR8RUjJzJ0nNHlDH+xh/3uuWVx/+ykJVfjAXm9XgwfObf/7Ncb9Qf55zZs/V5xHPDh7V/0hnzLe+TeRyfXfvyWre8h7c/J6n5bcRLh97/ezuXJkfvzzrTeh7MFE+Fg9bu3X+hW/nav1rZ/T92dPtPJOX9ejd6L+OD++d/65Z33Of/aPJ+q4Kj+bFP643GzbmI0eSdg8fne6/zoCquR3G9svafevHw3/+i/5fkv/3jpf2he/HTL7uXuuW5/6uVtf9yT/d/75GLv353oVv5j3b/v9qqzFR+RP/v4R61gaquJwAAAAAAAAD9kbbm9iXpdCeeptPT7Xm+T8dYurq+0bhwZf2TteX2HMCJGEmLmV610nzQufYy8k56fl96ISKeioivamdb6eml9dXlqk8eAAAATolzXd7/M38eZ7EHAAAA8P80UXUFAAAAgBPn/R8AAAAG2uPs6y8iIjKokaqfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn2z8BAAD//yly2dE=") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 799.362746ms ago: executing program 3 (id=29): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f000000a540)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000c40)=[{0x0}, {0x0}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/1, 0x1}, 0x7}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 799.088355ms ago: executing program 2 (id=30): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x42, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440)={0x0, 0x3}, 0x8) 788.654836ms ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r6, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 776.391777ms ago: executing program 1 (id=32): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 729.909821ms ago: executing program 0 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 428.597135ms ago: executing program 3 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r6, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 159.741177ms ago: executing program 1 (id=35): ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000500)="7d8a") 71.454094ms ago: executing program 1 (id=36): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1) 70.473694ms ago: executing program 1 (id=37): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002440)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c108e000000000000008c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}, {&(0x7f0000000a00)="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", 0x1e4}, {&(0x7f0000001040)="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", 0x113}, {0x0}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4", 0x7b}], 0x6}}], 0x2, 0xc044) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="b7b836e6cd508be9b8ff928440beacaaacb8de401abb4c18403ead5d876ac5066044bca841fbab37cabb268083a06bdd7e9490c77bf8c3588f8417b878b40054ca26d0b32ccad0e7647f90fffbecc2b44ad555d7818cf85930f196290b2e26f8dfd234279980bae1aca0fd79624e0d2d2dd88d1952d67d9cd7f8911b83b0806a6dbec017a4e3525160fcab1685b6a0e9a35f994c301d8531bb5d4340480d5e5e1586f1ea13c64deb9ef045e01c698797ce5725fe508b96", 0xb7}, {&(0x7f0000000400)="5326942ff2c516054094c717d34c1b3d5b2b66fd95c41b67d101", 0x1a}], 0x2) 61.418785ms ago: executing program 3 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 26.940308ms ago: executing program 1 (id=39): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=40): statx(0xffffffffffffff9c, 0x0, 0x4000, 0x100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 31.874157][ T29] audit: type=1400 audit(1755282483.411:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.874787][ T3292] cgroup: Unknown subsys name 'net' [ 31.897015][ T29] audit: type=1400 audit(1755282483.411:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.924763][ T29] audit: type=1400 audit(1755282483.441:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.075987][ T3292] cgroup: Unknown subsys name 'cpuset' [ 32.082216][ T3292] cgroup: Unknown subsys name 'rlimit' [ 32.250638][ T29] audit: type=1400 audit(1755282483.791:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.275585][ T29] audit: type=1400 audit(1755282483.791:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.296394][ T29] audit: type=1400 audit(1755282483.791:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.317223][ T29] audit: type=1400 audit(1755282483.791:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.324414][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.337903][ T29] audit: type=1400 audit(1755282483.801:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.373434][ T29] audit: type=1400 audit(1755282483.801:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.397353][ T29] audit: type=1400 audit(1755282483.891:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.427598][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.502788][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 33.570212][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.577410][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.584636][ T3302] bridge_slave_0: entered allmulticast mode [ 33.591030][ T3302] bridge_slave_0: entered promiscuous mode [ 33.605887][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.613056][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.620437][ T3302] bridge_slave_1: entered allmulticast mode [ 33.627000][ T3302] bridge_slave_1: entered promiscuous mode [ 33.676374][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.688914][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.709405][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 33.746341][ T3302] team0: Port device team_slave_0 added [ 33.752576][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 33.767493][ T3302] team0: Port device team_slave_1 added [ 33.793169][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 33.806541][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 33.815153][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.822146][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.848746][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.878936][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.885970][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.912415][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.927358][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.934531][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.941863][ T3307] bridge_slave_0: entered allmulticast mode [ 33.948116][ T3307] bridge_slave_0: entered promiscuous mode [ 33.957876][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.965103][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.972737][ T3307] bridge_slave_1: entered allmulticast mode [ 33.979317][ T3307] bridge_slave_1: entered promiscuous mode [ 34.018998][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.031350][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.059027][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.066298][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.073443][ T3311] bridge_slave_0: entered allmulticast mode [ 34.079885][ T3311] bridge_slave_0: entered promiscuous mode [ 34.106727][ T3307] team0: Port device team_slave_0 added [ 34.112850][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.120003][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.127277][ T3311] bridge_slave_1: entered allmulticast mode [ 34.133646][ T3311] bridge_slave_1: entered promiscuous mode [ 34.146562][ T3302] hsr_slave_0: entered promiscuous mode [ 34.152647][ T3302] hsr_slave_1: entered promiscuous mode [ 34.164015][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.171139][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.178768][ T3310] bridge_slave_0: entered allmulticast mode [ 34.185307][ T3310] bridge_slave_0: entered promiscuous mode [ 34.192447][ T3307] team0: Port device team_slave_1 added [ 34.203444][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.217158][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.224323][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.231630][ T3310] bridge_slave_1: entered allmulticast mode [ 34.238211][ T3310] bridge_slave_1: entered promiscuous mode [ 34.254215][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.268260][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.275428][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.301559][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.312317][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.319517][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.326766][ T3303] bridge_slave_0: entered allmulticast mode [ 34.333207][ T3303] bridge_slave_0: entered promiscuous mode [ 34.352332][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.359443][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.385736][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.396643][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.403725][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.411680][ T3303] bridge_slave_1: entered allmulticast mode [ 34.418137][ T3303] bridge_slave_1: entered promiscuous mode [ 34.429701][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.447962][ T3311] team0: Port device team_slave_0 added [ 34.458444][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.468838][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.479104][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.488924][ T3311] team0: Port device team_slave_1 added [ 34.534457][ T3307] hsr_slave_0: entered promiscuous mode [ 34.540436][ T3307] hsr_slave_1: entered promiscuous mode [ 34.546312][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 34.552063][ T3307] Cannot create hsr debugfs directory [ 34.558434][ T3303] team0: Port device team_slave_0 added [ 34.577348][ T3310] team0: Port device team_slave_0 added [ 34.586980][ T3303] team0: Port device team_slave_1 added [ 34.597559][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.604656][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.630848][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.642155][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.649229][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.675859][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.688974][ T3310] team0: Port device team_slave_1 added [ 34.703947][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.711243][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.737600][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.761741][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.768841][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.795142][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.836317][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.843291][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.869469][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.896110][ T3311] hsr_slave_0: entered promiscuous mode [ 34.902020][ T3311] hsr_slave_1: entered promiscuous mode [ 34.907876][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 34.913580][ T3311] Cannot create hsr debugfs directory [ 34.919315][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.926387][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.952846][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.989276][ T3303] hsr_slave_0: entered promiscuous mode [ 34.996127][ T3303] hsr_slave_1: entered promiscuous mode [ 35.002011][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 35.007740][ T3303] Cannot create hsr debugfs directory [ 35.054682][ T3310] hsr_slave_0: entered promiscuous mode [ 35.061020][ T3310] hsr_slave_1: entered promiscuous mode [ 35.066880][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 35.072690][ T3310] Cannot create hsr debugfs directory [ 35.136307][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.161870][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.170243][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.192950][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.225302][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.234872][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.248568][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.257516][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.287202][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.307977][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.319217][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.328420][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.357862][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.366864][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.390764][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.401434][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.427926][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.438656][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.448368][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.465952][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.475074][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.490225][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.498929][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.513054][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.524333][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.540275][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.547905][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.560908][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.571129][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.578400][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.587501][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.594817][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.611550][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.618726][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.632609][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.639890][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.657627][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.664773][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.712563][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.744724][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.774234][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.788165][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.802800][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.816336][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.823691][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.842347][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.849869][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.862703][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.882293][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.892962][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.910025][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.917123][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.926950][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.934009][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.954666][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.980729][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.999900][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.077243][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.102363][ T3302] veth0_vlan: entered promiscuous mode [ 36.132003][ T3302] veth1_vlan: entered promiscuous mode [ 36.170819][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.187597][ T3307] veth0_vlan: entered promiscuous mode [ 36.196219][ T3307] veth1_vlan: entered promiscuous mode [ 36.207693][ T3302] veth0_macvtap: entered promiscuous mode [ 36.215025][ T3302] veth1_macvtap: entered promiscuous mode [ 36.244561][ T3307] veth0_macvtap: entered promiscuous mode [ 36.261551][ T3311] veth0_vlan: entered promiscuous mode [ 36.269167][ T3307] veth1_macvtap: entered promiscuous mode [ 36.277939][ T3303] veth0_vlan: entered promiscuous mode [ 36.290418][ T3311] veth1_vlan: entered promiscuous mode [ 36.301860][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.312531][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.325834][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.334184][ T3303] veth1_vlan: entered promiscuous mode [ 36.347639][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.360210][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.373228][ T3311] veth0_macvtap: entered promiscuous mode [ 36.385932][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.400561][ T3311] veth1_macvtap: entered promiscuous mode [ 36.407917][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.421489][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.440289][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.459619][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.472580][ T3303] veth0_macvtap: entered promiscuous mode [ 36.487343][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.499478][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.510917][ T2138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.524014][ T3303] veth1_macvtap: entered promiscuous mode [ 36.542937][ T3310] veth0_vlan: entered promiscuous mode [ 36.554310][ T3473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.556818][ T2138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.576014][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.588010][ T3310] veth1_vlan: entered promiscuous mode [ 36.595862][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.618347][ T995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.636195][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.636528][ T3475] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 36.650281][ T3310] veth0_macvtap: entered promiscuous mode [ 36.662739][ T995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.678131][ T3310] veth1_macvtap: entered promiscuous mode [ 36.716568][ T995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.734513][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.757323][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.790661][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.866432][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.876438][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 36.876457][ T29] audit: type=1400 audit(1755282488.351:102): avc: denied { write } for pid=3486 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.898450][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.903790][ T29] audit: type=1400 audit(1755282488.401:103): avc: denied { read } for pid=3490 comm="syz.4.5" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.913276][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.935577][ T29] audit: type=1400 audit(1755282488.411:104): avc: denied { open } for pid=3490 comm="syz.4.5" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.947163][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.043732][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.046059][ T3500] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.792555][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.811142][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.814476][ T29] audit: type=1400 audit(1755282488.511:105): avc: denied { name_bind } for pid=3490 comm="syz.4.5" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.842483][ T29] audit: type=1400 audit(1755282488.511:106): avc: denied { node_bind } for pid=3490 comm="syz.4.5" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.843882][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.864475][ T29] audit: type=1400 audit(1755282488.531:107): avc: denied { create } for pid=3493 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.864505][ T29] audit: type=1400 audit(1755282488.541:108): avc: denied { write } for pid=3493 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.914529][ T29] audit: type=1400 audit(1755282488.541:109): avc: denied { read } for pid=3493 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.934948][ T29] audit: type=1400 audit(1755282488.571:110): avc: denied { setopt } for pid=3490 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.954736][ T29] audit: type=1400 audit(1755282488.581:111): avc: denied { create } for pid=3499 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.126393][ T3520] tipc: Started in network mode [ 38.131573][ T3520] tipc: Node identity c2762880e51, cluster identity 4711 [ 38.139030][ T3520] tipc: Enabled bearer , priority 0 [ 38.187928][ T3520] tipc: Resetting bearer [ 38.211179][ T3519] tipc: Resetting bearer [ 38.269050][ T3519] tipc: Disabling bearer [ 38.733275][ T3547] loop1: detected capacity change from 0 to 512 [ 38.767438][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.855273][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.936191][ T3557] syzkaller0: entered promiscuous mode [ 38.941856][ T3557] syzkaller0: entered allmulticast mode [ 39.553241][ T3575] Zero length message leads to an empty skb [ 39.582769][ T3577] loop2: detected capacity change from 0 to 7 [ 39.616934][ T2991] ================================================================== [ 39.625330][ T2991] BUG: KCSAN: data-race in dont_mount / step_into [ 39.632229][ T2991] [ 39.634661][ T2991] read-write to 0xffff8881071ca9c0 of 4 bytes by task 3296 on cpu 1: [ 39.642839][ T2991] dont_mount+0x2a/0x40 [ 39.647121][ T2991] vfs_unlink+0x28f/0x420 [ 39.651489][ T2991] do_unlinkat+0x24e/0x480 [ 39.656027][ T2991] __x64_sys_unlink+0x2e/0x40 [ 39.660814][ T2991] x64_sys_call+0x2dc0/0x2ff0 [ 39.665509][ T2991] do_syscall_64+0xd2/0x200 [ 39.670114][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.676024][ T2991] [ 39.678347][ T2991] read to 0xffff8881071ca9c0 of 4 bytes by task 2991 on cpu 0: [ 39.686064][ T2991] step_into+0x12f/0x820 [ 39.690323][ T2991] walk_component+0x162/0x220 [ 39.695116][ T2991] path_lookupat+0xfe/0x2a0 [ 39.699803][ T2991] filename_lookup+0x147/0x340 [ 39.704587][ T2991] do_readlinkat+0x7d/0x320 [ 39.709224][ T2991] __x64_sys_readlink+0x47/0x60 [ 39.714943][ T2991] x64_sys_call+0x28da/0x2ff0 [ 39.719902][ T2991] do_syscall_64+0xd2/0x200 [ 39.724519][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.730463][ T2991] [ 39.732825][ T2991] value changed: 0x00300080 -> 0x00004080 [ 39.738717][ T2991] [ 39.741044][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 39.747287][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 39.759445][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.769783][ T2991] ==================================================================