last executing test programs: 1.354606956s ago: executing program 1 (id=6): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x2, 0x3a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x204, 0xffffffff, 0xffffffff, 0x204, 0xffffffff, 0x2, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x31, 0x0, [@empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty, @empty]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x408) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[@rthdr={{0x28, 0x29, 0x2b, {0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}}}], 0x28}, 0x0) 1.318106607s ago: executing program 2 (id=3): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4$vsock_stream(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000040)='1234', 0x4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/64, 0x40, 0x2, 0x0, 0x0) (async) recvfrom(r1, &(0x7f0000000100)=""/64, 0x40, 0x2, 0x0, 0x0) (async) read(r1, &(0x7f0000000180)=""/64, 0x40) (async) 1.293409497s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) listen(r0, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) read(r2, &(0x7f0000002000), 0x10000) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) read(r2, &(0x7f0000002000), 0x10000) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 1.281166558s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999\n\x00', 0x1a) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r1) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000190001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="140000001a0001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="140000001b0001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="140000001c0001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="140000001d0001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="140000001e0001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="140000001f0001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000200001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000210001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000220001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000230001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000240001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000250001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000260001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000270001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="14000000280001000000000000000000060100000800010003000000", 0x14}], 0x1}, 0x0) 1.259846038s ago: executing program 0 (id=1): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) r1 = socket$inet(0x2, 0x3, 0xff) sendto(r1, &(0x7f0000000100)="4500001c00010000401174c00c0002010c0002010001000100080000", 0x1c, 0x0, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x10) 1.161297371s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n\x00', 0x1e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\n\x00', 0x2) 1.132983801s ago: executing program 1 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000106000000000000000000000000000000001000030073797a6b616c6c657230000014001280080001007672660008000280e8030000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000106000000000000000000000000000000000c00030064756d6d79300000140012800a00010064756d6d790000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000a0a010000000000000000000000000018000000000a010400000000000000000a0000000800010073797a304c000000030a010400000000000000000a0000000800010073797a300800030073797a30140004800800010003000000080002000000000008000500000000000c00060066696c7465720000140000000b0a0100"/144], 0x8c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000700)='dummy0\x00', 0x7) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000740)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000840)={0xa, 0x1f90, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)='hello', 0x5}], 0x1, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x2}, r2}}}], 0x24}, 0x0) 1.094561653s ago: executing program 0 (id=10): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r1, 0x89ee, &(0x7f0000000040)=0x1) 1.031915434s ago: executing program 3 (id=11): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syz_tun\x00'}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000280)={'syz_tun\x00', @ifru_mtu=0x1f4}) syz_emit_ethernet(0x3de, &(0x7f0000000400)=ANY=[@ANYBLOB="ee112233445566778899aabb0800450003d4123460004001000001020304080808080800000011220001"], 0x0) syz_emit_ethernet(0x42e, &(0x7f0000000800)=ANY=[@ANYBLOB="ee112233445566778899aabb08004500042412344078400100000102030408080808"], 0x0) 934.317047ms ago: executing program 0 (id=12): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f0000"], 0x30}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r2, 0x0, 0x0) 923.880607ms ago: executing program 2 (id=13): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x12345678}, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='data', 0x4}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xa, 0xa, 0x5}}], 0x18}, 0x0) 779.95127ms ago: executing program 1 (id=14): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000004)=0x800, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000008)=0x800, 0x4) sendto$inet(r1, &(0x7f0000000200)='\x00'/10000, 0x2710, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) recvfrom$inet(r2, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 773.08196ms ago: executing program 2 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @empty=0x4000000}]}, 0x20}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000300), 0x10) (async) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000080041010000000000000000"], 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) sendto$phonet(r4, &(0x7f0000000600)='1234', 0x4, 0x80, &(0x7f0000000700), 0x10) 698.156272ms ago: executing program 3 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={@local, 0x40, 0x2}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) close(r1) close(r2) close(r0) 659.286494ms ago: executing program 0 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0) r2 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000c00000), 0x400000}, 0x0, {}, 0x0, 0x1000}, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0) 609.130784ms ago: executing program 0 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) accept(r4, 0x0, 0x0) 556.705016ms ago: executing program 1 (id=20): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1f90, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x41}) write$tun(r1, &(0x7f0000000500)={@void, @val={0x2}, @ipv6=@udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x40, @remote, @local, {[], {0x4d2, 0x1f90, 0x18, 0x0, @opaque="00000001000000020000000300000004"}}}}, 0x56) 206.891115ms ago: executing program 4 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @empty=0x4000000}]}, 0x20}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000300), 0x10) (async) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000f5040000000700004101000000"], 0x11) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) sendto$phonet(r4, &(0x7f0000000600)='1234', 0x4, 0x80, &(0x7f0000000700), 0x10) 129.235657ms ago: executing program 4 (id=25): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000280200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000280200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) 110.959427ms ago: executing program 1 (id=26): unshare(0x40000000) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) unshare(0x40000000) 110.098657ms ago: executing program 4 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0xf0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff2, 0xffff}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc0, 0x2, [@TCA_FLOWER_ACT={0xbc, 0x3, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x2, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x3, @rand_addr=0x64010101}]}}}, @m_sample={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x2, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x4, 0x1}]}}}]}]}}]}, 0xf0}}, 0x0) r2 = socket(0x11, 0x3, 0x300) bind(r2, &(0x7f0000000400)=@ll={0x11, 0x300, 0x1}, 0x14) write(r2, &(0x7f0000000500)="00112233445566778899aabb08004500001c0000000040113cce01010101020202021234123400080000", 0x2a) 50.413399ms ago: executing program 4 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x5}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x6}, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x7}, @in6=@private1={0xfc, 0x1, '\x00', 0x7}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x7}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x7}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x8}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x9}, @in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x9}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xa}, @in6=@private1={0xfc, 0x1, '\x00', 0xa}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xa}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xa}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xb}, @in6=@private1={0xfc, 0x1, '\x00', 0xb}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xb}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xc}, @in6=@private1={0xfc, 0x1, '\x00', 0xc}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xc}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xc}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xd}, @in6=@private1={0xfc, 0x1, '\x00', 0xd}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xd}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xd}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xe}, @in6=@private1={0xfc, 0x1, '\x00', 0xe}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xe}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xe}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xf}, @in6=@private1={0xfc, 0x1, '\x00', 0xf}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0xf}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0xf}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x10}, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 21.983139ms ago: executing program 4 (id=29): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)='sit0:0\x00', 0x7) pread64(r1, 0xfffffffffffffffe, 0x7, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001000)={0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 0s ago: executing program 4 (id=30): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) listen(r1, 0x5) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x200, 0x0, 0x20}, 0x9c) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x800, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.133639][ T28] audit: type=1400 audit(1785768104.403:99): avc: denied { noatsecure } for pid=3170 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.153429][ T28] audit: type=1400 audit(1785768104.403:100): avc: denied { write } for pid=3170 comm="sh" path="pipe:[1550]" dev="pipefs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.175748][ T28] audit: type=1400 audit(1785768104.403:101): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.194643][ T28] audit: type=1400 audit(1785768104.403:102): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.409499][ T28] audit: type=1400 audit(1785768106.703:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.431864][ T28] audit: type=1400 audit(1785768106.703:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.916306][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 25.916326][ T28] audit: type=1400 audit(1785768108.203:121): avc: denied { write } for pid=3247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.054056][ T28] audit: type=1400 audit(1785768108.343:122): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.083758][ T28] audit: type=1400 audit(1785768108.373:123): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.218231][ T28] audit: type=1400 audit(1785768108.513:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.248197][ T28] audit: type=1400 audit(1785768108.543:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 30.864664][ T28] audit: type=1400 audit(1785768113.153:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.887804][ T28] audit: type=1400 audit(1785768113.183:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.890178][ T3285] cgroup: Unknown subsys name 'net' [ 30.915864][ T28] audit: type=1400 audit(1785768113.213:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.037475][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.043967][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.135269][ T28] audit: type=1400 audit(1785768113.423:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.158712][ T28] audit: type=1400 audit(1785768113.423:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.189012][ T28] audit: type=1400 audit(1785768113.423:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.209642][ T28] audit: type=1400 audit(1785768113.423:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.230140][ T28] audit: type=1400 audit(1785768113.423:133): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.230461][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.251505][ T28] audit: type=1400 audit(1785768113.423:134): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.284690][ T28] audit: type=1400 audit(1785768113.453:135): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.308053][ T28] audit: type=1400 audit(1785768113.553:136): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 31.333630][ T28] audit: type=1400 audit(1785768113.553:137): avc: denied { write } for pid=3288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.373100][ T28] audit: type=1400 audit(1785768113.663:138): avc: denied { read } for pid=3285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.373668][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.749971][ T3355] modprobe (3355) used greatest stack depth: 11256 bytes left [ 32.777233][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.784528][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.791798][ T3297] bridge_slave_0: entered allmulticast mode [ 32.798532][ T3297] bridge_slave_0: entered promiscuous mode [ 32.820033][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.827228][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.834481][ T3297] bridge_slave_1: entered allmulticast mode [ 32.840978][ T3297] bridge_slave_1: entered promiscuous mode [ 32.878578][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.885754][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.893071][ T3303] bridge_slave_0: entered allmulticast mode [ 32.899650][ T3303] bridge_slave_0: entered promiscuous mode [ 32.928512][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.935703][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.942945][ T3303] bridge_slave_1: entered allmulticast mode [ 32.949459][ T3303] bridge_slave_1: entered promiscuous mode [ 32.957062][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.986207][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.020996][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.028215][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.035381][ T3302] bridge_slave_0: entered allmulticast mode [ 33.041935][ T3302] bridge_slave_0: entered promiscuous mode [ 33.048506][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.055590][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.062878][ T3298] bridge_slave_0: entered allmulticast mode [ 33.069395][ T3298] bridge_slave_0: entered promiscuous mode [ 33.077132][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.094829][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.101967][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.109145][ T3302] bridge_slave_1: entered allmulticast mode [ 33.115584][ T3302] bridge_slave_1: entered promiscuous mode [ 33.122133][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.129344][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.136461][ T3298] bridge_slave_1: entered allmulticast mode [ 33.143111][ T3298] bridge_slave_1: entered promiscuous mode [ 33.150548][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.160563][ T3297] team0: Port device team_slave_0 added [ 33.183592][ T3297] team0: Port device team_slave_1 added [ 33.219691][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.229949][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.239960][ T3303] team0: Port device team_slave_0 added [ 33.245938][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.253010][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.279109][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.295185][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.310225][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.320185][ T3303] team0: Port device team_slave_1 added [ 33.326071][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.333143][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.359234][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.395528][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.402793][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.410091][ T3301] bridge_slave_0: entered allmulticast mode [ 33.416586][ T3301] bridge_slave_0: entered promiscuous mode [ 33.423996][ T3302] team0: Port device team_slave_0 added [ 33.435772][ T3298] team0: Port device team_slave_0 added [ 33.442998][ T3298] team0: Port device team_slave_1 added [ 33.448908][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.455923][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.481977][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.492917][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.500178][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.507476][ T3301] bridge_slave_1: entered allmulticast mode [ 33.514045][ T3301] bridge_slave_1: entered promiscuous mode [ 33.521417][ T3302] team0: Port device team_slave_1 added [ 33.537830][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.544813][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.570748][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.602068][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.609197][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.635151][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.654964][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.662031][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.688049][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.699308][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.706278][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.732272][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.749543][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.756529][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.782499][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.801198][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.812856][ T3297] hsr_slave_0: entered promiscuous mode [ 33.819100][ T3297] hsr_slave_1: entered promiscuous mode [ 33.839484][ T3303] hsr_slave_0: entered promiscuous mode [ 33.845669][ T3303] hsr_slave_1: entered promiscuous mode [ 33.851655][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.857401][ T3303] Cannot create hsr debugfs directory [ 33.866927][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.887435][ T3301] team0: Port device team_slave_0 added [ 33.910777][ T3301] team0: Port device team_slave_1 added [ 33.943366][ T3302] hsr_slave_0: entered promiscuous mode [ 33.949473][ T3302] hsr_slave_1: entered promiscuous mode [ 33.955427][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.961211][ T3302] Cannot create hsr debugfs directory [ 33.977486][ T3298] hsr_slave_0: entered promiscuous mode [ 33.983510][ T3298] hsr_slave_1: entered promiscuous mode [ 33.989559][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.995295][ T3298] Cannot create hsr debugfs directory [ 34.005914][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.013005][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.038976][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.058256][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.065359][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.091400][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.191030][ T3301] hsr_slave_0: entered promiscuous mode [ 34.197089][ T3301] hsr_slave_1: entered promiscuous mode [ 34.203053][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.208854][ T3301] Cannot create hsr debugfs directory [ 34.313706][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.322648][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.330573][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.339437][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.357764][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.366745][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.382447][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.391345][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.416484][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.425328][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.436355][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.445451][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.453716][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.462812][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.476000][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.484803][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.508923][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.517793][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.525472][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.534420][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.542261][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.550930][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.558977][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.568154][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.605872][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.614994][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.629301][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.638276][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.646200][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.655129][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.665188][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.673988][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.713409][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.721744][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.730499][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.738731][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.747618][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.755985][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.764638][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.782025][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.790907][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.810853][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.819754][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.836134][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.843330][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.852802][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.859881][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.887810][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.895649][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.910012][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.917160][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.926097][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.933302][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.961942][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.971621][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.999562][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.006719][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.015528][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.022619][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.038435][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.054664][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.061776][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.072079][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.079174][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.124318][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.161562][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.191487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.198637][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.220705][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.227886][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.395435][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.436365][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.448720][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.503025][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.522997][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.592374][ T3297] veth0_vlan: entered promiscuous mode [ 35.610174][ T3297] veth1_vlan: entered promiscuous mode [ 35.673330][ T3302] veth0_vlan: entered promiscuous mode [ 35.699079][ T3301] veth0_vlan: entered promiscuous mode [ 35.711282][ T3302] veth1_vlan: entered promiscuous mode [ 35.717788][ T3303] veth0_vlan: entered promiscuous mode [ 35.724435][ T3297] veth0_macvtap: entered promiscuous mode [ 35.735087][ T3301] veth1_vlan: entered promiscuous mode [ 35.743864][ T3303] veth1_vlan: entered promiscuous mode [ 35.751038][ T3297] veth1_macvtap: entered promiscuous mode [ 35.777698][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.800834][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.812775][ T3301] veth0_macvtap: entered promiscuous mode [ 35.821739][ T3302] veth0_macvtap: entered promiscuous mode [ 35.845325][ T3303] veth0_macvtap: entered promiscuous mode [ 35.852812][ T3301] veth1_macvtap: entered promiscuous mode [ 35.860178][ T3302] veth1_macvtap: entered promiscuous mode [ 35.873272][ T3303] veth1_macvtap: entered promiscuous mode [ 35.884933][ T3298] veth0_vlan: entered promiscuous mode [ 35.897482][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.907192][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.919500][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.929603][ T3298] veth1_vlan: entered promiscuous mode [ 35.940406][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.951274][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.962383][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.975284][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.985408][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.001694][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.052203][ T3298] veth0_macvtap: entered promiscuous mode [ 36.068877][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.079018][ T3298] veth1_macvtap: entered promiscuous mode [ 36.096735][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.125325][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.142153][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.174118][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.206914][ T402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.221342][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 36.221360][ T28] audit: type=1400 audit(1785768118.513:161): avc: denied { create } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.230304][ T402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.274340][ T28] audit: type=1400 audit(1785768118.553:162): avc: denied { bind } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.294829][ T3515] ip_tables: iptables: counters copy to user failed while replacing table [ 36.307621][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.325235][ T28] audit: type=1400 audit(1785768118.553:163): avc: denied { listen } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.354667][ T3518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.363711][ T28] audit: type=1400 audit(1785768118.553:164): avc: denied { connect } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.387777][ T3518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.396857][ T28] audit: type=1400 audit(1785768118.553:165): avc: denied { accept } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.425503][ T28] audit: type=1400 audit(1785768118.553:166): avc: denied { write } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.446958][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.471662][ T28] audit: type=1400 audit(1785768118.553:167): avc: denied { read } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.490915][ T402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.521698][ T28] audit: type=1400 audit(1785768118.563:168): avc: denied { name_bind } for pid=3508 comm="syz.3.4" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.531153][ T402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.572742][ T28] audit: type=1400 audit(1785768118.563:169): avc: denied { node_bind } for pid=3508 comm="syz.3.4" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.579929][ T3534] smc: net device lo applied user defined pnetid SYZ0 [ 36.604112][ T3518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 36.621170][ T3530] ip_tables: iptables: counters copy to user failed while replacing table [ 36.630261][ T28] audit: type=1400 audit(1785768118.603:170): avc: denied { create } for pid=3514 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.649652][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.652698][ T3534] smc: smcd device lo applied user defined pnetid SYZ0 [ 36.666833][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.720130][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.732453][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.756765][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.770497][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.793045][ T3538] syz.4.5 (3538) used greatest stack depth: 10920 bytes left [ 36.795010][ T3542] netlink: 'syz.2.15': attribute type 2 has an invalid length. [ 36.806790][ T402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.828532][ T402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.886190][ T3554] smc: net device dummy0 applied user defined pnetid SYZ0 [ 36.956723][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.166545][ T3563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 37.176331][ T3563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 37.185655][ T3563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 37.195216][ T3563] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 37.203516][ T3563] openvswitch: netlink: Flow actions attr not present in new flow. [ 37.211975][ T3563] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 37.220140][ T3563] netlink: zone id is out of range [ 37.225371][ T3563] netlink: set zone limit has 4 unknown bytes [ 37.232394][ T3563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 37.279505][ T3567] netlink: 'syz.4.24': attribute type 2 has an invalid length. [ 37.386079][ T3574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'. [ 37.395368][ T3574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'. [ 37.404541][ T3574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'. [ 37.486965][ T3412] ================================================================== [ 37.495132][ T3412] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 37.502274][ T3412] [ 37.504626][ T3412] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3411 on cpu 0: [ 37.513327][ T3412] wq_worker_running+0x9b/0x120 [ 37.518207][ T3412] schedule_timeout+0xca/0x180 [ 37.523048][ T3412] msleep+0x4f/0x90 [ 37.526887][ T3412] nsim_fib_event+0x4526/0x4dc0 [ 37.531766][ T3412] nsim_fib_event_work+0x133/0x200 [ 37.536954][ T3412] process_scheduled_works+0x4d4/0x9a0 [ 37.542435][ T3412] worker_thread+0x569/0x750 [ 37.547059][ T3412] kthread+0x221/0x270 [ 37.551142][ T3412] ret_from_fork+0x146/0x330 [ 37.555747][ T3412] ret_from_fork_asm+0x1a/0x30 [ 37.560530][ T3412] [ 37.562870][ T3412] read to 0xffff888237c2a8e4 of 4 bytes by task 3412 on cpu 1: [ 37.570454][ T3412] kick_pool+0x49/0x2d0 [ 37.574637][ T3412] __queue_work+0x8e9/0xb90 [ 37.579176][ T3412] queue_work_on+0xa9/0x140 [ 37.583706][ T3412] process_srcu+0xa39/0xd90 [ 37.588234][ T3412] process_scheduled_works+0x4d4/0x9a0 [ 37.593724][ T3412] worker_thread+0x569/0x750 [ 37.598335][ T3412] kthread+0x221/0x270 [ 37.602415][ T3412] ret_from_fork+0x146/0x330 [ 37.607026][ T3412] ret_from_fork_asm+0x1a/0x30 [ 37.611808][ T3412] [ 37.614152][ T3412] value changed: 0x00000000 -> 0x00000001 [ 37.619874][ T3412] [ 37.622229][ T3412] Reported by Kernel Concurrency Sanitizer on: [ 37.628401][ T3412] CPU: 1 UID: 0 PID: 3412 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.637784][ T3412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.647880][ T3412] Workqueue: rcu_gp process_srcu [ 37.652874][ T3412] ==================================================================