last executing test programs: 1.163161643s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0x2c, 0x800401, 0x6, 0xffffff00, 0x8, 0x7, 0x9, 0x6, 0xa8, 0x7, 0x1, 0x1, 0x1, 0xff0, 0x1, 0xb432, 0x8, 0x3, 0x0, 0x80, 0x1, 0x200, 0x7}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) 1.144869376s ago: executing program 0 (id=1): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x0) 821.376164ms ago: executing program 1 (id=2): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 747.426067ms ago: executing program 3 (id=4): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x10c027, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 734.173329ms ago: executing program 2 (id=6): socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x5196, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x394}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x9, 0x100000005, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 660.817232ms ago: executing program 1 (id=7): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip6erspan0\x00', 0x4}, 0x18) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f0000e38000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000078a000/0x3000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 615.900691ms ago: executing program 1 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 572.959598ms ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000840)={@void, @val={0x3, 0x3, 0xb, 0x6, 0x2, 0x4}, @ipv4=@igmp={{0x5, 0x4, 0x2, 0x9, 0x1c, 0x67, 0x0, 0x7, 0x2, 0x0, @loopback, @rand_addr=0x64010102}, {0x13, 0x0, 0x0, @loopback}}}, 0x26) 486.609383ms ago: executing program 2 (id=9): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_clone3(0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 256.682774ms ago: executing program 4 (id=10): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40805) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa666ae27a87c986dd6900000000140601fe8000000000000000000000000039fe8000000000000000000000000000aa4e224e2400", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 241.154517ms ago: executing program 3 (id=11): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="fca33fe285122d", 0x7}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 235.478718ms ago: executing program 0 (id=12): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 129.575067ms ago: executing program 3 (id=13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 312.19µs ago: executing program 0 (id=14): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) 0s ago: executing program 3 (id=15): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000340)=0x5b, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x4000830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 24.619198][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 24.619217][ T29] audit: type=1400 audit(1790699866.099:114): avc: denied { write } for pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.655637][ T29] audit: type=1400 audit(1790699866.139:115): avc: denied { write } for pid=3210 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.737228][ T29] audit: type=1400 audit(1790699866.219:116): avc: denied { write } for pid=3213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.769589][ T29] audit: type=1400 audit(1790699866.249:117): avc: denied { write } for pid=3225 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.845716][ T29] audit: type=1400 audit(1790699866.329:118): avc: denied { write } for pid=3228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.879588][ T29] audit: type=1400 audit(1790699866.359:119): avc: denied { write } for pid=3239 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.035283][ T29] audit: type=1400 audit(1790699866.519:120): avc: denied { write } for pid=3242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.070815][ T29] audit: type=1400 audit(1790699866.549:121): avc: denied { write } for pid=3253 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.146488][ T29] audit: type=1400 audit(1790699866.629:122): avc: denied { write } for pid=3256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.180635][ T29] audit: type=1400 audit(1790699866.659:123): avc: denied { write } for pid=3267 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 31.666426][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 31.666445][ T29] audit: type=1400 audit(1790699873.149:126): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.666767][ T29] audit: type=1400 audit(1790699873.149:127): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.667390][ T3292] cgroup: Unknown subsys name 'net' [ 31.667660][ T29] audit: type=1400 audit(1790699873.149:128): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.801755][ T3292] cgroup: Unknown subsys name 'cpuset' [ 31.802662][ T3292] cgroup: Unknown subsys name 'rlimit' [ 31.890602][ T29] audit: type=1400 audit(1790699873.369:129): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.893764][ T29] audit: type=1400 audit(1790699873.379:130): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.893921][ T29] audit: type=1400 audit(1790699873.379:131): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.894072][ T29] audit: type=1400 audit(1790699873.379:132): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.921150][ T29] audit: type=1400 audit(1790699873.399:133): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.921284][ T29] audit: type=1400 audit(1790699873.399:134): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.946022][ T29] audit: type=1400 audit(1790699873.429:135): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.053008][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.081990][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.402851][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.402891][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.402980][ T3307] bridge_slave_0: entered allmulticast mode [ 33.403436][ T3307] bridge_slave_0: entered promiscuous mode [ 33.448427][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.448537][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.448634][ T3307] bridge_slave_1: entered allmulticast mode [ 33.449162][ T3307] bridge_slave_1: entered promiscuous mode [ 33.478984][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.479119][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.479242][ T3306] bridge_slave_0: entered allmulticast mode [ 33.479756][ T3306] bridge_slave_0: entered promiscuous mode [ 33.507346][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.524484][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.524513][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.524648][ T3306] bridge_slave_1: entered allmulticast mode [ 33.525133][ T3306] bridge_slave_1: entered promiscuous mode [ 33.542963][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.572309][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.572344][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.572424][ T3312] bridge_slave_0: entered allmulticast mode [ 33.572911][ T3312] bridge_slave_0: entered promiscuous mode [ 33.612135][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.612223][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.612301][ T3312] bridge_slave_1: entered allmulticast mode [ 33.612824][ T3312] bridge_slave_1: entered promiscuous mode [ 33.613139][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.613169][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.613321][ T3302] bridge_slave_0: entered allmulticast mode [ 33.615125][ T3302] bridge_slave_0: entered promiscuous mode [ 33.623107][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.625696][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.627583][ T3307] team0: Port device team_slave_0 added [ 33.629338][ T3307] team0: Port device team_slave_1 added [ 33.640654][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.640729][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.641039][ T3302] bridge_slave_1: entered allmulticast mode [ 33.642404][ T3302] bridge_slave_1: entered promiscuous mode [ 33.728747][ T3306] team0: Port device team_slave_0 added [ 33.729798][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.737595][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.737683][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.737821][ T3303] bridge_slave_0: entered allmulticast mode [ 33.739619][ T3303] bridge_slave_0: entered promiscuous mode [ 33.741611][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.741705][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.741901][ T3303] bridge_slave_1: entered allmulticast mode [ 33.743083][ T3303] bridge_slave_1: entered promiscuous mode [ 33.763338][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.764863][ T3306] team0: Port device team_slave_1 added [ 33.778633][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.779617][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.779657][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.779748][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.793691][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.814518][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.814561][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.814652][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.838965][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.857133][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.857189][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.857353][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.859763][ T3312] team0: Port device team_slave_0 added [ 33.862998][ T3312] team0: Port device team_slave_1 added [ 33.875848][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.888158][ T3302] team0: Port device team_slave_0 added [ 33.888993][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.889027][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.889205][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.922446][ T3302] team0: Port device team_slave_1 added [ 33.934439][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.934482][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.934593][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.950000][ T3303] team0: Port device team_slave_0 added [ 33.950616][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.950650][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.950746][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.979679][ T3307] hsr_slave_0: entered promiscuous mode [ 33.980621][ T3307] hsr_slave_1: entered promiscuous mode [ 33.991976][ T3303] team0: Port device team_slave_1 added [ 34.003500][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.003514][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.003585][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.039484][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.039526][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.039617][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.058896][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.058910][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.058988][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.067285][ T3306] hsr_slave_0: entered promiscuous mode [ 34.068712][ T3306] hsr_slave_1: entered promiscuous mode [ 34.069377][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.069419][ T3306] Cannot create hsr debugfs directory [ 34.080772][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.080813][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.081537][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.129788][ T3312] hsr_slave_0: entered promiscuous mode [ 34.130784][ T3312] hsr_slave_1: entered promiscuous mode [ 34.142093][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 34.142140][ T3312] Cannot create hsr debugfs directory [ 34.201631][ T3302] hsr_slave_0: entered promiscuous mode [ 34.205668][ T3302] hsr_slave_1: entered promiscuous mode [ 34.209370][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.209384][ T3302] Cannot create hsr debugfs directory [ 34.322831][ T3303] hsr_slave_0: entered promiscuous mode [ 34.323881][ T3303] hsr_slave_1: entered promiscuous mode [ 34.326613][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.326668][ T3303] Cannot create hsr debugfs directory [ 34.608399][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.611068][ T3312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.613934][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.621841][ T3312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.630198][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.635773][ T3312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.637137][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.643052][ T3312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.672164][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.674183][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.676457][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.678075][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.678756][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.680598][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.694257][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.699361][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.741570][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.744184][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.746942][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.748911][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.772627][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.785560][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.788574][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.797828][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.821820][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.825491][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.826148][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.828378][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.829120][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.831099][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.851481][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.856183][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.898109][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.902104][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.916843][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.918751][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.919392][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.922224][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.953990][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.956061][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.975367][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.978772][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.004009][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.024662][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.031884][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.031932][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.036160][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.036248][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.066069][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.066177][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.082536][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.087533][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.087568][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.100549][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.122580][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.151262][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.152764][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.157570][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.187462][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.187505][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.208720][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.208757][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.215891][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.216043][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.226543][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.226655][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.246522][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.246629][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.250539][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.250641][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.503341][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.522568][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.624348][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.626099][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.659446][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.722275][ T3312] veth0_vlan: entered promiscuous mode [ 35.726128][ T3312] veth1_vlan: entered promiscuous mode [ 35.746060][ T3306] veth0_vlan: entered promiscuous mode [ 35.757779][ T3306] veth1_vlan: entered promiscuous mode [ 35.761022][ T3312] veth0_macvtap: entered promiscuous mode [ 35.774711][ T3312] veth1_macvtap: entered promiscuous mode [ 35.793093][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.800649][ T3306] veth0_macvtap: entered promiscuous mode [ 35.814041][ T3306] veth1_macvtap: entered promiscuous mode [ 35.816517][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.849272][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.858880][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.871303][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.871448][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.871562][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.871726][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.951802][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.951949][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.952051][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.952107][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.992480][ T3307] veth0_vlan: entered promiscuous mode [ 35.995741][ T3302] veth0_vlan: entered promiscuous mode [ 36.011850][ T3302] veth1_vlan: entered promiscuous mode [ 36.014008][ T3312] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.016487][ T3307] veth1_vlan: entered promiscuous mode [ 36.093874][ T3302] veth0_macvtap: entered promiscuous mode [ 36.095430][ T3307] veth0_macvtap: entered promiscuous mode [ 36.100494][ T3302] veth1_macvtap: entered promiscuous mode [ 36.108493][ T3307] veth1_macvtap: entered promiscuous mode [ 36.129072][ T3509] loop2: detected capacity change from 0 to 512 [ 36.140535][ T3509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.157790][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.175389][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.177985][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.180333][ T3303] veth0_vlan: entered promiscuous mode [ 36.186495][ T3509] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.3: Unimplemented hash flags: 0x0001 [ 36.186580][ T3509] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3: Corrupt directory, running e2fsck is recommended [ 36.188645][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.221959][ T689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.224670][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.224779][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.224898][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.228432][ T3303] veth1_vlan: entered promiscuous mode [ 36.251331][ T689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.252825][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.252948][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.253058][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.358999][ T3303] veth0_macvtap: entered promiscuous mode [ 36.377684][ T3303] veth1_macvtap: entered promiscuous mode [ 36.432490][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.436644][ T3509] syz.2.3 (3509) used greatest stack depth: 10632 bytes left [ 36.451097][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.490167][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.500979][ T689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.501633][ T760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.501751][ T760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.501993][ T760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.737400][ T3527] syzkaller0: entered promiscuous mode [ 36.737421][ T3527] syzkaller0: entered allmulticast mode [ 36.772655][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 36.772693][ T29] audit: type=1400 audit(1790699878.259:177): avc: denied { bind } for pid=3533 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.818508][ T3534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.837138][ T3530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.837180][ T3530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.837214][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.881754][ T29] audit: type=1400 audit(1790699878.369:178): avc: denied { prog_run } for pid=3519 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.995438][ T29] audit: type=1400 audit(1790699878.479:179): avc: denied { read } for pid=3537 comm="syz.0.12" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.995472][ T29] audit: type=1400 audit(1790699878.479:180): avc: denied { open } for pid=3537 comm="syz.0.12" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.999996][ T29] audit: type=1400 audit(1790699878.479:181): avc: denied { create } for pid=3538 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.008642][ T29] audit: type=1400 audit(1790699878.489:182): avc: denied { bind } for pid=3538 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.009165][ T29] audit: type=1400 audit(1790699878.489:183): avc: denied { listen } for pid=3538 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.012531][ T29] audit: type=1400 audit(1790699878.499:184): avc: denied { connect } for pid=3538 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.015377][ T29] audit: type=1400 audit(1790699878.499:185): avc: denied { write } for pid=3538 comm="syz.3.11" path="socket:[4896]" dev="sockfs" ino=4896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.016021][ T29] audit: type=1400 audit(1790699878.499:186): avc: denied { accept } for pid=3538 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.241278][ T3418] ================================================================== [ 37.241314][ T3418] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 37.241350][ T3418] [ 37.241357][ T3418] read-write to 0xffff888237c2b0a4 of 4 bytes by task 3384 on cpu 0: [ 37.241375][ T3418] wq_worker_running+0x9c/0x120 [ 37.241395][ T3418] schedule_timeout+0xca/0x180 [ 37.241419][ T3418] msleep+0x4f/0x90 [ 37.241441][ T3418] nsim_fib_event+0x4544/0x4de0 [ 37.241468][ T3418] nsim_fib_event_work+0x133/0x200 [ 37.241491][ T3418] process_scheduled_works+0x56a/0xa50 [ 37.241523][ T3418] worker_thread+0x569/0x750 [ 37.241557][ T3418] kthread+0x223/0x270 [ 37.241579][ T3418] ret_from_fork+0x146/0x330 [ 37.241611][ T3418] ret_from_fork_asm+0x1a/0x30 [ 37.241639][ T3418] [ 37.241645][ T3418] read to 0xffff888237c2b0a4 of 4 bytes by task 3418 on cpu 1: [ 37.241661][ T3418] kick_pool_pick+0x5f/0x310 [ 37.241688][ T3418] __queue_work+0x90a/0xbc0 [ 37.241704][ T3418] queue_work_on+0xa9/0x140 [ 37.241723][ T3418] process_srcu+0xa39/0xd90 [ 37.241746][ T3418] process_scheduled_works+0x56a/0xa50 [ 37.241778][ T3418] worker_thread+0x569/0x750 [ 37.241811][ T3418] kthread+0x223/0x270 [ 37.241829][ T3418] ret_from_fork+0x146/0x330 [ 37.241857][ T3418] ret_from_fork_asm+0x1a/0x30 [ 37.241881][ T3418] [ 37.241885][ T3418] value changed: 0x00000000 -> 0x00000001 [ 37.241896][ T3418] [ 37.241900][ T3418] Reported by Kernel Concurrency Sanitizer on: [ 37.241928][ T3418] CPU: 1 UID: 0 PID: 3418 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.241956][ T3418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.241975][ T3418] Workqueue: rcu_gp process_srcu [ 37.241999][ T3418] ================================================================== [ 37.814470][ T3534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.733697][ T3534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.784256][ T3534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.851074][ T689] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851474][ T689] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851595][ T689] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851694][ T689] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0