last executing test programs: 2.635668857s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4004890}, 0xc080) 2.593795139s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 2.413533816s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x40, 0x10, 0x84, {0x84, 0xc, "2810e8f8b9789bd1198b919025d7ed209679243305abb4ba33a20b615c1129c722675c6b09746e6ab95843df7e6df9b03d6adc874ea0b86b896abdc9be018e3b0f1cbec215f729aeedeb643202a76993725935a4cd7d8a57c3d5470e8975ac0c635741ba8e208d2288a14c61dd0e8ffed3ddaf42b707375040e323c45af5c197ff21"}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.413313556s ago: executing program 2 (id=7): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) 2.166863137s ago: executing program 4 (id=8): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) 1.86279636s ago: executing program 1 (id=11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket(0x28, 0x6, 0x7f) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000001700)={@multicast2, @initdev}, &(0x7f0000001740)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001840)={'syztnl1\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0xb, 0x0, 0x4a, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0x7, 0x7}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001940)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001a00)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x448a0) dup3(r2, r0, 0x80000) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x4000000) 1.792949543s ago: executing program 4 (id=12): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.727202286s ago: executing program 0 (id=13): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffe, 0xfffffffffffffffc}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.717253876s ago: executing program 4 (id=14): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.713232786s ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.646841109s ago: executing program 4 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0), 0x0, 0x20080058) 1.646590529s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200000004"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.646445799s ago: executing program 4 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) 1.646348399s ago: executing program 1 (id=19): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x8021, 0x4) 1.602066751s ago: executing program 1 (id=20): r0 = io_uring_setup(0x6e1e, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x23, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x20) 1.600286661s ago: executing program 3 (id=21): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x3b, &(0x7f0000000240)=@string={0x3b, 0x3, "c5c4ac0c9f22c8fce7e37c43dee3bcd747a95374ebb8f957041c656d35dd113aa1f72f8d1a0fd98c1b1503a527913b274cde660479117cf346"}}, {0xb1, &(0x7f0000000480)=@string={0xb1, 0x3, "24e8e073bc00169e5740a38bb56a37d8354932752512a7939a882a3a591e6186e8d186c1c8f9a2ebe1ad1b37bfb6af5a8ed9d8ed273341babcc1fa219d77ce904e7e4367a4af351e0da8c9190acc7227108e3be8b6f56815fd883a81ddc4feae39d2e250372a16df00f814852d5865ab677112b6a986a1dcfacdc515a901acdce44e7f105db87192f6e41dee6fea0cdcd200cb3fa08162f2c86b815e7f8adce89b1b118d2680acca703ac9d7688264"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.489487416s ago: executing program 2 (id=22): socket$kcm(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 834.872054ms ago: executing program 1 (id=23): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5c00000013006bcd9ea918bc5a8eb62320dd3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00f53e4b825f853cb612a80750df6e7d072d3738bd5d3737f403fc4126f07255e1fa80", 0x53}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000084) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 758.729937ms ago: executing program 0 (id=24): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/70, 0x8000, 0x1000, 0x0, 0x7}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 756.621268ms ago: executing program 4 (id=25): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x200007}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 670.759981ms ago: executing program 1 (id=26): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet(0x2, 0x3, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 116.872955ms ago: executing program 3 (id=27): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80282, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 46.908278ms ago: executing program 3 (id=28): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 46.684608ms ago: executing program 3 (id=29): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x5, {{0x2, 0x4e25, @multicast2}}, {{0x2, 0x81, @broadcast}}}, 0x108) 18.716929ms ago: executing program 3 (id=30): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x98}}, 0x0) 0s ago: executing program 3 (id=31): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @local, 0x800f}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 32.836557][ T29] audit: type=1400 audit(1764693948.714:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.859618][ T29] audit: type=1400 audit(1764693948.734:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.860641][ T3308] cgroup: Unknown subsys name 'net' [ 32.887618][ T29] audit: type=1400 audit(1764693948.764:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.046207][ T3308] cgroup: Unknown subsys name 'cpuset' [ 33.052529][ T3308] cgroup: Unknown subsys name 'rlimit' [ 33.205213][ T29] audit: type=1400 audit(1764693949.074:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.235724][ T29] audit: type=1400 audit(1764693949.084:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.256182][ T29] audit: type=1400 audit(1764693949.084:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.276714][ T29] audit: type=1400 audit(1764693949.084:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.297058][ T29] audit: type=1400 audit(1764693949.094:69): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.322226][ T29] audit: type=1400 audit(1764693949.094:70): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.330065][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.354453][ T29] audit: type=1400 audit(1764693949.234:71): avc: denied { relabelto } for pid=3312 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.397376][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.304942][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.316590][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.343342][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.410455][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.442454][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 35.457549][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.464697][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.471953][ T3323] bridge_slave_0: entered allmulticast mode [ 35.478460][ T3323] bridge_slave_0: entered promiscuous mode [ 35.500207][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.507360][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.514471][ T3323] bridge_slave_1: entered allmulticast mode [ 35.520995][ T3323] bridge_slave_1: entered promiscuous mode [ 35.560323][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.567475][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.574666][ T3319] bridge_slave_0: entered allmulticast mode [ 35.581356][ T3319] bridge_slave_0: entered promiscuous mode [ 35.594870][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.602281][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.609444][ T3320] bridge_slave_0: entered allmulticast mode [ 35.616053][ T3320] bridge_slave_0: entered promiscuous mode [ 35.627655][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.635109][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.642348][ T3319] bridge_slave_1: entered allmulticast mode [ 35.648768][ T3319] bridge_slave_1: entered promiscuous mode [ 35.659342][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.668545][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.675792][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.682943][ T3320] bridge_slave_1: entered allmulticast mode [ 35.689402][ T3320] bridge_slave_1: entered promiscuous mode [ 35.709409][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.753874][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.763262][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.770531][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.777802][ T3318] bridge_slave_0: entered allmulticast mode [ 35.784240][ T3318] bridge_slave_0: entered promiscuous mode [ 35.797134][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.806420][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.813592][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.820804][ T3326] bridge_slave_0: entered allmulticast mode [ 35.827315][ T3326] bridge_slave_0: entered promiscuous mode [ 35.834712][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.843945][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.851066][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.858587][ T3318] bridge_slave_1: entered allmulticast mode [ 35.865018][ T3318] bridge_slave_1: entered promiscuous mode [ 35.871955][ T3323] team0: Port device team_slave_0 added [ 35.878809][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.888047][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.895087][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.902452][ T3326] bridge_slave_1: entered allmulticast mode [ 35.908928][ T3326] bridge_slave_1: entered promiscuous mode [ 35.930435][ T3323] team0: Port device team_slave_1 added [ 35.946667][ T3319] team0: Port device team_slave_0 added [ 35.971129][ T3319] team0: Port device team_slave_1 added [ 35.978621][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.993147][ T3320] team0: Port device team_slave_0 added [ 36.000032][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.014967][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.024847][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.031874][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.058122][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.069972][ T3320] team0: Port device team_slave_1 added [ 36.076915][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.102227][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.109373][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.135708][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.157122][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.164125][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.190109][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.201608][ T3318] team0: Port device team_slave_0 added [ 36.219846][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.226876][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.252969][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.267450][ T3318] team0: Port device team_slave_1 added [ 36.273986][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.281030][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.306973][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.318679][ T3326] team0: Port device team_slave_0 added [ 36.338368][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.345438][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.371489][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.383193][ T3326] team0: Port device team_slave_1 added [ 36.399972][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.407009][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.432962][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.462789][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.469793][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.495971][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.514511][ T3323] hsr_slave_0: entered promiscuous mode [ 36.520736][ T3323] hsr_slave_1: entered promiscuous mode [ 36.536268][ T3319] hsr_slave_0: entered promiscuous mode [ 36.542563][ T3319] hsr_slave_1: entered promiscuous mode [ 36.548618][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 36.554357][ T3319] Cannot create hsr debugfs directory [ 36.561110][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.568164][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.594143][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.612030][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.619048][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.645129][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.681468][ T3320] hsr_slave_0: entered promiscuous mode [ 36.687869][ T3320] hsr_slave_1: entered promiscuous mode [ 36.693814][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.699594][ T3320] Cannot create hsr debugfs directory [ 36.723936][ T3318] hsr_slave_0: entered promiscuous mode [ 36.730491][ T3318] hsr_slave_1: entered promiscuous mode [ 36.736404][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.742139][ T3318] Cannot create hsr debugfs directory [ 36.780154][ T3326] hsr_slave_0: entered promiscuous mode [ 36.786331][ T3326] hsr_slave_1: entered promiscuous mode [ 36.792116][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 36.797901][ T3326] Cannot create hsr debugfs directory [ 36.978940][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.987920][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.997226][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.009405][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.032765][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.043845][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.056383][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.072828][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.094866][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.107648][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.120631][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.131141][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.158715][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.169123][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.177894][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.191936][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.223211][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.234072][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.245284][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.257509][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.272713][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.311260][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.328037][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.335110][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.343948][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.351037][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.383543][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.411421][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.432106][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.443216][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.459845][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.471694][ T2262] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.478883][ T2262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.495550][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.503671][ T2262] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.510795][ T2262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.525061][ T2262] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.532174][ T2262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.541354][ T2262] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.548501][ T2262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.563814][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.570931][ T2143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.602406][ T2143] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.609535][ T2143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.628208][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.638971][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.665111][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.672223][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.686529][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.693667][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.727934][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.784307][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.868735][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.886244][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.949409][ T3323] veth0_vlan: entered promiscuous mode [ 37.977477][ T3323] veth1_vlan: entered promiscuous mode [ 37.988131][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.998075][ T3320] veth0_vlan: entered promiscuous mode [ 38.015883][ T3320] veth1_vlan: entered promiscuous mode [ 38.044811][ T3319] veth0_vlan: entered promiscuous mode [ 38.052714][ T3318] veth0_vlan: entered promiscuous mode [ 38.075360][ T3319] veth1_vlan: entered promiscuous mode [ 38.082604][ T3323] veth0_macvtap: entered promiscuous mode [ 38.090109][ T3318] veth1_vlan: entered promiscuous mode [ 38.098447][ T3320] veth0_macvtap: entered promiscuous mode [ 38.108742][ T3323] veth1_macvtap: entered promiscuous mode [ 38.120463][ T3320] veth1_macvtap: entered promiscuous mode [ 38.153935][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.161948][ T3319] veth0_macvtap: entered promiscuous mode [ 38.171759][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.183676][ T3318] veth0_macvtap: entered promiscuous mode [ 38.199324][ T3319] veth1_macvtap: entered promiscuous mode [ 38.213396][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.221826][ T3318] veth1_macvtap: entered promiscuous mode [ 38.234124][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.249391][ T2262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.268123][ T2262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.279094][ T2262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.289453][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.301769][ T2262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.313557][ T2262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.326942][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.336530][ T2262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.352958][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.361542][ T2262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373797][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.381306][ T2262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.392374][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.392390][ T29] audit: type=1400 audit(1764693954.274:81): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.D590gQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.425272][ T29] audit: type=1400 audit(1764693954.274:82): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.447379][ T29] audit: type=1400 audit(1764693954.274:83): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.D590gQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.472599][ T29] audit: type=1400 audit(1764693954.274:84): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.494496][ T29] audit: type=1400 audit(1764693954.274:85): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.D590gQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.521223][ T29] audit: type=1400 audit(1764693954.274:86): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.D590gQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.548688][ T29] audit: type=1400 audit(1764693954.274:87): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.568202][ T29] audit: type=1400 audit(1764693954.304:88): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.590992][ T29] audit: type=1400 audit(1764693954.304:89): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.614252][ T3326] veth0_vlan: entered promiscuous mode [ 38.621239][ T2143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.639724][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.658767][ T2143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.668323][ T3326] veth1_vlan: entered promiscuous mode [ 38.686996][ T2143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.700249][ T29] audit: type=1400 audit(1764693954.574:90): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.721722][ T3326] veth0_macvtap: entered promiscuous mode [ 38.750662][ T2143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.771014][ T2143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.799038][ T3326] veth1_macvtap: entered promiscuous mode [ 38.805984][ T2143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.815111][ T2143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.842368][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.877078][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.903524][ T2143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.948886][ T2143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.958024][ T2143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.959357][ T3507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.976723][ T2143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.990267][ T3502] bridge0: entered promiscuous mode [ 38.997020][ T3507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.005952][ T3502] macsec1: entered promiscuous mode [ 39.014438][ T3502] bridge0: port 3(macsec1) entered blocking state [ 39.021041][ T3502] bridge0: port 3(macsec1) entered disabled state [ 39.030158][ T3502] macsec1: entered allmulticast mode [ 39.035591][ T3502] bridge0: entered allmulticast mode [ 39.042230][ T3502] macsec1: left allmulticast mode [ 39.047482][ T3502] bridge0: left allmulticast mode [ 39.059800][ T3502] bridge0: left promiscuous mode [ 39.069694][ T2143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.702081][ T3538] sock: sock_timestamping_bind_phc: sock not bind to device [ 40.374911][ T3548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.485614][ T3548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.582931][ T3552] program syz.1.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.653622][ T3554] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.355986][ T3557] ================================================================== [ 41.364157][ T3557] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 41.371133][ T3557] [ 41.373473][ T3557] read-write to 0xffff888118757f6c of 4 bytes by task 3550 on cpu 1: [ 41.381566][ T3557] fifo_open+0x17f/0x5d0 [ 41.385837][ T3557] do_dentry_open+0x54b/0xa60 [ 41.390554][ T3557] vfs_open+0x37/0x1e0 [ 41.394666][ T3557] path_openat+0x1ddd/0x23b0 [ 41.399314][ T3557] do_filp_open+0x109/0x230 [ 41.403883][ T3557] do_sys_openat2+0xa6/0x150 [ 41.408506][ T3557] __x64_sys_open+0xe6/0x110 [ 41.413137][ T3557] x64_sys_call+0x166f/0x3000 [ 41.417861][ T3557] do_syscall_64+0xd8/0x2a0 [ 41.422411][ T3557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.428332][ T3557] [ 41.430670][ T3557] read to 0xffff888118757f6c of 4 bytes by task 3557 on cpu 0: [ 41.438245][ T3557] wait_for_partner+0xf7/0x1c0 [ 41.443138][ T3557] fifo_open+0x4b1/0x5d0 [ 41.447411][ T3557] do_dentry_open+0x54b/0xa60 [ 41.452117][ T3557] vfs_open+0x37/0x1e0 [ 41.456263][ T3557] path_openat+0x1ddd/0x23b0 [ 41.461078][ T3557] do_filp_open+0x109/0x230 [ 41.465635][ T3557] do_sys_openat2+0xa6/0x150 [ 41.470246][ T3557] __se_sys_openat2+0x194/0x1f0 [ 41.475120][ T3557] __x64_sys_openat2+0x55/0x70 [ 41.479906][ T3557] x64_sys_call+0x2c04/0x3000 [ 41.484601][ T3557] do_syscall_64+0xd8/0x2a0 [ 41.489127][ T3557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.495035][ T3557] [ 41.497368][ T3557] value changed: 0x00000002 -> 0x00000001 [ 41.503089][ T3557] [ 41.505415][ T3557] Reported by Kernel Concurrency Sanitizer on: [ 41.511590][ T3557] CPU: 0 UID: 0 PID: 3557 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.521145][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.531215][ T3557] ================================================================== [ 41.587024][ T3562] syz.4.25 (3562) used greatest stack depth: 10128 bytes left