last executing test programs: 1.290239023s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x9, 0x17, 0x8, 0x4, 0x42, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r2}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.140791841s ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e1f, 0x0, 0x4, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0x3505, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0732376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d315d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc7f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11ee9afb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e75c40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) close(r5) 1.059210805s ago: executing program 1 (id=2): socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) epoll_create(0xaf2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffe0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 928.002702ms ago: executing program 3 (id=4): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x53}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r1 = syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 703.541923ms ago: executing program 1 (id=6): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="ce", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 378.32918ms ago: executing program 2 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x4000009, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 319.055913ms ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 252.777607ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x3100c20, &(0x7f0000000000)=ANY=[@ANYBLOB='mode=007']) 0s ago: executing program 3 (id=9): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000040000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x80284504, &(0x7f0000000000)=""/52) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 32.842221][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 32.842238][ T28] audit: type=1400 audit(1776753204.681:70): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.871323][ T28] audit: type=1400 audit(1776753204.711:71): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.873676][ T3309] cgroup: Unknown subsys name 'net' [ 32.899046][ T28] audit: type=1400 audit(1776753204.741:72): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.999221][ T3309] cgroup: Unknown subsys name 'cpuset' [ 33.005498][ T3309] cgroup: Unknown subsys name 'rlimit' [ 33.136877][ T28] audit: type=1400 audit(1776753204.971:73): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.160173][ T28] audit: type=1400 audit(1776753204.971:74): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.190134][ T28] audit: type=1400 audit(1776753204.971:75): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.210665][ T28] audit: type=1400 audit(1776753204.971:76): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.228998][ T3313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.231552][ T28] audit: type=1400 audit(1776753204.971:77): avc: denied { read } for pid=3049 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.260644][ T28] audit: type=1400 audit(1776753205.001:78): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.285445][ T28] audit: type=1400 audit(1776753205.001:79): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.289900][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.528816][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 34.538354][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 34.628449][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.635709][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.642915][ T3329] bridge_slave_0: entered allmulticast mode [ 34.649330][ T3329] bridge_slave_0: entered promiscuous mode [ 34.676092][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.683324][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.690529][ T3329] bridge_slave_1: entered allmulticast mode [ 34.697061][ T3329] bridge_slave_1: entered promiscuous mode [ 34.703595][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 34.720085][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.727159][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.734310][ T3322] bridge_slave_0: entered allmulticast mode [ 34.740709][ T3322] bridge_slave_0: entered promiscuous mode [ 34.762873][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.770282][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.777691][ T3322] bridge_slave_1: entered allmulticast mode [ 34.784191][ T3322] bridge_slave_1: entered promiscuous mode [ 34.805651][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 34.819783][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.841936][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.852185][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.861320][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 34.881206][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.925578][ T3329] team0: Port device team_slave_0 added [ 34.938611][ T3322] team0: Port device team_slave_0 added [ 34.949684][ T3329] team0: Port device team_slave_1 added [ 34.958030][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.965464][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.972709][ T3328] bridge_slave_0: entered allmulticast mode [ 34.979257][ T3328] bridge_slave_0: entered promiscuous mode [ 34.986204][ T3322] team0: Port device team_slave_1 added [ 35.006024][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.013235][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.020431][ T3328] bridge_slave_1: entered allmulticast mode [ 35.026864][ T3328] bridge_slave_1: entered promiscuous mode [ 35.060720][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.067685][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.093697][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.104472][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.111634][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.118893][ T3326] bridge_slave_0: entered allmulticast mode [ 35.125315][ T3326] bridge_slave_0: entered promiscuous mode [ 35.136429][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.143422][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.169351][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.184415][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.191555][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.217543][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.228750][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.235945][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.243113][ T3326] bridge_slave_1: entered allmulticast mode [ 35.249622][ T3326] bridge_slave_1: entered promiscuous mode [ 35.256967][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.266372][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.273377][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.299327][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.322357][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.338783][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.346019][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.353231][ T3321] bridge_slave_0: entered allmulticast mode [ 35.359817][ T3321] bridge_slave_0: entered promiscuous mode [ 35.366557][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.373661][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.380821][ T3321] bridge_slave_1: entered allmulticast mode [ 35.387280][ T3321] bridge_slave_1: entered promiscuous mode [ 35.405293][ T3328] team0: Port device team_slave_0 added [ 35.411964][ T3328] team0: Port device team_slave_1 added [ 35.428897][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.439729][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.459385][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.487572][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.510895][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.517977][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.543978][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.557409][ T3329] hsr_slave_0: entered promiscuous mode [ 35.563600][ T3329] hsr_slave_1: entered promiscuous mode [ 35.583729][ T3322] hsr_slave_0: entered promiscuous mode [ 35.590006][ T3322] hsr_slave_1: entered promiscuous mode [ 35.595804][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 35.601590][ T3322] Cannot create hsr debugfs directory [ 35.607877][ T3326] team0: Port device team_slave_0 added [ 35.613772][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.620746][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.646993][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.658722][ T3321] team0: Port device team_slave_0 added [ 35.665614][ T3321] team0: Port device team_slave_1 added [ 35.672024][ T3326] team0: Port device team_slave_1 added [ 35.725279][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.732310][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.758332][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.772271][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.779289][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.805379][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.823672][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.830678][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.856649][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.870242][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.877253][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.903185][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.916194][ T3328] hsr_slave_0: entered promiscuous mode [ 35.922344][ T3328] hsr_slave_1: entered promiscuous mode [ 35.928160][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 35.933911][ T3328] Cannot create hsr debugfs directory [ 36.005683][ T3326] hsr_slave_0: entered promiscuous mode [ 36.011744][ T3326] hsr_slave_1: entered promiscuous mode [ 36.017490][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 36.023282][ T3326] Cannot create hsr debugfs directory [ 36.037105][ T3321] hsr_slave_0: entered promiscuous mode [ 36.043125][ T3321] hsr_slave_1: entered promiscuous mode [ 36.049039][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.054906][ T3321] Cannot create hsr debugfs directory [ 36.200686][ T3329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.209460][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.224280][ T3329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.232902][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.245404][ T3329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.253877][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.263942][ T3329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.272677][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.291160][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.300136][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.309276][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.317878][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.325569][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.334315][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.345844][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.354415][ T3322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.388058][ T3328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.396870][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.404769][ T3328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.413535][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.421563][ T3328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.430397][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.438209][ T3328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.446978][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.492191][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.500986][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.509864][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.518668][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.529049][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.537668][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.545572][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.554531][ T3326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.570269][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.607025][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.615690][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.624510][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.633174][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.641058][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.649731][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.657612][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.666544][ T3321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.676202][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.685538][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.704032][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.711188][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.723458][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.732909][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.740149][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.754068][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.780208][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.787292][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.797877][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.808922][ T1767] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.815986][ T1767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.832776][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.839857][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.848633][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.855717][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.891186][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.920488][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.953423][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.964311][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.986591][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.993704][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.009395][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.020715][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.027811][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.042366][ T1767] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.049508][ T1767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.067544][ T1767] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.074747][ T1767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.095947][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.117609][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.143330][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.271001][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.310298][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.323389][ T3328] veth0_vlan: entered promiscuous mode [ 37.331461][ T3328] veth1_vlan: entered promiscuous mode [ 37.353664][ T3329] veth0_vlan: entered promiscuous mode [ 37.363478][ T3322] veth0_vlan: entered promiscuous mode [ 37.385396][ T3329] veth1_vlan: entered promiscuous mode [ 37.400164][ T3328] veth0_macvtap: entered promiscuous mode [ 37.410190][ T3322] veth1_vlan: entered promiscuous mode [ 37.417931][ T3328] veth1_macvtap: entered promiscuous mode [ 37.451710][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.463684][ T3329] veth0_macvtap: entered promiscuous mode [ 37.475130][ T3322] veth0_macvtap: entered promiscuous mode [ 37.483179][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.492751][ T3329] veth1_macvtap: entered promiscuous mode [ 37.504151][ T3322] veth1_macvtap: entered promiscuous mode [ 37.517568][ T1705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.528297][ T219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.545527][ T219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.558618][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.568052][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.577888][ T219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.601631][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.609996][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.620298][ T3328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.637441][ T3321] veth0_vlan: entered promiscuous mode [ 37.649134][ T219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.657896][ T219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.676126][ T3326] veth0_vlan: entered promiscuous mode [ 37.682337][ T219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.696177][ T219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.706306][ T3321] veth1_vlan: entered promiscuous mode [ 37.723576][ T219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.738409][ T3326] veth1_vlan: entered promiscuous mode [ 37.745504][ T219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.755080][ T219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.779921][ T219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.813407][ T3321] veth0_macvtap: entered promiscuous mode [ 37.845230][ T3321] veth1_macvtap: entered promiscuous mode [ 37.857472][ T3326] veth0_macvtap: entered promiscuous mode [ 37.866482][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 37.866539][ T28] audit: type=1400 audit(1776753209.711:112): avc: denied { create } for pid=3494 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.898964][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.900716][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.924628][ T3326] veth1_macvtap: entered promiscuous mode [ 37.925045][ T1705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.925166][ T1705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.925239][ T1705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.925278][ T1705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.937103][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.946202][ T28] audit: type=1400 audit(1776753209.711:113): avc: denied { setopt } for pid=3494 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.946293][ T28] audit: type=1400 audit(1776753209.711:114): avc: denied { create } for pid=3494 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.946315][ T28] audit: type=1400 audit(1776753209.711:115): avc: denied { setopt } for pid=3494 comm="syz.2.3" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.946391][ T28] audit: type=1400 audit(1776753209.711:116): avc: denied { connect } for pid=3494 comm="syz.2.3" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.946417][ T28] audit: type=1400 audit(1776753209.781:117): avc: denied { read write } for pid=3496 comm="syz.1.2" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.946440][ T28] audit: type=1400 audit(1776753209.781:118): avc: denied { read write open } for pid=3496 comm="syz.1.2" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.946482][ T28] audit: type=1400 audit(1776753209.781:119): avc: denied { ioctl } for pid=3496 comm="syz.1.2" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.972951][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.992916][ T28] audit: type=1400 audit(1776753209.831:120): avc: denied { allowed } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.997426][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.998290][ T28] audit: type=1400 audit(1776753209.831:121): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.008242][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.008719][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.008763][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.727193][ T3512] syzkaller0: entered promiscuous mode [ 38.743014][ T3512] syzkaller0: entered allmulticast mode [ 38.913040][ T3321] ================================================================== [ 38.921208][ T3321] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 38.928885][ T3321] [ 38.931232][ T3321] read-write to 0xffff88811a773c20 of 8 bytes by task 3504 on cpu 0: [ 38.939309][ T3321] inode_add_bytes+0x47/0xe0 [ 38.943934][ T3321] __dquot_alloc_space+0x180/0x8a0 [ 38.949079][ T3321] shmem_inode_acct_blocks+0x125/0x230 [ 38.954657][ T3321] shmem_get_folio_gfp+0x5b2/0xd60 [ 38.959805][ T3321] shmem_write_begin+0xfc/0x1f0 [ 38.964713][ T3321] generic_perform_write+0x183/0x490 [ 38.970043][ T3321] shmem_file_write_iter+0xc5/0xf0 [ 38.975192][ T3321] __kernel_write_iter+0x319/0x590 [ 38.980349][ T3321] dump_user_range+0xa73/0xd00 [ 38.985127][ T3321] elf_core_dump+0x21a2/0x2330 [ 38.989932][ T3321] coredump_write+0xacc/0xdd0 [ 38.994616][ T3321] vfs_coredump+0x26dd/0x31e0 [ 38.999294][ T3321] get_signal+0xd5c/0xf20 [ 39.003615][ T3321] arch_do_signal_or_restart+0x96/0x450 [ 39.009187][ T3321] irqentry_exit+0x140/0x5b0 [ 39.013855][ T3321] asm_exc_page_fault+0x26/0x30 [ 39.018711][ T3321] [ 39.021054][ T3321] read to 0xffff88811a773c20 of 8 bytes by task 3321 on cpu 1: [ 39.028633][ T3321] generic_fillattr+0x27d/0x340 [ 39.033493][ T3321] shmem_getattr+0x181/0x200 [ 39.038122][ T3321] vfs_getattr_nosec+0x146/0x1e0 [ 39.043080][ T3321] vfs_getattr+0x48/0x60 [ 39.047326][ T3321] vfs_statx_path+0x28/0x140 [ 39.051928][ T3321] vfs_statx+0xc4/0x170 [ 39.056089][ T3321] vfs_fstatat+0x118/0x170 [ 39.060524][ T3321] __se_sys_newfstatat+0x55/0x3e0 [ 39.065555][ T3321] __x64_sys_newfstatat+0x55/0x70 [ 39.070592][ T3321] x64_sys_call+0x2c64/0x3020 [ 39.075281][ T3321] do_syscall_64+0x12c/0x3b0 [ 39.079868][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.085879][ T3321] [ 39.088202][ T3321] value changed: 0x000000000001b478 -> 0x000000000001b488 [ 39.095304][ T3321] [ 39.097649][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 39.103818][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 39.113384][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.123457][ T3321] ================================================================== [ 39.720474][ T3520] loop3: detected capacity change from 0 to 2048 [ 39.765172][ T3520] loop3: p2 p3 p7