last executing test programs: 2.243211985s ago: executing program 4 (id=3583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e99900000000ffdbdf2500000000000000000000000000000001ac1e00000000de0000008000000004bb60000000000a00603000fbb700d9472a61ee2e7c060b2a38df3054c7296cd12292600b5c776e2ddcbe3714bbbef73a613ff14f243ada78bff29d929a0078a3d9c5dd6e3b8b02ea77922366935ae5268ab9c853d551", @ANYRES64, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000000000000000000000000000000000020000200000000000ffffffffffffffff0000000000000000ffffffffffffffff000000000000000000000000008000000000000000000000360900000000000000000000000000000101000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a0004ce57aaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2.212285155s ago: executing program 4 (id=3585): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2.105240286s ago: executing program 4 (id=3590): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008844, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 2.000029708s ago: executing program 2 (id=3596): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) r2 = gettid() execve(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000a00)) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) 1.87714312s ago: executing program 3 (id=3598): timer_create(0x3, 0x0, &(0x7f0000044000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9111, 0x3, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xc89f, 0x3, 0x0, 0x8001, 0x3, 0x1}}, {0x6, 0x2, [0x16c8]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4048000) 1.87673832s ago: executing program 3 (id=3599): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0xa, 0x2, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}, {0x2, 0xfff9}], 0x2) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) fallocate(r1, 0x5, 0x7, 0x10000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x845, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x300000000000000, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x7ff, 0x101a40) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1.776534521s ago: executing program 0 (id=3603): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) open(0x0, 0x14167e, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x4124, 0x61830}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x40}}, 0x0) 1.412408878s ago: executing program 1 (id=3607): syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240), &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x3, @empty, 0xbde}}, 0x2, 0x0, 0x2d, 0x0, "598ae7732e1e01bd123f7e8050b93adc9cb9750e8a2f49a3d1c23b9e3d6dc52fc09a86dfe42bf69380a09be4758a9bae36a3a4c787d16a19efb30b0d000000b2f201c65500"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x0) 1.411832998s ago: executing program 0 (id=3618): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0x80}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) 1.392655058s ago: executing program 1 (id=3609): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, &(0x7f0000000f80), &(0x7f00000005c0), 0x4, r1}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) semop(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) read$ptp(r4, 0x0, 0x0) 1.208763701s ago: executing program 4 (id=3610): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x101000) ioctl(r3, 0x40044581, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) shutdown(0xffffffffffffffff, 0x2) 1.154145041s ago: executing program 2 (id=3611): timer_create(0x3, 0x0, &(0x7f0000044000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9111, 0x3, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xc89f, 0x3, 0x0, 0x8001, 0x3, 0x1}}, {0x6, 0x2, [0x16c8]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4048000) 1.106320952s ago: executing program 2 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2000, 0x400, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x11, 0x6, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 1.040758003s ago: executing program 2 (id=3613): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) write$P9_RXATTRWALK(r0, &(0x7f0000000280)={0xf, 0x1f, 0x1, 0x4}, 0xf) socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x5}, {0x49, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xfffffffe}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x28441, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x7f, 0x40, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = syz_open_pts(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x200220, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) execve(0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x12) getdents64(r3, &(0x7f0000000140)=""/233, 0xe9) 1.040443853s ago: executing program 1 (id=3614): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) 926.074105ms ago: executing program 0 (id=3615): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 914.641575ms ago: executing program 0 (id=3616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz72NwkAUBODx2WtfdDVcSBN0AbUQ8idED3QAAS0Q0gtNgCzjgAIQQvq+ZGe0u0964aPaxWvfnrv+OAytKtVqvJk0acb8m9Ql+cmt+9+tSzJt+1lJrpvj7PnovkxK6lL1Zfxa57L/G2KTzE/v3Q4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvsMjAAD//wv/C64=") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="19000109000000000000000f021800000002fd6fd7aea20008000100ac14140008000500ac14142f10001605000000f0000000002dae000008000b0004000000"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000ed7a8af8ff00000000bfa200000000000007020800f8ffffffb703000008000000b704000000000000850001000000000095"], 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = getpgid(0xffffffffffffffff) waitid(0x0, r3, &(0x7f0000001080), 0x80000000, &(0x7f0000001100)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xd) ioctl$KDSIGACCEPT(r2, 0x541b, 0x100000001ffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x134, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x104, 0x2, [@TCA_CGROUP_EMATCHES={0x100, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0xc2, 0x5, "2749ee06725648f29cd63b6772c88c721fda4100d61006f39e93e153bb1e08a575bea346786f506fe7c5e294888869e96c700cc7edebc4fea584b13f65cceb6f496a4ea5bf0413a7bcda7240ec1a9ac273fb4d1578b664004e39d2db2e44a386690aa7dc9b7b11b613d85e744fe0e153cb901cce529a9702fc60580479fa35abb1982fb73a8e9c7aac1cf3014d66b51f7ce3c121376e549072522c26612da849c30642b01f502668b0307452d8f7ba73b55486c41c79fe2b85988394ceda"}, @TCA_EM_IPT_MATCH_NAME={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "489b"}]}}]}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 913.509065ms ago: executing program 1 (id=3617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 908.469835ms ago: executing program 3 (id=3619): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0x2c4b, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/116, &(0x7f00000002c0)=0x74) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000e, 0x20010, r1, 0xa7926000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r5 = perf_event_open$cgroup(&(0x7f0000000440)={0x1, 0x80, 0x8, 0xe1, 0x81, 0x41, 0x0, 0xf, 0x0, 0x18, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb5e, 0x2, @perf_config_ext={0x4, 0x1}, 0x40, 0x87, 0x1, 0x1, 0x0, 0x64, 0x800, 0x0, 0x9, 0x0, 0xe}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x72, 0xa, 0x5, 0x0, 0x8000000000000001, 0x10048, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x8b6ce66ca71ed69c}, 0x8000, 0x8, 0x3, 0x2, 0xc, 0x3ff, 0x3ff, 0x0, 0x6152, 0x0, 0x2}, r3, 0xb, r5, 0x1) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000500)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000540)=0xfd, 0x4) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xa07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd2, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x3, 0x10, 0x1, {0x22, 0x8b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x5, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x7, 0x2, 0xf, 0x40, 0xd}, 0x1c, &(0x7f0000000600)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2096d3fb3924fd4cd4ca3ff0e53782cb"}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_disconnect(r6) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000006c0)={0x4, [0x2, 0x6, 0xf, 0x5]}, 0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000740), 0x1142482, &(0x7f0000000780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}, {@access_uid={'access', 0x3d, r4}}], [{@permit_directio}, {@euid_lt={'euid<', r4}}]}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000840)=0x400, 0x8) r7 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x4, 0x3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x88}}, 0x4008004) 783.784898ms ago: executing program 1 (id=3620): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000300)={0x24, @short={0x2, 0x2, 0x555c}}, 0x14) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000200001"], 0x54}}, 0x20000080) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011fe0100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xb, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x98, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x80007}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='host1x_channel_submitted\x00', r7, 0x0, 0x1}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 732.471948ms ago: executing program 2 (id=3621): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x1b, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9000, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@access_client}], [{@obj_role={'obj_role', 0x3d, '&'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@euid_eq={'euid', 0x3d, r2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x6, 0x9, 0x0, 0x200002b0, 0x200082e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r6 = msgget$private(0x0, 0x100) msgsnd(r6, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0xc56, 0x0) msgsnd(r6, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0xfd1, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) msgsnd(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xfe, 0x800) open(&(0x7f0000000080)='./file0\x00', 0x20401, 0x2) 731.373618ms ago: executing program 0 (id=3631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x3, 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x40400000000005, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000167ea7ea6a0000000000000096ab06bb3cad0000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, 0x0, &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 693.387859ms ago: executing program 0 (id=3622): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) r2 = gettid() execve(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000a00)) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) 663.641039ms ago: executing program 1 (id=3623): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x75226026e5508c9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="01000000000000"], 0xc56, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa4, 0x1, [@m_simple={0xa0, 0x9, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xc272, 0x2, 0xb813, 0xff}}, @TCA_DEF_DATA={0x16, 0x3, '&\')!)+:.):\\))+\xbb\xe2)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x20000000, 0x437, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x20000000, 0x71d}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x9, 0x6, "d58bf499cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) syz_clone3(&(0x7f0000002680)={0x80000, &(0x7f0000000940), &(0x7f0000000c40), 0x0, {0xf}, &(0x7f0000000f80)=""/63, 0x3f, &(0x7f0000002540)=""/251, &(0x7f0000002640)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r2}}, 0x58) 611.38528ms ago: executing program 2 (id=3624): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000000000070200000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x12, 0xfd, 0x0, 0x3, 0x85000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0xc5}, 0x2424, 0x2000000, 0x800000, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 488.682472ms ago: executing program 4 (id=3625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x4c80c) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002d40)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 461.120852ms ago: executing program 4 (id=3626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x44, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000000000003000000000300000a20000000000a05000000000000000000070000000900010073797a3000000000440000000906000000000000000000000700ffff08000a40000000090000000073797a310000d75ea43ba100000900010073797a300000"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) futex(&(0x7f00000001c0)=0x2, 0x7, 0x2, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000300)=0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r3, r2, 0x0, 0x7ffff000) 69.399948ms ago: executing program 3 (id=3627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 543.769µs ago: executing program 3 (id=3628): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{}], 0x8, 0xd, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10004, 0x1, 0x4, 0x5, 0x20009, 0x2b, 0x0, 0x40000000, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) connect$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xd8d9, @dev={0xfe, 0x80, '\x00', 0x24}, 0x800, 0x4}, 0x20) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0'}, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fdatasync(r3) 0s ago: executing program 3 (id=3639): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) r2 = gettid() execve(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000a00)) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) kernel console output (not intermixed with test programs): : type=1400 audit(1753720812.865:12263): avc: denied { prog_load } for pid=8458 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 118.689256][ T29] audit: type=1400 audit(1753720812.865:12264): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.713618][ T29] audit: type=1400 audit(1753720812.885:12265): avc: denied { create } for pid=8458 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 118.733371][ T29] audit: type=1400 audit(1753720812.885:12266): avc: denied { map_create } for pid=8456 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.046400][ T8489] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.182104][ T8510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.530869][ T8521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8521 comm=syz.1.1807 [ 119.557602][ T8523] netlink: 'syz.3.1808': attribute type 4 has an invalid length. [ 119.570871][ T8523] netlink: 'syz.3.1808': attribute type 4 has an invalid length. [ 119.901258][ T36] lo speed is unknown, defaulting to 1000 [ 119.907054][ T36] syz0: Port: 1 Link DOWN [ 119.922853][ T36] lo speed is unknown, defaulting to 1000 [ 120.097478][ T8553] lo speed is unknown, defaulting to 1000 [ 120.134987][ T8551] lo speed is unknown, defaulting to 1000 [ 120.232956][ T8554] lo speed is unknown, defaulting to 1000 [ 120.414421][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 120.464316][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1826'. [ 120.473938][ T8567] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1826'. [ 120.483302][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1826'. [ 120.492446][ T8567] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1826'. [ 120.502360][ T8567] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1826'. [ 120.519949][ T8569] bridge_slave_0: left allmulticast mode [ 120.526189][ T8569] bridge_slave_0: left promiscuous mode [ 120.532748][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.540729][ T8569] bridge_slave_1: left allmulticast mode [ 120.546471][ T8569] bridge_slave_1: left promiscuous mode [ 120.552300][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.619898][ T8578] netlink: 'syz.3.1832': attribute type 27 has an invalid length. [ 120.628880][ T8580] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 120.628968][ T8578] 0ªî{X¹¦: left allmulticast mode [ 120.645632][ T8578] ipvlan0: left allmulticast mode [ 120.650723][ T8578] veth0_vlan: left allmulticast mode [ 120.656883][ T8578] macsec0: left allmulticast mode [ 120.663001][ T8578] bridge3: left allmulticast mode [ 120.675552][ T8580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.696377][ T8578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.719010][ T8580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.733788][ T8580] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 120.746636][ T8580] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 120.771354][ T8586] veth7: entered promiscuous mode [ 120.777909][ T8586] bond2: (slave veth7): Enslaving as an active interface with a down link [ 120.785846][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.804150][ T8587] wg2: entered promiscuous mode [ 120.809586][ T8587] wg2: entered allmulticast mode [ 120.824279][ T8580] erspan0: entered allmulticast mode [ 120.831950][ T8580] bond2: (slave erspan0): making interface the new active one [ 120.842225][ T8580] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 120.961693][ T8608] lo speed is unknown, defaulting to 1000 [ 121.389572][ T8631] bridge0: entered allmulticast mode [ 121.404734][ T3417] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.479576][ T8634] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 121.648661][ T3837] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.873008][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 121.908143][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 121.935306][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 122.702691][ T3837] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 122.710575][ T3837] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 122.855028][ T8708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.875075][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.285213][ T8724] xt_hashlimit: max too large, truncated to 1048576 [ 123.529946][ T29] kauditd_printk_skb: 1161 callbacks suppressed [ 123.529970][ T29] audit: type=1400 audit(1753720817.713:13428): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.573105][ T29] audit: type=1400 audit(1753720817.753:13429): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.597534][ T29] audit: type=1400 audit(1753720817.753:13430): avc: denied { map_create } for pid=8732 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.617288][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.625320][ T29] audit: type=1400 audit(1753720817.763:13431): avc: denied { prog_load } for pid=8732 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.644565][ T29] audit: type=1400 audit(1753720817.763:13432): avc: denied { prog_load } for pid=8732 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.663774][ T29] audit: type=1400 audit(1753720817.763:13433): avc: denied { prog_load } for pid=8732 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.682999][ T29] audit: type=1400 audit(1753720817.782:13434): avc: denied { read write } for pid=8734 comm="syz.3.1897" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.707210][ T29] audit: type=1400 audit(1753720817.802:13435): avc: denied { prog_load } for pid=8734 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.726329][ T29] audit: type=1400 audit(1753720817.802:13436): avc: denied { prog_load } for pid=8734 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 123.745471][ T29] audit: type=1400 audit(1753720817.802:13437): avc: denied { mounton } for pid=8734 comm="syz.3.1897" path="/386/bus" dev="tmpfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 123.777367][ T8737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8737 comm=syz.2.1898 [ 123.874422][ T8752] netlink: 'syz.1.1904': attribute type 4 has an invalid length. [ 123.886628][ T8752] netlink: 'syz.1.1904': attribute type 4 has an invalid length. [ 123.918359][ T9] lo speed is unknown, defaulting to 1000 [ 123.924089][ T9] syz0: Port: 1 Link ACTIVE [ 123.928222][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.929282][ T1037] lo speed is unknown, defaulting to 1000 [ 124.381302][ T8800] lo speed is unknown, defaulting to 1000 [ 124.852215][ T8825] binfmt_misc: register: failed to install interpreter file ./file2 [ 125.167892][ T8839] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 125.176806][ T8839] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 125.256732][ T8848] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.829399][ T8858] netlink: 'syz.2.1962': attribute type 10 has an invalid length. [ 125.838690][ T8858] $Hÿ: (slave dummy0): Releasing backup interface [ 125.841982][ T8859] __nla_validate_parse: 7 callbacks suppressed [ 125.841995][ T8859] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 125.862627][ T8858] team0: Port device dummy0 added [ 125.869807][ T8858] netlink: 'syz.2.1962': attribute type 10 has an invalid length. [ 125.880974][ T8858] team0: Port device dummy0 removed [ 125.887801][ T8858] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 125.912996][ T8865] xt_recent: Unsupported userspace flags (00000068) [ 125.962000][ T8867] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 126.157279][ T8885] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.217613][ T8899] lo speed is unknown, defaulting to 1000 [ 126.307910][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 126.397549][ T8918] pim6reg1: entered promiscuous mode [ 126.402952][ T8918] pim6reg1: entered allmulticast mode [ 126.465727][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 126.513943][ T8929] futex_wake_op: syz.1.1984 tries to shift op by -1; fix this program [ 126.532099][ T8928] lo speed is unknown, defaulting to 1000 [ 126.620778][ T8933] $Hÿ: entered promiscuous mode [ 126.625823][ T8933] dummy0: entered promiscuous mode [ 126.655245][ T8937] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1983'. [ 126.749564][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 126.806810][ T8947] netlink: 'GPL': attribute type 10 has an invalid length. [ 127.548115][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 127.697755][ T8993] bridge0: port 3(dummy0) entered disabled state [ 127.712016][ T8993] dummy0: left allmulticast mode [ 127.721785][ T8993] bridge0: port 3(dummy0) entered disabled state [ 127.748645][ T8993] bridge_slave_1: left allmulticast mode [ 127.754388][ T8993] bridge_slave_1: left promiscuous mode [ 127.760729][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.783922][ T8993] bridge_slave_0: left allmulticast mode [ 127.789606][ T8993] bridge_slave_0: left promiscuous mode [ 127.796051][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.806157][ T8993] bond0: (slave bridge0): Releasing backup interface [ 128.413946][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 128.439079][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9038 comm=syz.4.2031 [ 128.621797][ T29] kauditd_printk_skb: 1187 callbacks suppressed [ 128.621812][ T29] audit: type=1400 audit(1753720822.749:14625): avc: denied { prog_load } for pid=9049 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.669104][ T29] audit: type=1400 audit(1753720822.779:14626): avc: denied { create } for pid=9049 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 128.689062][ T29] audit: type=1400 audit(1753720822.789:14627): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.713941][ T29] audit: type=1400 audit(1753720822.798:14628): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.741887][ T29] audit: type=1400 audit(1753720822.868:14629): avc: denied { prog_load } for pid=9054 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.761486][ T29] audit: type=1400 audit(1753720822.868:14630): avc: denied { map_create } for pid=9054 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.770145][ T9055] lo speed is unknown, defaulting to 1000 [ 128.780723][ T29] audit: type=1400 audit(1753720822.868:14631): avc: denied { prog_load } for pid=9054 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.780816][ T29] audit: type=1400 audit(1753720822.868:14632): avc: denied { prog_load } for pid=9054 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.780913][ T29] audit: type=1400 audit(1753720822.868:14633): avc: denied { prog_load } for pid=9054 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.780935][ T29] audit: type=1400 audit(1753720822.868:14634): avc: denied { open } for pid=9054 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 128.880672][ T9053] xt_ecn: cannot match TCP bits for non-tcp packets [ 129.022188][ T9068] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 129.026418][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2045'. [ 129.046693][ T9075] 8021q: VLANs not supported on ip6tnl0 [ 129.141294][ T9089] netlink: 'syz.2.2053': attribute type 4 has an invalid length. [ 129.160514][ T9089] netlink: 'syz.2.2053': attribute type 4 has an invalid length. [ 129.205979][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 129.433639][ T9113] syz_tun: entered promiscuous mode [ 129.440275][ T9113] batadv_slave_0: entered promiscuous mode [ 129.451286][ T9113] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 129.462053][ T9113] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.495770][ T9113] hsr1: entered allmulticast mode [ 129.500824][ T9113] batadv_slave_0: entered allmulticast mode [ 129.579498][ T9118] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2064'. [ 129.705112][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 130.308696][ T9149] xt_connbytes: Forcing CT accounting to be enabled [ 130.315446][ T9149] set match dimension is over the limit! [ 131.203953][ T9185] __nla_validate_parse: 5 callbacks suppressed [ 131.203969][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 131.261430][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 131.573889][ T9202] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.582355][ T9202] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.590767][ T9202] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.599141][ T9202] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.884831][ T9218] netlink: 'syz.1.2103': attribute type 10 has an invalid length. [ 131.892727][ T9218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2103'. [ 131.902539][ T9218] dummy0: entered promiscuous mode [ 131.909049][ T9218] bridge0: port 1(dummy0) entered blocking state [ 131.915507][ T9218] bridge0: port 1(dummy0) entered disabled state [ 131.927265][ T9218] netlink: 'syz.1.2103': attribute type 10 has an invalid length. [ 131.935728][ T9218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2103'. [ 131.999107][ T9218] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 132.115087][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 132.170958][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 132.182286][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'. [ 132.199818][ T9231] lo speed is unknown, defaulting to 1000 [ 132.313673][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 132.327081][ T9235] netlink: 'syz.2.2113': attribute type 16 has an invalid length. [ 132.334976][ T9235] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2113'. [ 132.459546][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'. [ 132.493096][ T9242] netlink: 'syz.0.2116': attribute type 6 has an invalid length. [ 132.521272][ T9242] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 132.552271][ T9242] team0: Port device dummy0 added [ 132.592299][ T9242] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 132.616591][ T9242] team0: Port device dummy0 removed [ 132.630398][ T9242] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.181626][ T9260] bridge0: port 1(dummy0) entered disabled state [ 133.283818][ T3390] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 133.676468][ T29] kauditd_printk_skb: 956 callbacks suppressed [ 133.676480][ T29] audit: type=1400 audit(1753720827.760:15591): avc: denied { prog_load } for pid=9279 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.683943][ T9280] netlink: 'syz.0.2132': attribute type 5 has an invalid length. [ 133.685001][ T29] audit: type=1400 audit(1753720827.770:15592): avc: denied { map_create } for pid=9279 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.685081][ T29] audit: type=1400 audit(1753720827.770:15593): avc: denied { prog_load } for pid=9279 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.687153][ T9280] ip6erspan0: entered promiscuous mode [ 133.689438][ T29] audit: type=1400 audit(1753720827.780:15594): avc: denied { map_create } for pid=9279 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.689641][ T29] audit: type=1400 audit(1753720827.780:15595): avc: denied { prog_load } for pid=9279 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.690243][ T29] audit: type=1326 audit(1753720827.780:15596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 133.690377][ T29] audit: type=1326 audit(1753720827.780:15597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 133.690638][ T29] audit: type=1326 audit(1753720827.780:15598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 133.690769][ T29] audit: type=1326 audit(1753720827.780:15599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 133.690862][ T29] audit: type=1326 audit(1753720827.780:15600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 135.025878][ T9317] netlink: 'syz.4.2143': attribute type 3 has an invalid length. [ 135.042472][ T9317] netlink: 'syz.4.2143': attribute type 3 has an invalid length. [ 135.135537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 135.782060][ T9338] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 135.831369][ T9338] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.860415][ T9343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.867463][ T9343] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 135.928784][ T9343] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 135.985521][ T9338] veth5: entered promiscuous mode [ 136.002007][ T9338] bond4: (slave veth5): Enslaving as an active interface with a down link [ 136.016615][ T9351] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.025102][ T9351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.033565][ T9351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.042627][ T9351] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 136.074963][ T9351] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.083466][ T9351] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.091929][ T9351] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.100428][ T9351] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 136.124223][ T9351] geneve3: entered promiscuous mode [ 136.129457][ T9351] geneve3: entered allmulticast mode [ 136.151058][ T9345] erspan0: entered allmulticast mode [ 136.158763][ T9345] bond4: (slave erspan0): making interface the new active one [ 136.167236][ T9345] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 136.272182][ T9370] __nla_validate_parse: 10 callbacks suppressed [ 136.272196][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 136.296112][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 136.376581][ T9378] SELinux: syz.4.2172 (9378) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.714743][ T9429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2194'. [ 137.585259][ T9479] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 137.605839][ T9479] dummy0: left promiscuous mode [ 137.651472][ T9489] lo speed is unknown, defaulting to 1000 [ 138.460092][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2224'. [ 138.475474][ T9509] netlink: 'syz.3.2225': attribute type 13 has an invalid length. [ 138.688505][ T9520] netlink: 'syz.1.2226': attribute type 13 has an invalid length. [ 138.706962][ T9520] 0ªî{X¹¦: refused to change device tx_queue_len [ 138.713404][ T9520] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 138.729423][ T36] lo speed is unknown, defaulting to 1000 [ 138.734160][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 138.734172][ T29] audit: type=1326 audit(1753720832.792:16228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 138.735219][ T36] syz0: Port: 1 Link DOWN [ 138.767620][ T36] lo speed is unknown, defaulting to 1000 [ 138.769854][ T29] audit: type=1400 audit(1753720832.792:16229): avc: denied { map_create } for pid=9519 comm="syz.0.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.795598][ T29] audit: type=1326 audit(1753720832.792:16230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 138.819062][ T29] audit: type=1326 audit(1753720832.792:16231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 138.846048][ T29] audit: type=1326 audit(1753720832.802:16232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 138.870207][ T29] audit: type=1400 audit(1753720832.802:16233): avc: denied { map_create } for pid=9519 comm="syz.0.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.889633][ T29] audit: type=1326 audit(1753720832.802:16234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 138.913855][ T29] audit: type=1326 audit(1753720832.802:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 138.938168][ T29] audit: type=1400 audit(1753720832.802:16236): avc: denied { prog_load } for pid=9519 comm="syz.0.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.957447][ T29] audit: type=1326 audit(1753720832.802:16237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 139.078829][ T9534] xt_CT: No such helper "netbios-ns" [ 139.315302][ T9544] lo speed is unknown, defaulting to 1000 [ 139.659106][ T9557] lo speed is unknown, defaulting to 1000 [ 139.945200][ T9573] lo speed is unknown, defaulting to 1000 [ 141.498850][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 141.663009][ T9629] netlink: 'syz.0.2272': attribute type 10 has an invalid length. [ 141.690676][ T9633] lo speed is unknown, defaulting to 1000 [ 141.725912][ T9629] bond0: (slave dummy0): Releasing backup interface [ 141.758202][ T9629] team0: Port device dummy0 added [ 141.796878][ T9629] netlink: 'syz.0.2272': attribute type 10 has an invalid length. [ 141.868303][ T9629] team0: Port device dummy0 removed [ 141.874790][ T9629] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.088610][ T9660] Falling back ldisc for ptm0. [ 142.212419][ T9673] netlink: 'syz.3.2289': attribute type 4 has an invalid length. [ 142.221975][ T9673] netlink: 'syz.3.2289': attribute type 4 has an invalid length. [ 142.674648][ T9691] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2297'. [ 142.755972][ T9695] netlink: 'syz.1.2298': attribute type 4 has an invalid length. [ 142.766243][ T9695] netlink: 'syz.1.2298': attribute type 4 has an invalid length. [ 142.775767][ T1037] lo speed is unknown, defaulting to 1000 [ 142.781565][ T1037] syz0: Port: 1 Link ACTIVE [ 142.786291][ T1037] lo speed is unknown, defaulting to 1000 [ 142.827613][ T9696] lo speed is unknown, defaulting to 1000 [ 142.842228][ T9701] netlink: 'syz.3.2301': attribute type 4 has an invalid length. [ 142.900518][ T9701] netlink: 'syz.3.2301': attribute type 4 has an invalid length. [ 142.998612][ T9713] $Hÿ: (slave dummy0): Releasing backup interface [ 143.012765][ T9713] dummy0: left promiscuous mode [ 143.053343][ T9718] xt_hashlimit: max too large, truncated to 1048576 [ 143.432059][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2317'. [ 143.757315][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 143.757327][ T29] audit: type=1400 audit(1753720837.801:16937): avc: denied { prog_load } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.827701][ T29] audit: type=1400 audit(1753720837.831:16938): avc: denied { prog_load } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.846911][ T29] audit: type=1400 audit(1753720837.851:16939): avc: denied { create } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 143.867472][ T29] audit: type=1400 audit(1753720837.851:16940): avc: denied { prog_load } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.886795][ T29] audit: type=1400 audit(1753720837.851:16941): avc: denied { create } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 143.907577][ T29] audit: type=1400 audit(1753720837.851:16942): avc: denied { map_create } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.926798][ T29] audit: type=1400 audit(1753720837.851:16943): avc: denied { prog_load } for pid=9758 comm="syz.3.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.945957][ T29] audit: type=1400 audit(1753720837.861:16944): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.970245][ T29] audit: type=1400 audit(1753720837.861:16945): avc: denied { execmem } for pid=9760 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 144.066992][ T29] audit: type=1400 audit(1753720838.031:16946): avc: denied { prog_load } for pid=9760 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 144.686611][ T9792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.974525][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'. [ 145.497196][ T9822] netlink: 'syz.4.2350': attribute type 4 has an invalid length. [ 145.507533][ T9822] netlink: 'syz.4.2350': attribute type 4 has an invalid length. [ 145.658631][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 145.904049][ T9841] xt_connbytes: Forcing CT accounting to be enabled [ 145.910741][ T9841] Cannot find set identified by id 0 to match [ 146.131906][ T9850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2362'. [ 146.162606][ T9850] dummy0: entered promiscuous mode [ 146.182757][ T9850] bond0: (slave dummy0): Releasing backup interface [ 146.203430][ T9850] bridge0: port 3(dummy0) entered blocking state [ 146.209953][ T9850] bridge0: port 3(dummy0) entered disabled state [ 146.247064][ T9850] dummy0: entered allmulticast mode [ 146.280134][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2363'. [ 146.392826][ T9862] lo speed is unknown, defaulting to 1000 [ 146.458277][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2367'. [ 146.600142][ T9883] xt_hashlimit: max too large, truncated to 1048576 [ 146.737176][ T9895] lo speed is unknown, defaulting to 1000 [ 146.768178][ T9898] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.2379'. [ 147.507955][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 147.527303][ T9915] validate_nla: 1 callbacks suppressed [ 147.527316][ T9915] netlink: 'syz.3.2386': attribute type 13 has an invalid length. [ 147.843118][ T9917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2387'. [ 147.921137][ T9929] lo speed is unknown, defaulting to 1000 [ 148.026973][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'. [ 148.036023][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2397'. [ 148.044988][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'. [ 148.056103][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2397'. [ 148.065069][ T9938] netlink: 'syz.3.2397': attribute type 6 has an invalid length. [ 148.080801][ T9938] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 148.104089][ T9938] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 148.175054][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 148.385577][ T9956] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 148.798617][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 148.798632][ T29] audit: type=1400 audit(1753720842.817:17670): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.852767][ T29] audit: type=1400 audit(1753720842.867:17671): avc: denied { create } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 148.872939][ T29] audit: type=1400 audit(1753720842.867:17672): avc: denied { open } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 148.892349][ T29] audit: type=1400 audit(1753720842.867:17673): avc: denied { open } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 148.912567][ T29] audit: type=1400 audit(1753720842.867:17674): avc: denied { read } for pid=9982 comm="syz.0.2415" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 148.933960][ T29] audit: type=1400 audit(1753720842.867:17675): avc: denied { create } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 148.954251][ T29] audit: type=1400 audit(1753720842.867:17676): avc: denied { map_create } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 148.973541][ T29] audit: type=1400 audit(1753720842.867:17677): avc: denied { prog_load } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 148.993291][ T29] audit: type=1400 audit(1753720842.867:17678): avc: denied { prog_load } for pid=9982 comm="syz.0.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 149.012657][ T29] audit: type=1400 audit(1753720842.887:17679): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 149.122763][ T9991] lo speed is unknown, defaulting to 1000 [ 149.521921][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 149.608891][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 150.239151][T10038] netlink: 'syz.0.2438': attribute type 10 has an invalid length. [ 150.497527][T10064] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 150.583063][T10064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.601824][T10067] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.610113][T10067] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.618372][T10067] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.626583][T10067] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.661344][T10067] bond3: (slave geneve2): making interface the new active one [ 150.691594][T10067] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 150.709032][T10064] veth11: entered promiscuous mode [ 150.717672][T10072] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 150.727089][T10064] bond3: (slave veth11): Enslaving as an active interface with a down link [ 150.746338][T10070] vlan0: entered allmulticast mode [ 150.751490][T10070] bond3: entered allmulticast mode [ 150.756652][T10070] geneve2: entered allmulticast mode [ 150.765282][T10070] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 150.790119][T10072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.799414][T10074] bond0 (unregistering): Released all slaves [ 152.046096][T10127] dummy0: left allmulticast mode [ 152.059569][T10127] bridge0: port 3(dummy0) entered disabled state [ 152.356709][T10156] netlink: 'syz.1.2486': attribute type 4 has an invalid length. [ 152.377624][ T1037] lo speed is unknown, defaulting to 1000 [ 152.383450][ T1037] syz0: Port: 1 Link DOWN [ 152.388814][ T3417] lo speed is unknown, defaulting to 1000 [ 152.395680][T10156] netlink: 'syz.1.2486': attribute type 4 has an invalid length. [ 152.412569][ T1037] lo speed is unknown, defaulting to 1000 [ 152.419120][ T1037] syz0: Port: 1 Link ACTIVE [ 152.441469][ T1037] lo speed is unknown, defaulting to 1000 [ 152.466895][T10162] netlink: 'syz.1.2489': attribute type 1 has an invalid length. [ 152.493724][T10162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.527298][T10162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.538369][T10162] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.550730][T10162] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 152.610763][T10166] macvlan0: entered promiscuous mode [ 152.616077][T10166] macvlan0: entered allmulticast mode [ 152.633348][T10166] bond4: entered promiscuous mode [ 152.643490][T10166] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 152.661956][T10168] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 152.683244][T10166] bond4: left promiscuous mode [ 152.834203][T10180] sch_fq: defrate 4294967295 ignored. [ 152.870457][T10184] netlink: 'syz.2.2499': attribute type 4 has an invalid length. [ 152.899093][T10184] netlink: 'syz.2.2499': attribute type 4 has an invalid length. [ 152.956698][T10190] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.966195][T10188] ip6gre1: entered allmulticast mode [ 153.834707][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 153.834722][ T29] audit: type=1400 audit(1753720847.846:18388): avc: denied { map_create } for pid=10216 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 153.919526][ T29] audit: type=1400 audit(1753720847.886:18389): avc: denied { prog_load } for pid=10216 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 153.939533][ T29] audit: type=1400 audit(1753720847.886:18390): avc: denied { read } for pid=10216 comm="syz.2.2511" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 153.961576][ T29] audit: type=1400 audit(1753720847.886:18391): avc: denied { create } for pid=10216 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 154.266128][ T29] audit: type=1400 audit(1753720848.006:18392): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.333558][T10221] netlink: 'syz.1.2512': attribute type 4 has an invalid length. [ 154.351289][ T29] audit: type=1400 audit(1753720848.355:18393): avc: denied { map_create } for pid=10220 comm="syz.1.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 154.362840][T10225] __nla_validate_parse: 5 callbacks suppressed [ 154.362851][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2514'. [ 154.370642][ T29] audit: type=1400 audit(1753720848.355:18394): avc: denied { prog_load } for pid=10220 comm="syz.1.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 154.370662][ T29] audit: type=1400 audit(1753720848.365:18395): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.429370][ T29] audit: type=1400 audit(1753720848.365:18396): avc: denied { execmem } for pid=10222 comm="syz.0.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 154.448765][ T29] audit: type=1400 audit(1753720848.365:18397): avc: denied { create } for pid=10222 comm="syz.0.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 154.468616][T10226] netlink: 'syz.1.2512': attribute type 4 has an invalid length. [ 154.524037][ T1037] lo speed is unknown, defaulting to 1000 [ 154.539947][ T9] lo speed is unknown, defaulting to 1000 [ 154.561679][ T9] lo speed is unknown, defaulting to 1000 [ 154.820939][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 154.944464][T10253] lo speed is unknown, defaulting to 1000 [ 155.052613][T10258] netlink: 'syz.4.2526': attribute type 4 has an invalid length. [ 155.067030][T10258] netlink: 'syz.4.2526': attribute type 4 has an invalid length. [ 155.181611][T10266] lo speed is unknown, defaulting to 1000 [ 155.440408][T10281] netlink: 'syz.3.2538': attribute type 4 has an invalid length. [ 155.461354][T10281] netlink: 'syz.3.2538': attribute type 4 has an invalid length. [ 155.474091][T10286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10286 comm=syz.2.2536 [ 155.487819][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 155.569224][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 155.600735][T10313] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 155.613088][T10313] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 155.638583][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 155.685308][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 155.714565][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 155.866720][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 156.514077][T10398] macsec0: entered allmulticast mode [ 156.640720][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 156.656014][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 156.955830][T10431] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 157.237494][T10443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.245856][T10441] lo speed is unknown, defaulting to 1000 [ 157.664503][T10471] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.673019][T10471] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.681439][T10471] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.689962][T10471] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.885272][ T36] lo speed is unknown, defaulting to 1000 [ 157.891135][ T36] syz0: Port: 1 Link DOWN [ 157.898211][ T36] lo speed is unknown, defaulting to 1000 [ 158.213518][T10496] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.486614][T10500] team0 (unregistering): Port device team_slave_0 removed [ 158.494721][T10500] team0 (unregistering): Port device team_slave_1 removed [ 158.502666][T10500] team0 (unregistering): Port device geneve1 removed [ 158.581697][T10505] 0ªî{X¹¦: left allmulticast mode [ 158.587054][T10505] erspan0: left allmulticast mode [ 158.594855][T10505] dummy0: left promiscuous mode [ 158.600609][T10505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.682313][T10511] validate_nla: 14 callbacks suppressed [ 158.682323][T10511] netlink: 'syz.0.2637': attribute type 4 has an invalid length. [ 158.759333][T10514] netlink: 'syz.0.2638': attribute type 10 has an invalid length. [ 158.768758][T10514] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 158.786488][T10514] bridge_slave_1: left allmulticast mode [ 158.792272][T10514] bridge_slave_1: left promiscuous mode [ 158.798115][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.806413][T10514] bridge_slave_0: left allmulticast mode [ 158.812705][T10514] bridge_slave_0: left promiscuous mode [ 158.818471][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.825740][T10518] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 158.832254][T10518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.839879][T10518] vhci_hcd vhci_hcd.0: Device attached [ 158.846789][T10514] bond0: (slave bridge0): Releasing backup interface [ 158.853678][ T29] kauditd_printk_skb: 1276 callbacks suppressed [ 158.853689][ T29] audit: type=1400 audit(1753720852.848:19674): avc: denied { read } for pid=10515 comm="syz.1.2639" dev="nsfs" ino=4026532426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 158.853711][ T29] audit: type=1400 audit(1753720852.848:19675): avc: denied { create } for pid=10515 comm="syz.1.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 158.901896][ T29] audit: type=1400 audit(1753720852.848:19676): avc: denied { prog_load } for pid=10515 comm="syz.1.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.923155][ T29] audit: type=1400 audit(1753720852.928:19677): avc: denied { prog_load } for pid=10517 comm="syz.3.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 158.964803][T10519] vhci_hcd: connection closed [ 158.966256][ T29] audit: type=1400 audit(1753720852.948:19678): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.995346][ T29] audit: type=1400 audit(1753720852.968:19679): avc: denied { write } for pid=10517 comm="syz.3.2640" name="pfkey" dev="proc" ino=4026532839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 159.018238][ T29] audit: type=1400 audit(1753720852.968:19680): avc: denied { prog_load } for pid=10517 comm="syz.3.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 159.038121][ T3818] vhci_hcd: stop threads [ 159.042419][ T3818] vhci_hcd: release socket [ 159.046839][ T3818] vhci_hcd: disconnect device [ 159.052050][ T29] audit: type=1400 audit(1753720852.978:19681): avc: denied { map_create } for pid=10522 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 159.052127][ T29] audit: type=1400 audit(1753720852.978:19682): avc: denied { create } for pid=10522 comm="syz.1.2641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 159.052145][ T29] audit: type=1400 audit(1753720852.978:19683): avc: denied { prog_load } for pid=10522 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 159.118504][ T36] vhci_hcd: vhci_device speed not set [ 159.384972][T10557] netlink: 'syz.0.2655': attribute type 13 has an invalid length. [ 159.608871][T10577] __nla_validate_parse: 2 callbacks suppressed [ 159.608881][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2664'. [ 160.043843][T10587] lo speed is unknown, defaulting to 1000 [ 160.104577][T10589] vlan0: entered promiscuous mode [ 160.109750][T10589] vlan0: entered allmulticast mode [ 160.114873][T10589] hsr_slave_1: entered allmulticast mode [ 160.150040][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 160.241550][T10592] netlink: 'syz.1.2670': attribute type 4 has an invalid length. [ 160.250283][ T9] lo speed is unknown, defaulting to 1000 [ 160.256033][ T9] syz0: Port: 1 Link ACTIVE [ 160.260736][ T1037] lo speed is unknown, defaulting to 1000 [ 160.456864][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 160.648715][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 160.798374][T10644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10644 comm=syz.3.2692 [ 160.812185][T10644] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2692'. [ 160.822329][T10644] hsr_slave_1: left promiscuous mode [ 160.974474][T10661] IPv6: Can't replace route, no match found [ 161.212672][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 161.678632][T10680] lo speed is unknown, defaulting to 1000 [ 162.104247][T10691] netlink: 'syz.4.2712': attribute type 4 has an invalid length. [ 162.144912][T10691] netlink: 'syz.4.2712': attribute type 4 has an invalid length. [ 162.384866][T10702] netlink: 'syz.0.2716': attribute type 4 has an invalid length. [ 162.400540][T10702] netlink: 'syz.0.2716': attribute type 4 has an invalid length. [ 162.837663][T10716] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2721'. [ 162.975731][T10719] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.076743][T10725] lo speed is unknown, defaulting to 1000 [ 163.118191][T10734] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2729'. [ 163.162455][T10734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.219557][T10734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.228861][T10734] bond0 (unregistering): Released all slaves [ 163.316505][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 163.436644][T10752] netlink: 'syz.4.2737': attribute type 39 has an invalid length. [ 163.656232][T10764] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10764 comm=syz.4.2741 [ 163.710941][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 163.736909][T10769] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.745846][T10769] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.754139][T10769] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.762338][T10769] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.822653][T10769] netlink: 'syz.4.2743': attribute type 14 has an invalid length. [ 163.834220][T10774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 163.840749][T10774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 163.848431][T10774] vhci_hcd vhci_hcd.0: Device attached [ 163.863855][T10778] vhci_hcd: connection closed [ 163.869001][ T29] kauditd_printk_skb: 1355 callbacks suppressed [ 163.869064][ T29] audit: type=1400 audit(1753720857.873:21039): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.894061][ T3850] vhci_hcd: stop threads [ 163.904271][ T29] audit: type=1400 audit(1753720857.873:21040): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.908474][ T3850] vhci_hcd: release socket [ 163.937816][ T3850] vhci_hcd: disconnect device [ 163.972997][ T29] audit: type=1400 audit(1753720857.963:21041): avc: denied { prog_load } for pid=10782 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 163.992346][ T29] audit: type=1400 audit(1753720857.963:21042): avc: denied { map_create } for pid=10782 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 164.011651][ T29] audit: type=1400 audit(1753720857.963:21043): avc: denied { create } for pid=10782 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 164.032496][ T29] audit: type=1400 audit(1753720857.963:21044): avc: denied { create } for pid=10782 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 164.053127][ T29] audit: type=1400 audit(1753720857.963:21045): avc: denied { prog_load } for pid=10782 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 164.072463][ T29] audit: type=1400 audit(1753720857.963:21046): avc: denied { create } for pid=10782 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 164.113829][ T29] audit: type=1400 audit(1753720858.053:21047): avc: denied { prog_load } for pid=10780 comm="syz.4.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 164.133234][ T29] audit: type=1400 audit(1753720858.053:21048): avc: denied { create } for pid=10780 comm="syz.4.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 164.992829][T10821] netlink: 'syz.1.2762': attribute type 3 has an invalid length. [ 165.316655][T10835] __nla_validate_parse: 3 callbacks suppressed [ 165.316682][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 165.643630][T10854] netlink: 'syz.0.2776': attribute type 10 has an invalid length. [ 165.651507][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2776'. [ 165.662447][T10854] team0: entered promiscuous mode [ 165.667566][T10854] team_slave_0: entered promiscuous mode [ 165.673390][T10854] team_slave_1: entered promiscuous mode [ 165.677630][T10857] netlink: 'syz.2.2777': attribute type 4 has an invalid length. [ 165.679124][T10854] team0: entered allmulticast mode [ 165.692262][T10854] team_slave_0: entered allmulticast mode [ 165.698026][T10854] team_slave_1: entered allmulticast mode [ 165.714788][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.724999][T10860] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2778'. [ 165.730215][T10861] netlink: 'syz.2.2777': attribute type 4 has an invalid length. [ 165.735516][T10854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 165.774619][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 165.878743][T10879] bond0: (slave bond4): Releasing backup interface [ 165.886737][T10879] bond5: (slave geneve2): Releasing backup interface [ 165.907642][T10880] lo speed is unknown, defaulting to 1000 [ 165.945195][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 165.995382][T10892] netlink: 'syz.3.2791': attribute type 4 has an invalid length. [ 166.007861][T10892] netlink: 'syz.3.2791': attribute type 4 has an invalid length. [ 166.030199][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 166.142642][T10911] netlink: 'syz.3.2796': attribute type 10 has an invalid length. [ 166.150668][T10911] ipvlan0: entered allmulticast mode [ 166.156393][T10911] veth0_vlan: entered allmulticast mode [ 166.358328][T10922] netlink: 'syz.4.2803': attribute type 4 has an invalid length. [ 166.369047][T10922] netlink: 'syz.4.2803': attribute type 4 has an invalid length. [ 166.415789][T10928] lo: entered promiscuous mode [ 166.421418][T10928] tunl0: entered promiscuous mode [ 166.427345][T10928] gre0: entered promiscuous mode [ 166.433572][T10928] 0ªî{X¹¦: entered promiscuous mode [ 166.439963][T10928] erspan0: entered promiscuous mode [ 166.448268][T10928] ip_vti0: entered promiscuous mode [ 166.454090][T10928] ip6_vti0: entered promiscuous mode [ 166.460498][T10928] sit0: entered promiscuous mode [ 166.469483][T10930] xt_HMARK: proto mask must be zero with L3 mode [ 166.476396][T10928] ip6tnl0: entered promiscuous mode [ 166.500500][T10928] ip6gre0: entered promiscuous mode [ 166.507719][T10928] ip6gretap0: entered promiscuous mode [ 166.514150][T10928] vcan0: entered promiscuous mode [ 166.519789][T10928] dummy0: entered promiscuous mode [ 166.526831][T10928] nlmon0: entered promiscuous mode [ 166.533013][T10928] caif0: entered promiscuous mode [ 166.538206][T10928] batadv0: entered promiscuous mode [ 166.543445][T10928] veth0: entered promiscuous mode [ 166.548591][T10928] veth1: entered promiscuous mode [ 166.553657][T10928] wg1: entered promiscuous mode [ 166.558620][T10928] wg2: entered promiscuous mode [ 166.563577][T10928] veth0_to_bridge: entered promiscuous mode [ 166.569524][T10928] bridge_slave_0: entered promiscuous mode [ 166.575390][T10928] veth1_to_bridge: entered promiscuous mode [ 166.581300][T10928] bridge_slave_1: entered promiscuous mode [ 166.587206][T10928] veth0_to_bond: entered promiscuous mode [ 166.592986][T10928] bond_slave_0: entered promiscuous mode [ 166.598765][T10928] veth1_to_bond: entered promiscuous mode [ 166.604598][T10928] bond_slave_1: entered promiscuous mode [ 166.610325][T10928] veth0_to_team: entered promiscuous mode [ 166.616286][T10928] team_slave_0: entered promiscuous mode [ 166.621974][T10928] veth1_to_team: entered promiscuous mode [ 166.627938][T10928] team_slave_1: entered promiscuous mode [ 166.633600][T10928] veth0_to_batadv: entered promiscuous mode [ 166.639517][T10928] batadv_slave_0: entered promiscuous mode [ 166.645431][T10928] veth1_to_batadv: entered promiscuous mode [ 166.651401][T10928] batadv_slave_1: entered promiscuous mode [ 166.657302][T10928] xfrm0: entered promiscuous mode [ 166.662411][T10928] veth0_to_hsr: entered promiscuous mode [ 166.668163][T10928] hsr_slave_0: entered promiscuous mode [ 166.673758][T10928] veth1_to_hsr: entered promiscuous mode [ 166.679455][T10928] hsr_slave_1: entered promiscuous mode [ 166.685095][T10928] veth1_virt_wifi: entered promiscuous mode [ 166.691098][T10928] veth0_virt_wifi: entered promiscuous mode [ 166.697075][T10928] macvtap0: entered promiscuous mode [ 166.702476][T10928] macsec0: entered promiscuous mode [ 166.707755][T10928] geneve0: entered promiscuous mode [ 166.713041][T10928] geneve1: entered promiscuous mode [ 166.718302][T10928] vxlan0: entered promiscuous mode [ 166.723430][T10928] sit1: entered promiscuous mode [ 166.728542][T10928] gre1: entered promiscuous mode [ 166.733574][T10928] vxlan1: entered promiscuous mode [ 166.738789][T10928] bridge1: entered promiscuous mode [ 166.744115][T10928] : entered promiscuous mode [ 166.748886][T10928] bond1: entered promiscuous mode [ 166.754464][T10928] netdevsim netdevsim4 eth0: entered promiscuous mode [ 166.761983][T10928] netdevsim netdevsim4 eth1: entered promiscuous mode [ 166.769014][T10928] netdevsim netdevsim4 eth2: entered promiscuous mode [ 166.776058][T10928] netdevsim netdevsim4 eth3: entered promiscuous mode [ 166.782925][T10928] bridge2: entered promiscuous mode [ 166.788202][T10928] bond2: entered promiscuous mode [ 166.793389][T10928] geneve2: left allmulticast mode [ 166.798558][T10928] gretap0: entered promiscuous mode [ 166.803764][T10928] bond3: entered promiscuous mode [ 166.808855][T10928] ip6gretap1: entered promiscuous mode [ 166.814735][T10928] veth2: entered promiscuous mode [ 166.820130][T10928] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.828480][T10928] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.836837][T10928] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.845207][T10928] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.854306][T10928] bridge3: entered promiscuous mode [ 166.859505][T10928] bridge3: left allmulticast mode [ 166.865198][T10928] ip6tnl1: entered promiscuous mode [ 166.871075][T10928] syztnl1: entered promiscuous mode [ 166.876947][T10928] bond4: entered promiscuous mode [ 166.882172][T10928] veth4: entered promiscuous mode [ 166.887620][T10928] ip6tnl2: entered promiscuous mode [ 166.893232][T10928] ip6_vti1: entered promiscuous mode [ 166.898674][T10928] syztnl0: entered promiscuous mode [ 166.904542][T10928] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.912876][T10928] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.921220][T10928] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.929663][T10928] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.938976][T10928] vxlan2: entered promiscuous mode [ 167.131954][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2818'. [ 167.187877][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 167.281319][T10966] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.289668][T10966] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.297912][T10966] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.306214][T10966] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.427791][T10961] ip6gretap0: entered promiscuous mode [ 167.437438][T10961] ip6gretap0: left promiscuous mode [ 167.542958][T10971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2823'. [ 167.744211][T10976] lo speed is unknown, defaulting to 1000 [ 167.981329][T10978] lo speed is unknown, defaulting to 1000 [ 168.181380][T11007] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 168.224999][T11011] lo speed is unknown, defaulting to 1000 [ 168.265612][T11013] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2838'. [ 168.563734][T11019] xt_CT: No such helper "netbios-ns" [ 168.884827][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 168.884840][ T29] audit: type=1400 audit(2000000004.370:21731): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.943222][ T29] audit: type=1400 audit(2000000004.420:21732): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.977090][ T29] audit: type=1400 audit(2000000004.460:21733): avc: denied { map_create } for pid=11027 comm="syz.4.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 168.996457][ T29] audit: type=1400 audit(2000000004.460:21734): avc: denied { prog_load } for pid=11027 comm="syz.4.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.016502][ T29] audit: type=1400 audit(2000000004.460:21735): avc: denied { prog_load } for pid=11027 comm="syz.4.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.055961][ T29] audit: type=1400 audit(2000000004.530:21736): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.080314][ T29] audit: type=1400 audit(2000000004.530:21737): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.105340][ T29] audit: type=1400 audit(2000000004.540:21738): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.122992][T11034] lo speed is unknown, defaulting to 1000 [ 169.136786][T11032] validate_nla: 4 callbacks suppressed [ 169.136798][T11032] netlink: 'syz.0.2845': attribute type 8 has an invalid length. [ 169.161567][ T29] audit: type=1400 audit(2000000004.590:21739): avc: denied { prog_load } for pid=11033 comm="syz.1.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.170704][T11037] netlink: 'syz.1.2846': attribute type 12 has an invalid length. [ 169.181406][ T29] audit: type=1400 audit(2000000004.590:21740): avc: denied { prog_load } for pid=11033 comm="syz.1.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.388417][T11045] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.396956][T11045] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.405460][T11045] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.413888][T11045] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.425903][ T3377] lo speed is unknown, defaulting to 1000 [ 169.431662][ T3377] syz0: Port: 1 Link DOWN [ 169.440138][ T3390] lo speed is unknown, defaulting to 1000 [ 169.904057][T11058] lo speed is unknown, defaulting to 1000 [ 170.108100][T11072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=11072 comm=syz.3.2861 [ 170.684686][T11101] vlan2: entered promiscuous mode [ 170.689835][T11101] syz_tun: entered promiscuous mode [ 170.794030][T11120] C: renamed from team_slave_0 [ 170.799930][T11120] __nla_validate_parse: 2 callbacks suppressed [ 170.799938][T11120] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2882'. [ 171.148049][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2891'. [ 171.185633][T11146] lo speed is unknown, defaulting to 1000 [ 171.211897][T11148] lo speed is unknown, defaulting to 1000 [ 171.336492][T11159] xt_TCPMSS: Only works on TCP SYN packets [ 171.352822][T11157] lo speed is unknown, defaulting to 1000 [ 171.571499][T11168] lo speed is unknown, defaulting to 1000 [ 171.615793][T11172] netlink: 'syz.4.2900': attribute type 3 has an invalid length. [ 171.633749][T11172] netlink: 'syz.4.2900': attribute type 3 has an invalid length. [ 171.658866][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 171.687877][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 172.078867][T11212] lo speed is unknown, defaulting to 1000 [ 172.294680][T11229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.360555][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2929'. [ 172.390341][T11221] xt_CT: No such helper "pptp" [ 172.625813][T11259] syzkaller0: entered promiscuous mode [ 172.631322][T11259] syzkaller0: entered allmulticast mode [ 172.942846][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2945'. [ 173.190768][T11283] lo speed is unknown, defaulting to 1000 [ 173.231866][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 173.246394][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 173.314858][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 173.488401][T11306] C: renamed from team_slave_0 [ 173.506767][T11306] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2957'. [ 173.898606][ T29] kauditd_printk_skb: 938 callbacks suppressed [ 173.898619][ T29] audit: type=1326 audit(2000000009.380:22679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88e85d5967 code=0x7ffc0000 [ 173.928390][ T29] audit: type=1326 audit(2000000009.380:22680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e857ab89 code=0x7ffc0000 [ 173.951877][ T29] audit: type=1326 audit(2000000009.380:22681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f88e85de9a9 code=0x7ffc0000 [ 173.975730][ T29] audit: type=1400 audit(2000000009.410:22682): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.000165][ T29] audit: type=1326 audit(2000000009.410:22683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88e85d5967 code=0x7ffc0000 [ 174.023697][ T29] audit: type=1326 audit(2000000009.410:22684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e857ab89 code=0x7ffc0000 [ 174.047174][ T29] audit: type=1326 audit(2000000009.410:22685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f88e85de9a9 code=0x7ffc0000 [ 174.070740][ T29] audit: type=1326 audit(2000000009.410:22686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88e85d5967 code=0x7ffc0000 [ 174.094238][ T29] audit: type=1326 audit(2000000009.410:22687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e857ab89 code=0x7ffc0000 [ 174.117747][ T29] audit: type=1326 audit(2000000009.410:22688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11311 comm="syz.3.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f88e85de9a9 code=0x7ffc0000 [ 174.278130][T11340] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 174.289754][T11341] netlink: 'syz.0.2968': attribute type 10 has an invalid length. [ 174.298315][T11341] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 174.374613][T11347] team0: entered promiscuous mode [ 174.379729][T11347] team0: entered allmulticast mode [ 174.455431][ T9] IPVS: starting estimator thread 0... [ 174.543414][T11352] IPVS: using max 2544 ests per chain, 127200 per kthread [ 174.580693][T11361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11361 comm=syz.3.2979 [ 175.290702][T11398] netlink: 'syz.0.2994': attribute type 4 has an invalid length. [ 175.320325][T11398] netlink: 'syz.0.2994': attribute type 4 has an invalid length. [ 175.378655][T11401] lo speed is unknown, defaulting to 1000 [ 175.721302][T11413] pim6reg1: entered promiscuous mode [ 175.727443][T11413] pim6reg1: entered allmulticast mode [ 175.847169][T11418] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 176.058792][T11429] netlink: 'syz.3.3007': attribute type 4 has an invalid length. [ 176.203457][T11432] netlink: 'syz.3.3007': attribute type 4 has an invalid length. [ 176.318208][T11444] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 176.344242][T11444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.404500][T11444] veth5: entered promiscuous mode [ 176.415617][T11444] bond5: (slave veth5): Enslaving as an active interface with a down link [ 176.470350][T11444] vlan1: entered allmulticast mode [ 176.475547][T11444] bond5: entered allmulticast mode [ 176.502878][T11444] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 176.814167][T11455] ip6gre2: entered allmulticast mode [ 177.081779][T11466] netlink: 'syz.0.3021': attribute type 4 has an invalid length. [ 177.104979][T11466] netlink: 'syz.0.3021': attribute type 4 has an invalid length. [ 177.599818][T11477] netlink: 'syz.2.3026': attribute type 10 has an invalid length. [ 177.608403][T11477] bridge0: port 1($Hÿ) entered blocking state [ 177.615439][T11477] bridge0: port 1($Hÿ) entered disabled state [ 177.621954][T11477] $Hÿ: entered allmulticast mode [ 177.690028][T11485] SELinux: syz.3.3031 (11485) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 177.767928][T11493] __nla_validate_parse: 3 callbacks suppressed [ 177.767940][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 177.853697][T11498] lo speed is unknown, defaulting to 1000 [ 177.993748][T11513] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.341256][T11541] lo speed is unknown, defaulting to 1000 [ 178.447981][ T36] lo speed is unknown, defaulting to 1000 [ 178.453743][ T36] syz0: Port: 1 Link ACTIVE [ 178.458335][ T36] lo speed is unknown, defaulting to 1000 [ 178.469192][T11548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3058'. [ 178.572581][T11558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.594994][T11558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.603696][T11558] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.619102][T11558] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 178.641739][T11567] macvlan0: entered promiscuous mode [ 178.647201][T11567] macvlan0: entered allmulticast mode [ 178.659964][T11567] bond4: entered promiscuous mode [ 178.666136][T11567] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 178.674217][T11567] bond4: left promiscuous mode [ 178.681725][T11570] lo: left allmulticast mode [ 178.687082][T11570] tunl0: left allmulticast mode [ 178.692611][T11570] gre0: left allmulticast mode [ 178.706368][T11570] 0ªî{X¹¦: left allmulticast mode [ 178.714527][T11570] erspan0: left allmulticast mode [ 178.720142][T11570] ip_vti0: left allmulticast mode [ 178.726600][T11570] ip6_vti0: left allmulticast mode [ 178.732367][T11570] sit0: left allmulticast mode [ 178.756494][T11570] ip6tnl0: left allmulticast mode [ 178.762078][T11570] ip6gre0: left allmulticast mode [ 178.769340][T11570] ip6gretap0: left allmulticast mode [ 178.787624][T11570] nlmon0: left allmulticast mode [ 178.795435][T11570] caif0: left allmulticast mode [ 178.800316][T11570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.831593][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'. [ 178.910744][ T29] kauditd_printk_skb: 1451 callbacks suppressed [ 178.910818][ T29] audit: type=1400 audit(2000000014.390:24140): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 178.949118][ T29] audit: type=1400 audit(2000000014.420:24141): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.001745][ T29] audit: type=1400 audit(2000000014.470:24142): avc: denied { execmem } for pid=11579 comm="syz.2.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 179.021401][ T29] audit: type=1400 audit(2000000014.470:24143): avc: denied { module_request } for pid=11579 comm="syz.2.3072" kmod="snd-timer-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 179.048511][T11594] IPv6: Can't replace route, no match found [ 179.085341][T11592] lo speed is unknown, defaulting to 1000 [ 179.356954][ T29] audit: type=1400 audit(2000000014.530:24144): avc: denied { create } for pid=11581 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 179.378453][ T29] audit: type=1400 audit(2000000014.540:24145): avc: denied { create } for pid=11581 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 179.399324][ T29] audit: type=1400 audit(2000000014.540:24146): avc: denied { prog_load } for pid=11581 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 179.419121][ T29] audit: type=1400 audit(2000000014.540:24147): avc: denied { read } for pid=11581 comm="syz.0.3071" dev="nsfs" ino=4026532634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 179.440423][ T29] audit: type=1400 audit(2000000014.540:24148): avc: denied { open } for pid=11590 comm="syz.4.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 179.460440][ T29] audit: type=1400 audit(2000000014.540:24149): avc: denied { prog_load } for pid=11590 comm="syz.4.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 179.502068][T11610] validate_nla: 9 callbacks suppressed [ 179.502080][T11610] netlink: 'syz.3.3082': attribute type 21 has an invalid length. [ 179.517364][T11610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3082'. [ 179.735869][T11620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 179.742457][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.749998][T11620] vhci_hcd vhci_hcd.0: Device attached [ 179.760134][T11626] xt_hashlimit: max too large, truncated to 1048576 [ 179.814244][T11632] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.822536][T11632] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.830842][T11632] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.839128][T11632] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.847633][T11632] geneve3: entered promiscuous mode [ 180.003011][ T9] usb 7-1: new low-speed USB device number 4 using vhci_hcd [ 180.401793][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 180.427084][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 180.436787][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 180.445806][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 180.454818][T11623] vhci_hcd: connection reset by peer [ 180.460583][ T3856] vhci_hcd: stop threads [ 180.465545][ T3856] vhci_hcd: release socket [ 180.470126][ T3856] vhci_hcd: disconnect device [ 180.475661][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 180.484640][T11669] netlink: 'syz.1.3106': attribute type 6 has an invalid length. [ 180.522699][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3109'. [ 180.684888][T11681] IPv6: Can't replace route, no match found [ 180.711872][T11685] futex_wake_op: syz.4.3112 tries to shift op by -1; fix this program [ 180.774419][T11691] lo speed is unknown, defaulting to 1000 [ 181.037634][T11704] netlink: 'syz.4.3121': attribute type 27 has an invalid length. [ 181.046586][T11704] lo: left promiscuous mode [ 181.051859][T11704] tunl0: left promiscuous mode [ 181.057018][T11704] gre0: left promiscuous mode [ 181.061819][T11704] 0ªî{X¹¦: left promiscuous mode [ 181.067172][T11704] ip_vti0: left promiscuous mode [ 181.072192][T11704] ip6_vti0: left promiscuous mode [ 181.077400][T11704] sit0: left promiscuous mode [ 181.082141][T11704] ip6tnl0: left promiscuous mode [ 181.087228][T11704] ip6gre0: left promiscuous mode [ 181.092382][T11704] ip6gretap0: left promiscuous mode [ 181.097774][T11704] vcan0: left promiscuous mode [ 181.108890][T11704] dummy0: left promiscuous mode [ 181.113829][T11704] nlmon0: left promiscuous mode [ 181.118749][T11704] caif0: left promiscuous mode [ 181.123743][T11704] batadv0: left promiscuous mode [ 181.128774][T11704] veth0: left promiscuous mode [ 181.133694][T11704] veth1: left promiscuous mode [ 181.138574][T11704] wg1: left promiscuous mode [ 181.143369][T11704] wg2: left promiscuous mode [ 181.148097][T11704] veth0_to_bridge: left promiscuous mode [ 181.153819][T11704] bridge_slave_0: left promiscuous mode [ 181.159427][T11704] veth1_to_bridge: left promiscuous mode [ 181.165279][T11704] bridge_slave_1: left promiscuous mode [ 181.170912][T11704] veth0_to_bond: left promiscuous mode [ 181.176530][T11704] bond_slave_0: left promiscuous mode [ 181.181945][T11704] veth1_to_bond: left promiscuous mode [ 181.187616][T11704] bond_slave_1: left promiscuous mode [ 181.193135][T11704] veth0_to_team: left promiscuous mode [ 181.198662][T11704] team_slave_0: left promiscuous mode [ 181.204151][T11704] veth1_to_team: left promiscuous mode [ 181.209784][T11704] team_slave_1: left promiscuous mode [ 181.215253][T11704] veth0_to_batadv: left promiscuous mode [ 181.220926][T11704] batadv_slave_0: left promiscuous mode [ 181.226589][T11704] veth1_to_batadv: left promiscuous mode [ 181.232293][T11704] batadv_slave_1: left promiscuous mode [ 181.237894][T11704] xfrm0: left promiscuous mode [ 181.242769][T11704] veth0_to_hsr: left promiscuous mode [ 181.248246][T11704] hsr_slave_0: left promiscuous mode [ 181.253612][T11704] veth1_to_hsr: left promiscuous mode [ 181.259104][T11704] hsr_slave_1: left promiscuous mode [ 181.264474][T11704] veth1_virt_wifi: left promiscuous mode [ 181.270214][T11704] veth0_virt_wifi: left promiscuous mode [ 181.276067][T11704] macvtap0: left promiscuous mode [ 181.281162][T11704] macsec0: left promiscuous mode [ 181.286184][T11704] geneve0: left promiscuous mode [ 181.291230][T11704] geneve1: left promiscuous mode [ 181.296266][T11704] vxlan0: left promiscuous mode [ 181.301170][T11704] sit1: left promiscuous mode [ 181.305964][T11704] gre1: left promiscuous mode [ 181.310747][T11704] vxlan1: left promiscuous mode [ 181.315657][T11704] bridge1: left promiscuous mode [ 181.320669][T11704] : left promiscuous mode [ 181.325204][T11704] bond1: left promiscuous mode [ 181.330181][T11704] netdevsim netdevsim4 eth0: left promiscuous mode [ 181.337477][T11704] netdevsim netdevsim4 eth1: left promiscuous mode [ 181.344305][T11704] netdevsim netdevsim4 eth2: left promiscuous mode [ 181.351078][T11704] netdevsim netdevsim4 eth3: left promiscuous mode [ 181.357669][T11704] bridge2: left promiscuous mode [ 181.362762][T11704] bond2: left promiscuous mode [ 181.367599][T11704] geneve2: left promiscuous mode [ 181.372745][T11704] gretap0: left promiscuous mode [ 181.377754][T11704] bond3: left promiscuous mode [ 181.382703][T11704] ip6gretap1: left promiscuous mode [ 181.388200][T11704] veth2: left promiscuous mode [ 181.393253][T11704] veth3: left promiscuous mode [ 181.398105][T11704] geneve3: left promiscuous mode [ 181.403240][T11704] bridge3: left promiscuous mode [ 181.408236][T11704] ip6tnl1: left promiscuous mode [ 181.413304][T11704] ip6erspan0: left promiscuous mode [ 181.418510][T11704] syztnl1: left promiscuous mode [ 181.423496][T11704] bond4: left promiscuous mode [ 181.428238][T11704] erspan0: left promiscuous mode [ 181.433450][T11704] veth4: left promiscuous mode [ 181.438306][T11704] veth5: left promiscuous mode [ 181.443185][T11704] ip6tnl2: left promiscuous mode [ 181.448207][T11704] ip6_vti1: left promiscuous mode [ 181.453333][T11704] syztnl0: left promiscuous mode [ 181.458281][T11704] vxlan2: left promiscuous mode [ 181.527905][T11732] lo speed is unknown, defaulting to 1000 [ 181.808577][T11755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11755 comm=syz.2.3141 [ 182.544321][T11781] bond5: entered promiscuous mode [ 182.549400][T11781] bond5: entered allmulticast mode [ 182.581552][T11781] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.623068][T11781] bond5 (unregistering): Released all slaves [ 182.703034][T11790] SELinux: syz.0.3154 (11790) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.549812][T11814] tls_set_device_offload: netdev not found [ 183.919493][ T29] kauditd_printk_skb: 1396 callbacks suppressed [ 183.919505][ T29] audit: type=1326 audit(2000000019.401:25294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b40375967 code=0x7ffc0000 [ 183.975970][ T29] audit: type=1326 audit(2000000019.431:25295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4031ab89 code=0x7ffc0000 [ 184.000106][ T29] audit: type=1326 audit(2000000019.431:25296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 184.024322][ T29] audit: type=1326 audit(2000000019.431:25297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b40375967 code=0x7ffc0000 [ 184.048000][ T29] audit: type=1326 audit(2000000019.431:25298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4031ab89 code=0x7ffc0000 [ 184.071606][ T29] audit: type=1326 audit(2000000019.431:25299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 184.095861][ T29] audit: type=1326 audit(2000000019.441:25300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b40375967 code=0x7ffc0000 [ 184.119383][ T29] audit: type=1326 audit(2000000019.441:25301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4031ab89 code=0x7ffc0000 [ 184.143602][ T29] audit: type=1326 audit(2000000019.441:25302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 184.167460][ T29] audit: type=1400 audit(2000000019.451:25303): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.251233][T11830] __nla_validate_parse: 2 callbacks suppressed [ 184.251291][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 184.267070][T11830] netlink: 'syz.0.3169': attribute type 30 has an invalid length. [ 184.276991][T11832] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 184.293399][T11830] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.301596][T11830] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.307840][T11834] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 184.309808][T11830] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.316234][T11834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.316925][T11834] vhci_hcd vhci_hcd.0: Device attached [ 184.324431][T11830] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.347193][T11839] netlink: 'syz.4.3175': attribute type 4 has an invalid length. [ 184.358521][T11840] vhci_hcd: cannot find the pending unlink 6 [ 184.364584][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 184.372751][T11840] vhci_hcd: connection closed [ 184.374257][T11830] netlink: 'syz.0.3169': attribute type 30 has an invalid length. [ 184.375340][ T3818] vhci_hcd: stop threads [ 184.391097][ T3818] vhci_hcd: release socket [ 184.395552][ T3818] vhci_hcd: disconnect device [ 184.936282][T11872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3189'. [ 184.954414][T11874] netlink: 'syz.0.3190': attribute type 4 has an invalid length. [ 184.964060][T11872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3189'. [ 185.004300][T11874] netlink: 'syz.0.3190': attribute type 4 has an invalid length. [ 185.056626][T11876] lo speed is unknown, defaulting to 1000 [ 185.192972][ T9] usb 7-1: enqueue for inactive port 0 [ 185.198909][ T9] usb 7-1: enqueue for inactive port 0 [ 185.283534][ T9] vhci_hcd: vhci_device speed not set [ 185.538858][ T3417] Process accounting resumed [ 185.556035][T11906] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 185.565954][T11906] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 185.590832][T11910] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3204'. [ 185.624372][T11913] netlink: 'syz.3.3205': attribute type 4 has an invalid length. [ 185.728752][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3209'. [ 186.126308][T11939] netlink: 'syz.1.3215': attribute type 4 has an invalid length. [ 186.136316][ T3417] lo speed is unknown, defaulting to 1000 [ 186.142063][ T3417] syz0: Port: 1 Link DOWN [ 186.146955][ T1037] lo speed is unknown, defaulting to 1000 [ 186.153266][T11939] netlink: 'syz.1.3215': attribute type 4 has an invalid length. [ 186.172429][ T36] lo speed is unknown, defaulting to 1000 [ 186.178185][ T36] syz0: Port: 1 Link ACTIVE [ 186.182862][ T36] lo speed is unknown, defaulting to 1000 [ 186.512553][T11956] IPv6: Can't replace route, no match found [ 186.576693][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 186.592896][T11960] vlan1: entered promiscuous mode [ 186.838090][T11973] netlink: 'syz.0.3226': attribute type 4 has an invalid length. [ 186.856294][T11973] netlink: 'syz.0.3226': attribute type 4 has an invalid length. [ 187.429299][T11996] xt_TCPMSS: Only works on TCP SYN packets [ 187.463091][T11999] netlink: 'syz.3.3238': attribute type 4 has an invalid length. [ 187.540822][T12005] can0: slcan on ttyS3. [ 187.642784][T12009] can0 (unregistered): slcan off ttyS3. [ 187.690988][T12009] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3241'. [ 187.714610][T12011] IPv6: Can't replace route, no match found [ 187.721024][T12005] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3241'. [ 187.803405][T12015] lo speed is unknown, defaulting to 1000 [ 188.002473][T12026] lo speed is unknown, defaulting to 1000 [ 188.827987][T12062] lo speed is unknown, defaulting to 1000 [ 188.923223][ T29] kauditd_printk_skb: 1043 callbacks suppressed [ 188.923235][ T29] audit: type=1326 audit(2000000024.401:26347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12067 comm="syz.0.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 188.964202][ T29] audit: type=1400 audit(2000000024.451:26348): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 188.989532][ T29] audit: type=1400 audit(2000000024.471:26349): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.015651][T12071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3266'. [ 189.027389][ T29] audit: type=1400 audit(2000000024.501:26350): avc: denied { prog_load } for pid=12070 comm="syz.3.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.047255][ T29] audit: type=1400 audit(2000000024.511:26351): avc: denied { map_create } for pid=12074 comm="syz.0.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.066550][ T29] audit: type=1400 audit(2000000024.511:26352): avc: denied { map_create } for pid=12074 comm="syz.0.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.086466][ T29] audit: type=1400 audit(2000000024.511:26353): avc: denied { map_create } for pid=12074 comm="syz.0.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.105957][ T29] audit: type=1400 audit(2000000024.511:26354): avc: denied { prog_load } for pid=12074 comm="syz.0.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.125821][ T29] audit: type=1400 audit(2000000024.511:26355): avc: denied { prog_load } for pid=12074 comm="syz.0.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.145403][ T29] audit: type=1400 audit(2000000024.541:26356): avc: denied { prog_load } for pid=12077 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.473664][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3275'. [ 189.484010][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3275'. [ 189.514852][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 190.102529][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3285'. [ 190.113965][T12129] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.122218][T12129] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.130409][T12129] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.138677][T12129] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.146875][T12129] vxlan3: entered promiscuous mode [ 190.559380][T12142] validate_nla: 4 callbacks suppressed [ 190.559395][T12142] netlink: 'syz.3.3290': attribute type 10 has an invalid length. [ 190.572836][T12142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3290'. [ 190.581879][T12142] dummy0: entered promiscuous mode [ 190.587932][T12142] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 190.918586][T12159] netlink: 'syz.4.3299': attribute type 4 has an invalid length. [ 190.927630][T12159] netlink: 'syz.4.3299': attribute type 4 has an invalid length. [ 191.075748][T12164] lo: entered promiscuous mode [ 191.081324][T12164] tunl0: entered promiscuous mode [ 191.087314][T12164] gre0: entered promiscuous mode [ 191.093115][T12164] 0ªî{X¹¦: entered promiscuous mode [ 191.098894][T12164] erspan0: entered promiscuous mode [ 191.105529][T12164] ip_vti0: entered promiscuous mode [ 191.111355][T12164] ip6_vti0: entered promiscuous mode [ 191.117329][T12164] sit0: entered promiscuous mode [ 191.123454][T12164] ip6tnl0: entered promiscuous mode [ 191.129337][T12164] ip6gre0: entered promiscuous mode [ 191.136991][T12166] xt_HMARK: proto mask must be zero with L3 mode [ 191.145593][T12164] ip6gretap0: entered promiscuous mode [ 191.158255][T12164] dummy0: entered promiscuous mode [ 191.171439][T12164] nlmon0: entered promiscuous mode [ 191.177124][T12164] caif0: entered promiscuous mode [ 191.182249][T12164] vxcan0: entered promiscuous mode [ 191.187561][T12164] vxcan1: entered promiscuous mode [ 191.193386][T12164] veth0: entered promiscuous mode [ 191.198460][T12164] veth1: entered promiscuous mode [ 191.203674][T12164] wg1: entered promiscuous mode [ 191.208625][T12164] veth0_to_bridge: entered promiscuous mode [ 191.214677][T12164] bridge_slave_0: entered promiscuous mode [ 191.220583][T12164] veth1_to_bridge: entered promiscuous mode [ 191.227217][T12164] bridge_slave_1: entered promiscuous mode [ 191.233127][T12164] veth0_to_bond: entered promiscuous mode [ 191.239005][T12164] bond_slave_0: entered promiscuous mode [ 191.244742][T12164] veth1_to_bond: entered promiscuous mode [ 191.250520][T12164] bond_slave_1: entered promiscuous mode [ 191.256820][T12164] veth0_to_team: entered promiscuous mode [ 191.262662][T12164] C: entered promiscuous mode [ 191.267380][T12164] veth1_to_team: entered promiscuous mode [ 191.273210][T12164] team_slave_1: entered promiscuous mode [ 191.278909][T12164] veth0_to_batadv: entered promiscuous mode [ 191.285549][T12164] veth1_to_batadv: entered promiscuous mode [ 191.291541][T12164] batadv_slave_1: entered promiscuous mode [ 191.297386][T12164] xfrm0: entered promiscuous mode [ 191.302540][T12164] veth0_to_hsr: entered promiscuous mode [ 191.308311][T12164] veth1_to_hsr: entered promiscuous mode [ 191.314716][T12164] hsr0: entered promiscuous mode [ 191.319756][T12164] veth1_virt_wifi: entered promiscuous mode [ 191.325727][T12164] veth0_virt_wifi: entered promiscuous mode [ 191.331726][T12164] geneve0: entered promiscuous mode [ 191.336979][T12164] geneve1: entered promiscuous mode [ 191.342206][T12164] bridge1: entered promiscuous mode [ 191.348138][T12164] : entered promiscuous mode [ 191.353057][T12164] : entered promiscuous mode [ 191.357836][T12164] bond1: entered promiscuous mode [ 191.363157][T12164] bond2: entered promiscuous mode [ 191.368390][T12164] netdevsim netdevsim1 eth0: entered promiscuous mode [ 191.375885][T12164] netdevsim netdevsim1 eth1: entered promiscuous mode [ 191.382805][T12164] netdevsim netdevsim1 eth2: entered promiscuous mode [ 191.389730][T12164] netdevsim netdevsim1 eth3: entered promiscuous mode [ 191.396676][T12164] bridge2: entered promiscuous mode [ 191.401933][T12164] bond3: entered promiscuous mode [ 191.407683][T12164] veth2: entered promiscuous mode [ 191.412770][T12164] veth3: entered promiscuous mode [ 191.417905][T12164] bond0: entered promiscuous mode [ 191.423171][T12164] sit1: entered promiscuous mode [ 191.428172][T12164] hsr1: entered promiscuous mode [ 191.433781][T12164] hsr1: left allmulticast mode [ 191.438540][T12164] syz_tun: left allmulticast mode [ 191.443693][T12164] batadv_slave_0: left allmulticast mode [ 191.449377][T12164] ip6tnl1: entered promiscuous mode [ 191.454629][T12164] ip6_vti1: entered promiscuous mode [ 191.459951][T12164] bond4: entered promiscuous mode [ 191.465760][T12164] ip6gre1: entered promiscuous mode [ 191.470962][T12164] ip6gre1: left allmulticast mode [ 191.476088][T12164] ip6erspan0: entered promiscuous mode [ 191.481795][T12164] vlan0: left allmulticast mode [ 191.486695][T12164] hsr_slave_1: left allmulticast mode [ 191.492132][T12164] vxlan0: entered promiscuous mode [ 191.497905][T12164] ip6_vti2: entered promiscuous mode [ 191.503244][T12164] team0: left allmulticast mode [ 191.508447][T12164] bond5: entered promiscuous mode [ 191.513927][T12164] veth4: entered promiscuous mode [ 191.519736][T12164] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.528793][T12164] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.537260][T12164] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.545613][T12164] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.555267][T12164] veth6: entered promiscuous mode [ 191.560336][T12164] veth7: entered promiscuous mode [ 191.565452][ T9] lo speed is unknown, defaulting to 1000 [ 191.571163][ T9] syz0: Port: 1 Link DOWN [ 191.575768][T12167] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 191.584074][ T3417] lo speed is unknown, defaulting to 1000 [ 191.654143][T12175] netlink: 'syz.1.3304': attribute type 10 has an invalid length. [ 191.659857][T12179] netlink: 'syz.0.3307': attribute type 3 has an invalid length. [ 191.661949][T12175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3304'. [ 191.679747][T12179] netlink: 'syz.0.3307': attribute type 3 has an invalid length. [ 191.688286][T12175] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 191.860124][T12197] lo speed is unknown, defaulting to 1000 [ 191.899429][T12201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53264 sclass=netlink_audit_socket pid=12201 comm=syz.0.3316 [ 191.974888][T12204] lo: entered promiscuous mode [ 191.984932][T12204] tunl0: entered promiscuous mode [ 191.990043][T12204] gre0: entered promiscuous mode [ 191.995111][T12204] 0ªî{X¹¦: entered promiscuous mode [ 192.000487][T12204] 0ªî{X¹¦: left allmulticast mode [ 192.006378][T12204] erspan0: entered promiscuous mode [ 192.011568][T12204] erspan0: left allmulticast mode [ 192.016752][T12204] ip_vti0: entered promiscuous mode [ 192.021989][T12204] ip6_vti0: entered promiscuous mode [ 192.027332][T12204] sit0: left allmulticast mode [ 192.032228][T12204] ip6tnl0: entered promiscuous mode [ 192.038168][T12204] ip6gre0: entered promiscuous mode [ 192.043603][T12204] ip6gretap0: entered promiscuous mode [ 192.049184][T12204] vcan0: entered promiscuous mode [ 192.054301][T12204] bond0: entered promiscuous mode [ 192.059374][T12204] bond_slave_0: entered promiscuous mode [ 192.065734][T12204] bond_slave_1: entered promiscuous mode [ 192.073410][T12205] xt_HMARK: proto mask must be zero with L3 mode [ 192.085839][T12204] team0: left allmulticast mode [ 192.090815][T12204] team_slave_0: left allmulticast mode [ 192.096931][T12204] team_slave_1: left allmulticast mode [ 192.103934][T12204] nlmon0: entered promiscuous mode [ 192.109088][T12204] caif0: entered promiscuous mode [ 192.114178][T12204] vxcan0: entered promiscuous mode [ 192.119371][T12204] vxcan1: entered promiscuous mode [ 192.125131][T12204] veth0: entered promiscuous mode [ 192.130176][T12204] veth1: entered promiscuous mode [ 192.135319][T12204] wg0: entered promiscuous mode [ 192.140202][T12204] wg1: entered promiscuous mode [ 192.145122][T12204] wg2: entered promiscuous mode [ 192.150059][T12204] veth0_to_bridge: entered promiscuous mode [ 192.156684][T12204] bridge_slave_0: entered promiscuous mode [ 192.162540][T12204] veth1_to_bridge: entered promiscuous mode [ 192.168526][T12204] bridge_slave_1: entered promiscuous mode [ 192.174438][T12204] veth0_to_bond: entered promiscuous mode [ 192.180276][T12204] veth1_to_bond: entered promiscuous mode [ 192.186798][T12204] veth0_to_team: entered promiscuous mode [ 192.192610][T12204] veth1_to_team: entered promiscuous mode [ 192.198506][T12204] veth0_to_batadv: entered promiscuous mode [ 192.204465][T12204] batadv_slave_0: entered promiscuous mode [ 192.210362][T12204] veth1_to_batadv: entered promiscuous mode [ 192.216932][T12204] batadv_slave_1: entered promiscuous mode [ 192.222966][T12204] xfrm0: entered promiscuous mode [ 192.228042][T12204] veth0_to_hsr: entered promiscuous mode [ 192.233775][T12204] hsr0: entered promiscuous mode [ 192.238754][T12204] veth1_virt_wifi: entered promiscuous mode [ 192.245383][T12204] veth0_virt_wifi: entered promiscuous mode [ 192.251334][T12204] geneve0: entered promiscuous mode [ 192.256644][T12204] geneve1: entered promiscuous mode [ 192.261946][T12204] bridge1: entered promiscuous mode [ 192.267224][T12204] vxlan0: entered promiscuous mode [ 192.273184][T12204] bridge2: entered promiscuous mode [ 192.278474][T12204] gretap1: entered promiscuous mode [ 192.283972][T12204] bridge3: entered promiscuous mode [ 192.289302][T12204] bond1: entered promiscuous mode [ 192.294406][T12204] veth2: entered promiscuous mode [ 192.299455][T12204] veth3: entered promiscuous mode [ 192.305760][T12204] netdevsim netdevsim0 eth0: entered promiscuous mode [ 192.312612][T12204] netdevsim netdevsim0 eth1: entered promiscuous mode [ 192.319655][T12204] netdevsim netdevsim0 eth2: entered promiscuous mode [ 192.326774][T12204] netdevsim netdevsim0 eth3: entered promiscuous mode [ 192.334367][T12204] gretap0: entered promiscuous mode [ 192.339687][T12204] bridge4: entered promiscuous mode [ 192.344991][T12204] veth4: entered promiscuous mode [ 192.350049][T12204] veth5: entered promiscuous mode [ 192.355139][T12204] ip6_vti1: entered promiscuous mode [ 192.360544][T12204] ip6_vti2: entered promiscuous mode [ 192.366573][T12204] ip6tnl1: entered promiscuous mode [ 192.371936][T12204] bond2: entered promiscuous mode [ 192.377163][T12204] veth6: entered promiscuous mode [ 192.382262][T12204] veth8: entered promiscuous mode [ 192.387436][T12204] veth9: entered promiscuous mode [ 192.393237][T12204] ip6tnl2: entered promiscuous mode [ 192.398508][T12204] bond3: entered promiscuous mode [ 192.403587][T12204] geneve2: entered promiscuous mode [ 192.409055][T12204] veth10: entered promiscuous mode [ 192.414377][T12204] veth12: entered promiscuous mode [ 192.419528][T12204] veth13: entered promiscuous mode [ 192.425339][T12204] bridge0: entered promiscuous mode [ 192.430729][T12204] m: entered promiscuous mode [ 192.435451][T12204] bond4: entered promiscuous mode [ 192.441545][T12204] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.450003][T12204] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.459098][T12204] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.467440][T12204] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.476310][T12204] vxlan2: entered promiscuous mode [ 192.595971][T12213] netlink: 'syz.2.3320': attribute type 10 has an invalid length. [ 192.603850][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3320'. [ 192.632450][T12213] dummy0: entered promiscuous mode [ 192.638436][T12213] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 192.718656][T12220] SELinux: syz.1.3325 (12220) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 192.848630][T12227] lo speed is unknown, defaulting to 1000 [ 193.948451][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 193.948464][ T29] audit: type=1400 audit(2000000029.431:27254): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.001806][ T29] audit: type=1400 audit(2000000029.431:27255): avc: denied { prog_load } for pid=12248 comm="syz.0.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.021741][ T29] audit: type=1400 audit(2000000029.431:27256): avc: denied { create } for pid=12248 comm="syz.0.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 194.041546][ T29] audit: type=1400 audit(2000000029.431:27257): avc: denied { map_create } for pid=12248 comm="syz.0.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.061575][ T29] audit: type=1400 audit(2000000029.431:27258): avc: denied { prog_load } for pid=12248 comm="syz.0.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.080905][ T29] audit: type=1400 audit(2000000029.441:27259): avc: denied { create } for pid=12248 comm="syz.0.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 194.100676][ T29] audit: type=1400 audit(2000000029.441:27260): avc: denied { read } for pid=12248 comm="syz.0.3333" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 194.124387][ T29] audit: type=1400 audit(2000000029.451:27261): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.148824][ T29] audit: type=1400 audit(2000000029.471:27262): avc: denied { map_create } for pid=12250 comm="syz.1.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.168726][ T29] audit: type=1400 audit(2000000029.471:27263): avc: denied { map_create } for pid=12250 comm="syz.1.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 194.215491][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 194.396464][T12268] lo speed is unknown, defaulting to 1000 [ 194.478118][T12269] wg2: entered promiscuous mode [ 194.483052][T12269] wg2: entered allmulticast mode [ 194.877158][T12305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3355'. [ 194.887149][T12305] $Hÿ (unregistering): left allmulticast mode [ 194.893430][T12305] bridge0: port 1($Hÿ) entered disabled state [ 194.915143][T12305] $Hÿ (unregistering): Released all slaves [ 195.101183][T12308] netlink: 'syz.0.3357': attribute type 4 has an invalid length. [ 195.130198][T12308] netlink: 'syz.0.3357': attribute type 4 has an invalid length. [ 195.188182][T12312] netlink: 'syz.0.3368': attribute type 4 has an invalid length. [ 196.034685][T12335] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3370'. [ 196.054216][T12335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.070165][T12335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.079563][T12335] bond0 (unregistering): Released all slaves [ 196.089309][T12337] validate_nla: 1 callbacks suppressed [ 196.089322][T12337] netlink: 'syz.2.3371': attribute type 4 has an invalid length. [ 196.104651][T12337] netlink: 'syz.2.3371': attribute type 4 has an invalid length. [ 196.148737][T12341] netlink: 'syz.2.3373': attribute type 12 has an invalid length. [ 196.156584][T12341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3373'. [ 196.276289][T12353] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 196.285005][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 196.298943][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 196.403314][T12367] netlink: 'syz.3.3383': attribute type 4 has an invalid length. [ 196.413243][T12367] netlink: 'syz.3.3383': attribute type 4 has an invalid length. [ 197.403090][T12392] lo speed is unknown, defaulting to 1000 [ 197.477210][T12401] syzkaller0: entered promiscuous mode [ 197.482766][T12401] syzkaller0: entered allmulticast mode [ 197.513673][T12407] lo speed is unknown, defaulting to 1000 [ 197.745225][T12414] netlink: 'syz.1.3398': attribute type 4 has an invalid length. [ 197.754822][T12414] netlink: 'syz.1.3398': attribute type 4 has an invalid length. [ 197.772241][ T1037] lo speed is unknown, defaulting to 1000 [ 197.777996][ T1037] syz0: Port: 1 Link ACTIVE [ 197.792256][ T1037] lo speed is unknown, defaulting to 1000 [ 198.173670][T12448] netlink: 'syz.3.3413': attribute type 4 has an invalid length. [ 198.183268][T12448] netlink: 'syz.3.3413': attribute type 4 has an invalid length. [ 198.213438][T12450] netlink: 'syz.3.3414': attribute type 12 has an invalid length. [ 198.221260][T12450] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3414'. [ 198.980870][ T29] kauditd_printk_skb: 1033 callbacks suppressed [ 198.980883][ T29] audit: type=1400 audit(2000000034.451:28297): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.092156][ T29] audit: type=1400 audit(2000000034.571:28298): avc: denied { read } for pid=12477 comm="syz.0.3425" dev="nsfs" ino=4026532634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 199.113805][ T29] audit: type=1400 audit(2000000034.571:28299): avc: denied { map_create } for pid=12477 comm="syz.0.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.133118][ T29] audit: type=1400 audit(2000000034.571:28300): avc: denied { prog_load } for pid=12477 comm="syz.0.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.152329][ T29] audit: type=1400 audit(2000000034.571:28301): avc: denied { prog_load } for pid=12477 comm="syz.0.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.182895][ T29] audit: type=1400 audit(2000000034.661:28302): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.211933][ T29] audit: type=1400 audit(2000000034.691:28303): avc: denied { map_create } for pid=12481 comm="syz.3.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.247577][ T29] audit: type=1400 audit(2000000034.711:28304): avc: denied { prog_load } for pid=12481 comm="syz.3.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.266987][ T29] audit: type=1400 audit(2000000034.721:28305): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.292238][ T29] audit: type=1400 audit(2000000034.771:28306): avc: denied { map_create } for pid=12483 comm="syz.3.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 199.365028][T12488] C: renamed from team_slave_0 [ 199.383320][T12488] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3430'. [ 199.406921][T12489] lo speed is unknown, defaulting to 1000 [ 199.453445][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 200.099152][T12514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.270468][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 200.340673][T12527] lo speed is unknown, defaulting to 1000 [ 201.299268][T12569] lo speed is unknown, defaulting to 1000 [ 201.436134][T12573] pim6reg1: entered promiscuous mode [ 201.441472][T12573] pim6reg1: entered allmulticast mode [ 201.972969][T12590] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 201.994217][T12593] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3469'. [ 202.006821][T12593] wireguard0: entered promiscuous mode [ 202.012412][T12593] wireguard0: entered allmulticast mode [ 202.100671][T12598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3471'. [ 202.329293][T12610] xt_hashlimit: max too large, truncated to 1048576 [ 202.427116][T12616] validate_nla: 2 callbacks suppressed [ 202.427129][T12616] netlink: 'syz.0.3480': attribute type 21 has an invalid length. [ 202.441217][T12616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3480'. [ 202.622832][T12627] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3485'. [ 202.765787][T12632] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3487'. [ 203.025505][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3493'. [ 203.366669][T12667] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 203.546580][T12679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3505'. [ 203.555591][T12679] bridge_slave_0: default FDB implementation only supports local addresses [ 203.874715][T12698] lo speed is unknown, defaulting to 1000 [ 203.894355][T12699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 203.900868][T12699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.909080][T12699] vhci_hcd vhci_hcd.0: Device attached [ 203.922057][T12700] vhci_hcd: unknown pdu 2 [ 203.927009][ T3850] vhci_hcd: stop threads [ 203.931284][ T3850] vhci_hcd: release socket [ 203.936466][ T3850] vhci_hcd: disconnect device [ 203.982356][ T29] kauditd_printk_skb: 1357 callbacks suppressed [ 203.982369][ T29] audit: type=1326 audit(2000000039.462:29664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.0.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b40375967 code=0x7ffc0000 [ 204.031737][ T29] audit: type=1326 audit(2000000039.462:29665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.0.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4031ab89 code=0x7ffc0000 [ 204.055225][ T29] audit: type=1326 audit(2000000039.462:29666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.0.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 204.078819][ T29] audit: type=1326 audit(2000000039.462:29667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88e85d5967 code=0x7ffc0000 [ 204.102288][ T29] audit: type=1326 audit(2000000039.462:29668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e857ab89 code=0x7ffc0000 [ 204.125740][ T29] audit: type=1326 audit(2000000039.462:29669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f88e85de9a9 code=0x7ffc0000 [ 204.149333][ T29] audit: type=1326 audit(2000000039.472:29670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.0.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b40375967 code=0x7ffc0000 [ 204.172792][ T29] audit: type=1326 audit(2000000039.472:29671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.0.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4031ab89 code=0x7ffc0000 [ 204.196329][ T29] audit: type=1326 audit(2000000039.472:29672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.0.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f3b4037e9a9 code=0x7ffc0000 [ 204.219983][ T29] audit: type=1326 audit(2000000039.472:29673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88e85d5967 code=0x7ffc0000 [ 204.413818][T12721] netlink: 'syz.0.3522': attribute type 4 has an invalid length. [ 204.425568][T12721] netlink: 'syz.0.3522': attribute type 4 has an invalid length. [ 204.569914][T12733] lo speed is unknown, defaulting to 1000 [ 204.768136][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3527'. [ 205.156411][T12752] netlink: 'syz.0.3534': attribute type 4 has an invalid length. [ 205.171918][T12752] netlink: 'syz.0.3534': attribute type 4 has an invalid length. [ 205.231926][T12762] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 205.514237][T12777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12777 comm=syz.3.3544 [ 205.527934][T12777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12777 comm=syz.3.3544 [ 205.579081][T12781] bond0: entered promiscuous mode [ 205.584154][T12781] bond0: entered allmulticast mode [ 205.589438][T12781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.598199][T12781] bond0 (unregistering): Released all slaves [ 205.664666][T12788] netlink: 'syz.3.3549': attribute type 4 has an invalid length. [ 205.673618][T12788] netlink: 'syz.3.3549': attribute type 4 has an invalid length. [ 205.702705][T12790] lo speed is unknown, defaulting to 1000 [ 205.802270][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 206.105173][T12809] netlink: 'syz.2.3559': attribute type 39 has an invalid length. [ 206.142867][T12813] netlink: 'syz.2.3560': attribute type 4 has an invalid length. [ 206.172576][T12813] netlink: 'syz.2.3560': attribute type 4 has an invalid length. [ 207.057687][T12860] lo speed is unknown, defaulting to 1000 [ 207.063860][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3583'. [ 207.090253][T12865] dummy0: left promiscuous mode [ 207.187153][T12874] lo speed is unknown, defaulting to 1000 [ 207.267425][T12885] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 207.294817][T12887] lo speed is unknown, defaulting to 1000 [ 207.567305][T12914] validate_nla: 9 callbacks suppressed [ 207.567318][T12914] netlink: 'syz.1.3605': attribute type 4 has an invalid length. [ 207.584481][ T9] lo speed is unknown, defaulting to 1000 [ 207.590245][ T9] syz0: Port: 1 Link DOWN [ 207.602019][T12914] netlink: 'syz.1.3605': attribute type 4 has an invalid length. [ 207.603395][ T1037] lo speed is unknown, defaulting to 1000 [ 207.643017][ T1037] lo speed is unknown, defaulting to 1000 [ 207.648786][ T1037] syz0: Port: 1 Link ACTIVE [ 207.666900][ T3417] lo speed is unknown, defaulting to 1000 [ 207.697833][T12916] lo speed is unknown, defaulting to 1000 [ 208.200822][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3612'. [ 208.406896][T12947] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 208.436365][ T9] lo speed is unknown, defaulting to 1000 [ 208.442148][ T9] syz0: Port: 1 Link DOWN [ 208.446975][ T9] lo speed is unknown, defaulting to 1000 [ 208.454136][T12947] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 208.477194][ T3377] lo speed is unknown, defaulting to 1000 [ 208.482964][ T3377] syz0: Port: 1 Link ACTIVE [ 208.488968][ T3377] lo speed is unknown, defaulting to 1000 [ 208.495391][T12943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3616'. [ 208.521969][T12949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12949 comm=syz.1.3620 [ 208.538449][T12949] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 208.557011][T12949] team0: Device macvtap0 is already an upper device of the team interface [ 208.577244][T12953] netlink: 'syz.0.3631': attribute type 4 has an invalid length. [ 208.585999][T12954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12954 comm=syz.1.3620 [ 208.998939][ T29] kauditd_printk_skb: 1522 callbacks suppressed [ 208.998956][ T29] audit: type=1326 audit(2000000300.480:31196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97a9bc5967 code=0x7ffc0000 [ 209.029546][ T29] audit: type=1326 audit(2000000300.480:31197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f97a9b6ab89 code=0x7ffc0000 [ 209.053108][ T29] audit: type=1326 audit(2000000300.480:31198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f97a9bce9a9 code=0x7ffc0000 [ 209.076566][ T29] audit: type=1326 audit(2000000300.490:31199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97a9bc5967 code=0x7ffc0000 [ 209.100026][ T29] audit: type=1326 audit(2000000300.490:31200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f97a9b6ab89 code=0x7ffc0000 [ 209.123496][ T29] audit: type=1326 audit(2000000300.490:31201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f97a9bce9a9 code=0x7ffc0000 [ 209.146961][ T29] audit: type=1326 audit(2000000300.490:31202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97a9bc5967 code=0x7ffc0000 [ 209.170421][ T29] audit: type=1326 audit(2000000300.490:31203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f97a9b6ab89 code=0x7ffc0000 [ 209.193973][ T29] audit: type=1326 audit(2000000300.490:31204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f97a9bce9a9 code=0x7ffc0000 [ 209.217352][ T29] audit: type=1326 audit(2000000300.510:31205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97a9bc5967 code=0x7ffc0000 [ 209.361510][T12967] ================================================================== [ 209.369602][T12967] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 209.377928][T12967] [ 209.380247][T12967] write to 0xffff88811a4129a4 of 4 bytes by task 12968 on cpu 1: [ 209.387956][T12967] inode_update_timestamps+0x147/0x270 [ 209.393423][T12967] file_update_time+0x20e/0x2b0 [ 209.398267][T12967] shmem_file_write_iter+0x9c/0xf0 [ 209.403377][T12967] iter_file_splice_write+0x5f2/0x970 [ 209.408762][T12967] direct_splice_actor+0x156/0x2a0 [ 209.413878][T12967] splice_direct_to_actor+0x312/0x680 [ 209.419260][T12967] do_splice_direct+0xda/0x150 [ 209.424032][T12967] do_sendfile+0x380/0x650 [ 209.428447][T12967] __x64_sys_sendfile64+0x105/0x150 [ 209.433653][T12967] x64_sys_call+0xb39/0x2fb0 [ 209.438240][T12967] do_syscall_64+0xd2/0x200 [ 209.442737][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.449146][T12967] [ 209.451461][T12967] read to 0xffff88811a4129a4 of 4 bytes by task 12967 on cpu 0: [ 209.459074][T12967] atime_needs_update+0x2a8/0x3e0 [ 209.464099][T12967] touch_atime+0x4a/0x340 [ 209.468422][T12967] shmem_file_splice_read+0x5b1/0x600 [ 209.473788][T12967] splice_direct_to_actor+0x26c/0x680 [ 209.479159][T12967] do_splice_direct+0xda/0x150 [ 209.483923][T12967] do_sendfile+0x380/0x650 [ 209.488330][T12967] __x64_sys_sendfile64+0x105/0x150 [ 209.493516][T12967] x64_sys_call+0xb39/0x2fb0 [ 209.498099][T12967] do_syscall_64+0xd2/0x200 [ 209.502593][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.508472][T12967] [ 209.510779][T12967] value changed: 0x3216edda -> 0x32af868c [ 209.516482][T12967] [ 209.518790][T12967] Reported by Kernel Concurrency Sanitizer on: [ 209.524933][T12967] CPU: 0 UID: 0 PID: 12967 Comm: gtp Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 209.535073][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.545112][T12967] ==================================================================