last executing test programs: 22m16.646670995s ago: executing program 32 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 21m56.690353155s ago: executing program 33 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) 21m48.652262818s ago: executing program 34 (id=428): r0 = gettid() timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) get_robust_list(r0, &(0x7f0000000200)=&(0x7f0000000180)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000140)}, &(0x7f0000000240)=0x18) 21m46.659997834s ago: executing program 35 (id=446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 21m45.210229914s ago: executing program 36 (id=455): fsopen(&(0x7f0000000040)='v7\x00', 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0x8) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x40004) write$cgroup_type(0xffffffffffffffff, 0x0, 0x33) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) 7m11.181227734s ago: executing program 37 (id=4172): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x104) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a469, &(0x7f0000000b40)=ANY=[@ANYRESOCT, @ANYBLOB="eb953260491983c29d210004f16e2cc94aec4365c40c8fea3920a85fdbbf184dac234ee8c26e2c70d250cd367155825b30236afd2c3a4ad4a45ead6ca85bed8ee2e9492725e4684d581c450d40590a37454c43ffe0091bb8b23c1f1d0d5ee9eaa21ff6a11a0990f40f311fbd67453e0a33", @ANYRES8=r0, @ANYRES16], 0xd, 0x0, &(0x7f0000000b40)) renameat2(r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2m54.748334244s ago: executing program 38 (id=10517): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) fsopen(0x0, 0x0) 2m53.446662373s ago: executing program 39 (id=10530): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'dvmrp1\x00', 0x1}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) 2m42.093725792s ago: executing program 40 (id=10727): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb7", 0x11}, {&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000", 0x3f}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800"/206, 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m36.580932691s ago: executing program 41 (id=10845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0xfc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000000000005f000500010006"], 0x1c}}, 0x0) close_range(r0, r1, 0x0) 2m36.226122005s ago: executing program 42 (id=10852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.672567413s ago: executing program 43 (id=10861): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x9, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x80000003}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2m33.306464746s ago: executing program 44 (id=10866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)={r2, 0x6, 0x5, "0963ca8a95"}, 0xd) 2m30.1793022s ago: executing program 45 (id=10873): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x3f2, 0x8000, 0x4df, 0x7, 0xa2a, 0x5, 0x18f05abf}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) 2m24.844982666s ago: executing program 46 (id=10924): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r1, &(0x7f0000000040)=""/41, 0xfee3) 2m24.082745899s ago: executing program 47 (id=10932): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}}, 0x0) 1m56.760160834s ago: executing program 48 (id=11676): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208003800030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, 0x1, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x840) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m50.059060934s ago: executing program 49 (id=11807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m43.088093372s ago: executing program 50 (id=11917): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x8}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1m38.47133499s ago: executing program 1 (id=12013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000104010200000190002000000100360008000540efffffff0500010001"], 0x24}}, 0x0) 1m38.46368592s ago: executing program 1 (id=12016): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x804) 1m38.398203094s ago: executing program 1 (id=12018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x89}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.397764204s ago: executing program 1 (id=12019): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m38.341063368s ago: executing program 1 (id=12021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001200001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) fstat(r7, 0x0) fstat(r7, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) r9 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) socketpair(0x22, 0x3, 0x3, &(0x7f00000002c0)) 1m38.029361289s ago: executing program 1 (id=12026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x7, 0x0, &(0x7f00000002c0)="b8000005000000", 0x0, 0x12002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m38.006169271s ago: executing program 51 (id=12026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x7, 0x0, &(0x7f00000002c0)="b8000005000000", 0x0, 0x12002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.162290429s ago: executing program 5 (id=12046): memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1m33.06873216s ago: executing program 5 (id=12138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x804) 1m33.023102024s ago: executing program 5 (id=12140): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m32.948127778s ago: executing program 5 (id=12142): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m32.893413982s ago: executing program 5 (id=12144): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0xfffffffffffffdfc}, 0x4008800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1m31.514966777s ago: executing program 5 (id=12158): socket$kcm(0x22, 0x2, 0x21) socket$kcm(0x11, 0x200000000000002, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 1m31.490706128s ago: executing program 52 (id=12158): socket$kcm(0x22, 0x2, 0x21) socket$kcm(0x11, 0x200000000000002, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 1m25.985338476s ago: executing program 8 (id=12329): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1m25.673482058s ago: executing program 8 (id=12341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m25.64168173s ago: executing program 8 (id=12344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB=','], 0x9a) 1m25.528038648s ago: executing program 8 (id=12348): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x10454ca, 0x0) 1m25.495597569s ago: executing program 8 (id=12350): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x42) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x14, 0x47, 0x707, 0xfffffffe, 0xffffffff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m25.419150635s ago: executing program 8 (id=12352): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1m25.418912995s ago: executing program 53 (id=12352): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1m25.242911757s ago: executing program 3 (id=12357): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00'/16, @ANYRES32], 0x20) 1m25.226694088s ago: executing program 3 (id=12358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000500feffffbf00f1ffc6c100000000000020000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350004"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe88000000ec1c64dda9f0df5191e7990000000000000000000001fc0100000000000000000000000000010001071406", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m25.192168641s ago: executing program 3 (id=12359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000064008188040f80ec59ac52f92812f848290000005e1406020000f6f775e453b1800028121f", 0x29}], 0x1}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0xe, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x4, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r7, 0x58, &(0x7f0000000440)}, 0x10) sendmsg$nl_route_sched(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180), 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000500feffffbf00f1ffc6c100000000000020000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a073500"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m25.047355051s ago: executing program 3 (id=12360): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x10454ca, 0x0) 1m25.047010041s ago: executing program 3 (id=12361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4, 0x3}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x80}}, 0x0) 1m24.821415916s ago: executing program 3 (id=12363): socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m24.781264639s ago: executing program 54 (id=12363): socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m19.846014468s ago: executing program 9 (id=12469): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0x3ff}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) 1m19.800807661s ago: executing program 9 (id=12471): socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x400000000000, 0x61000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) 1m19.749333654s ago: executing program 9 (id=12473): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m19.583336446s ago: executing program 9 (id=12479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c000100626974776973650030000280080003400000000208000140000000140800024000"], 0x114}}, 0x0) 1m19.562996357s ago: executing program 9 (id=12482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m19.432137476s ago: executing program 9 (id=12489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m4.116769257s ago: executing program 55 (id=12489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3.110654526s ago: executing program 4 (id=14305): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) 3.024146722s ago: executing program 4 (id=14309): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYBLOB="0000000008000000140012800c0001006d6163766c616e0004000280140035006d6163876c616e"], 0x6c}}, 0x8050) 3.003584173s ago: executing program 4 (id=14312): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) fstat(0xffffffffffffffff, &(0x7f0000000440)) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x68, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x4, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x5, 0x3}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840), 0x0, 0xfffffffffffffffe) 2.75874827s ago: executing program 4 (id=14317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001a0100000100000008000000000000001012"], 0x28}, 0x0) 2.003823072s ago: executing program 7 (id=14338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.003218442s ago: executing program 7 (id=14339): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000200)={0xc0002011}) 1.824794614s ago: executing program 7 (id=14343): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0xfffffffffffffdfc}, 0x4008800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.703317042s ago: executing program 4 (id=14344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oeN', 0xc778}], 0x1, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081) 1.339263967s ago: executing program 6 (id=14345): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000140), 0x18) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001ac0)="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", 0x776}], 0x1}}], 0x1, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 1.334752858s ago: executing program 7 (id=14346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x101680, 0x2, 0xfffffffc, 0x0, 0x5, 0xa50, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 1.30689895s ago: executing program 7 (id=14347): r0 = syz_io_uring_setup(0x8d9, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) 1.276222742s ago: executing program 7 (id=14349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x1f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000180)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x2, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) fsync(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x108) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) syz_emit_ethernet(0xaf, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, 0x0) 1.047273328s ago: executing program 0 (id=14356): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0xfffffffffffffdfc}, 0x4008800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.046977088s ago: executing program 2 (id=14358): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x18}}, 0xc000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) socket(0x2f, 0xa, 0x8d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='westwood', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.01310341s ago: executing program 0 (id=14359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 940.667725ms ago: executing program 2 (id=14360): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x3) 940.163385ms ago: executing program 0 (id=14361): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0xfffffffffffffdfc}, 0x4008800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 939.702835ms ago: executing program 2 (id=14362): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) writev(r0, &(0x7f0000002c80)=[{&(0x7f0000001b40)="bc2e3cf0", 0x4}], 0x1) 879.182909ms ago: executing program 2 (id=14363): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b79160e9e98cd9a001d5f42d3fb166c612fe4"}, 0x58) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 879.009599ms ago: executing program 2 (id=14364): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}], 0x1, 0x0) 873.65935ms ago: executing program 0 (id=14365): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x29}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000"], 0xffc5}, 0x4004000) 855.308731ms ago: executing program 0 (id=14366): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) 804.400794ms ago: executing program 0 (id=14367): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000002c0)='(') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$char_usb(r1, &(0x7f0000000300)=""/215, 0xd7) 803.470535ms ago: executing program 4 (id=14368): io_setup(0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 627.177496ms ago: executing program 2 (id=14369): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0xfffffffffffffdfc}, 0x4008800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 98.408743ms ago: executing program 6 (id=14370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001a0100000100000008000000000000001012"], 0x28}, 0x0) 80.216854ms ago: executing program 6 (id=14371): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e) socket$inet6(0xa, 0x3, 0x3c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080)=0x2) 22.049788ms ago: executing program 6 (id=14372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21.853188ms ago: executing program 6 (id=14373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYBLOB="0000000008000000140012800c0001006d6163766c616e0004000280140035006d6163876c616e300000000000"], 0x6c}}, 0x8050) 0s ago: executing program 6 (id=14374): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) socket(0x200000000000011, 0x2, 0xd) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): device team_slave_1 removed [ 1273.090226][ T4236] team0 (unregistering): Port device team_slave_0 removed [ 1273.256499][ T4236] team0 (unregistering): Port device team_slave_1 removed [ 1273.280194][ T4236] team0 (unregistering): Port device team_slave_0 removed [ 1273.439464][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.474044][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.503613][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.510821][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.541391][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.549415][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.633796][ T6705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1273.649206][ T7080] loop8: detected capacity change from 0 to 8192 [ 1273.658433][ T6705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1273.684387][ T6773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1273.707413][ T6773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1273.721559][ T6773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1273.768383][ T6773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1273.865439][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.986088][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.016022][ T6773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.040287][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.047508][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.098213][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.105412][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.125508][ T7128] syzkaller0: entered promiscuous mode [ 1274.131300][ T7128] syzkaller0: entered allmulticast mode [ 1274.181621][ T7128] tipc: Started in network mode [ 1274.198540][ T7128] tipc: Node identity 3e12acdb914f, cluster identity 4711 [ 1274.205885][ T7128] tipc: Enabled bearer , priority 0 [ 1274.272989][ T7127] tipc: Resetting bearer [ 1274.297987][ T7127] tipc: Disabling bearer [ 1274.350648][ T6705] veth0_vlan: entered promiscuous mode [ 1274.377031][ T6705] veth1_vlan: entered promiscuous mode [ 1274.424264][ T6705] veth0_macvtap: entered promiscuous mode [ 1274.452714][ T6705] veth1_macvtap: entered promiscuous mode [ 1274.498297][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.536226][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.564517][ T4236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.574588][ T4236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.594677][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.602130][ T4236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.612233][ T4236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.672144][ T7166] syzkaller0: entered promiscuous mode [ 1274.684042][ T7166] syzkaller0: entered allmulticast mode [ 1274.806506][ T7157] loop9: detected capacity change from 0 to 32768 [ 1274.828390][ T6773] veth0_vlan: entered promiscuous mode [ 1274.863182][ T6773] veth1_vlan: entered promiscuous mode [ 1274.872468][ T3299] loop9: p1 p2 p3 < p5 p6 > [ 1274.896739][ T6773] veth0_macvtap: entered promiscuous mode [ 1274.914270][ T7157] loop9: p1 p2 p3 < p5 p6 > [ 1274.936096][ T6773] veth1_macvtap: entered promiscuous mode [ 1274.963145][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.998743][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.009931][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 1275.021312][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 1275.027371][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1275.048293][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1275.059217][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1275.077970][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.095778][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 1275.101944][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1275.113341][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1275.126889][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1275.127190][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 1275.159391][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.168541][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.193094][ T7200] syzkaller0: entered promiscuous mode [ 1275.218966][ T7200] syzkaller0: entered allmulticast mode [ 1275.234704][ T7204] loop9: detected capacity change from 0 to 512 [ 1275.247471][ T7200] tipc: Started in network mode [ 1275.255756][ T7209] program syz.6.11011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1275.265828][ T7200] tipc: Node identity 5eea62c07841, cluster identity 4711 [ 1275.285843][ T7200] tipc: Enabled bearer , priority 0 [ 1275.306642][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.357380][ T7199] tipc: Resetting bearer [ 1275.381216][ T7199] tipc: Disabling bearer [ 1275.472455][ T7213] syzkaller0: entered promiscuous mode [ 1275.478258][ T7213] syzkaller0: entered allmulticast mode [ 1275.669656][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11023'. [ 1275.687869][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11023'. [ 1275.705180][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11023'. [ 1275.714618][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11023'. [ 1275.968350][ T7267] syzkaller0: entered promiscuous mode [ 1275.985434][ T7267] syzkaller0: entered allmulticast mode [ 1276.479388][ T7333] syzkaller0: entered promiscuous mode [ 1276.497541][ T7333] syzkaller0: entered allmulticast mode [ 1276.532913][ T7345] tipc: Enabled bearer , priority 0 [ 1276.591877][ T7332] tipc: Resetting bearer [ 1276.620695][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11059'. [ 1276.638270][ T7332] tipc: Disabling bearer [ 1276.670734][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11059'. [ 1276.700764][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.753224][ T7353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.045057][ T7383] syzkaller0: entered promiscuous mode [ 1277.060273][ T7383] syzkaller0: entered allmulticast mode [ 1277.139701][ T7398] syzkaller0: entered promiscuous mode [ 1277.154215][ T7398] syzkaller0: entered allmulticast mode [ 1277.186449][ T7407] loop0: detected capacity change from 0 to 256 [ 1277.198869][ T28] audit: type=1326 audit(1775660860.520:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.198882][ T7408] tipc: Enabled bearer , priority 0 [ 1277.238412][ T7397] tipc: Resetting bearer [ 1277.308088][ T7397] tipc: Disabling bearer [ 1277.363462][ T28] audit: type=1326 audit(1775660860.520:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.473012][ T28] audit: type=1326 audit(1775660860.520:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.587165][ T28] audit: type=1326 audit(1775660860.520:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.702099][ T28] audit: type=1326 audit(1775660860.520:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.749980][ T7447] loop5: detected capacity change from 0 to 7 [ 1277.769376][ T7449] loop6: detected capacity change from 0 to 128 [ 1277.812793][ T28] audit: type=1326 audit(1775660860.520:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.884586][ T28] audit: type=1326 audit(1775660860.520:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.923500][ T7445] syzkaller0: entered promiscuous mode [ 1277.957270][ T28] audit: type=1326 audit(1775660860.520:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1277.972257][ T7445] syzkaller0: entered allmulticast mode [ 1278.084011][ T28] audit: type=1326 audit(1775660860.520:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.8.11074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f11691dc819 code=0x7ffc0000 [ 1278.117374][ T28] audit: type=1400 audit(1775660861.030:1489): avc: denied { bind } for pid=7441 comm="syz.6.11084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1278.207392][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11092'. [ 1278.250179][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11092'. [ 1278.591848][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11110'. [ 1278.613054][ T7505] syzkaller0: entered promiscuous mode [ 1278.631242][ T7505] syzkaller0: entered allmulticast mode [ 1278.644717][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11110'. [ 1278.852998][ T7539] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 1278.877512][ T7539] pim6reg1: tun_chr_ioctl cmd 1074025672 [ 1278.904114][ T7539] pim6reg1: ignored: set checksum disabled [ 1279.038828][ T7558] loop6: detected capacity change from 0 to 512 [ 1279.067595][ T7563] loop5: detected capacity change from 0 to 7 [ 1279.241081][ T7569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.589252][ T7608] veth3: entered allmulticast mode [ 1279.639031][ T7608] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1279.718369][ T7621] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1279.758947][ T7621] bond1 (unregistering): Released all slaves [ 1279.952809][ T7662] program syz.9.11152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.173652][ T7678] loop8: detected capacity change from 0 to 8192 [ 1280.204750][ T7691] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1280.215515][ T3299] loop8: p1 < > p2 < p5 > p4 [ 1280.221152][ T7691] pimreg1: linktype set to 823 [ 1280.236141][ T3299] loop8: partition table partially beyond EOD, truncated [ 1280.265239][ T3299] loop8: p1 start 67109119 is beyond EOD, truncated [ 1280.303137][ T7703] program syz.6.11167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.318335][ T3299] loop8: p4 size 393216 extends beyond EOD, truncated [ 1280.350552][ T3299] loop8: p5 size 393216 extends beyond EOD, truncated [ 1280.406288][ T7678] loop8: p1 < > p2 < p5 > p4 [ 1280.441912][ T7678] loop8: partition table partially beyond EOD, truncated [ 1280.479880][ T7678] loop8: p1 start 67109119 is beyond EOD, truncated [ 1280.497424][ T7678] loop8: p4 size 393216 extends beyond EOD, truncated [ 1280.530918][ T7678] loop8: p5 size 393216 extends beyond EOD, truncated [ 1280.724939][ T7740] program syz.9.11181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.755320][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1280.767444][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 1280.781323][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 1280.844638][ T3737] udevd[3737]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 1280.856010][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1280.868426][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 1281.411294][ T7848] loop5: detected capacity change from 0 to 764 [ 1281.430717][ T7848] rock: directory entry would overflow storage [ 1281.445826][ T7848] rock: sig=0x4654, size=5, remaining=4 [ 1281.581095][ T7870] xt_hashlimit: size too large, truncated to 1048576 [ 1281.822482][ T7902] __nla_validate_parse: 6 callbacks suppressed [ 1281.822504][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11235'. [ 1281.898073][ T7909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7909 comm=syz.9.11239 [ 1281.954896][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11235'. [ 1281.964165][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7919 comm=syz.9.11239 [ 1281.985213][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11235'. [ 1282.045835][ T7902] veth3: entered allmulticast mode [ 1282.070835][ T7902] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1282.114588][ T7911] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1282.143353][ T7911] bond1 (unregistering): Released all slaves [ 1282.293013][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1282.293033][ T28] audit: type=1400 audit(1775660865.630:1492): avc: denied { shutdown } for pid=7947 comm="syz.6.11250" laddr=fe80::e lport=49299 faddr=fe80::7 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1282.354121][ T7962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7962 comm=syz.8.11254 [ 1282.383377][ T7962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7962 comm=syz.8.11254 [ 1282.611376][ T8008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8008 comm=syz.8.11270 [ 1282.639309][ T8008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8008 comm=syz.8.11270 [ 1282.839955][ T8040] syzkaller0: entered promiscuous mode [ 1282.852179][ T8040] syzkaller0: entered allmulticast mode [ 1282.879084][ T8040] tipc: Started in network mode [ 1282.887908][ T8040] tipc: Node identity 420e644a360d, cluster identity 4711 [ 1282.902758][ T8040] tipc: Enabled bearer , priority 0 [ 1282.940433][ T8039] tipc: Resetting bearer [ 1282.941964][ T8056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8056 comm=syz.8.11285 [ 1282.970363][ T8039] tipc: Disabling bearer [ 1282.997940][ T8056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8056 comm=syz.8.11285 [ 1283.135198][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11292'. [ 1283.147688][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11292'. [ 1283.540950][ T8121] syzkaller0: entered promiscuous mode [ 1283.553661][ T8121] syzkaller0: entered allmulticast mode [ 1284.451985][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11322'. [ 1284.566645][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11322'. [ 1284.593191][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11322'. [ 1287.094187][ T8191] veth3: entered allmulticast mode [ 1287.102113][ T8191] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1287.310347][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11335'. [ 1287.334256][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11335'. [ 1287.676320][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11349'. [ 1287.717800][ T8410] netlink: 'syz.8.11349': attribute type 3 has an invalid length. [ 1287.729664][ T8410] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11349'. [ 1287.756381][ T8420] tipc: Enabling of bearer rejected, failed to enable media [ 1287.829105][ T8433] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1288.030329][ T8460] xt_hashlimit: size too large, truncated to 1048576 [ 1288.109168][ T8470] syzkaller0: entered promiscuous mode [ 1288.126554][ T8470] syzkaller0: entered allmulticast mode [ 1288.144558][ T8470] tipc: Enabled bearer , priority 0 [ 1288.178706][ T8469] tipc: Resetting bearer [ 1288.219858][ T8469] tipc: Disabling bearer [ 1288.226213][ T8486] sctp: [Deprecated]: syz.6.11373 (pid 8486) Use of int in maxseg socket option. [ 1288.226213][ T8486] Use struct sctp_assoc_value instead [ 1288.453731][ T8507] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11381'. [ 1288.463463][ T8507] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11381'. [ 1288.544400][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11383'. [ 1288.616709][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11387'. [ 1288.635501][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11383'. [ 1288.918264][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11407'. [ 1289.032146][ T8587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8587 comm=syz.9.11410 [ 1289.447087][ T8645] syzkaller0: entered promiscuous mode [ 1289.456086][ T8645] syzkaller0: entered allmulticast mode [ 1290.283949][ T8742] syzkaller0: entered promiscuous mode [ 1290.306074][ T8742] syzkaller0: entered allmulticast mode [ 1290.607420][ T8791] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1290.661343][ T8793] veth5: entered allmulticast mode [ 1290.706685][ T8802] bond2 (unregistering): Released all slaves [ 1290.922388][ T8828] syzkaller0: entered promiscuous mode [ 1290.933068][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8836 comm=syz.6.11491 [ 1290.947611][ T8828] syzkaller0: entered allmulticast mode [ 1290.960826][ T8828] tipc: Started in network mode [ 1290.969596][ T8828] tipc: Node identity 56669513ccf8, cluster identity 4711 [ 1290.980467][ T8828] tipc: Enabled bearer , priority 0 [ 1290.987905][ T8827] tipc: Resetting bearer [ 1291.011273][ T8827] tipc: Disabling bearer [ 1292.278564][ T8986] syzkaller0: entered promiscuous mode [ 1292.294212][ T8986] syzkaller0: entered allmulticast mode [ 1292.324962][ T8986] tipc: Enabled bearer , priority 0 [ 1292.342430][ T8985] tipc: Resetting bearer [ 1292.371463][ T8985] tipc: Disabling bearer [ 1292.987425][ T9041] __nla_validate_parse: 9 callbacks suppressed [ 1292.987444][ T9041] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11550'. [ 1293.093568][ T8974] Set syz1 is full, maxelem 65536 reached [ 1293.432087][ T9087] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11563'. [ 1293.675212][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11570'. [ 1293.739410][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11570'. [ 1294.066810][ T9165] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11582'. [ 1294.155006][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11584'. [ 1294.215278][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11584'. [ 1294.530399][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11595'. [ 1294.706488][ T9229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11599'. [ 1294.966907][ T9260] netlink: 'syz.5.11611': attribute type 10 has an invalid length. [ 1295.053733][ T9262] pim6reg1: entered allmulticast mode [ 1295.224062][ T28] audit: type=1400 audit(1775660878.548:1493): avc: denied { ioctl } for pid=9286 comm="syz.6.11619" path="socket:[136980]" dev="sockfs" ino=136980 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1295.381141][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.391540][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.445392][ T9322] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11629'. [ 1295.462751][ T9302] bridge0: entered allmulticast mode [ 1295.536731][ T9321] bridge_slave_1: left allmulticast mode [ 1295.550134][ T9321] bridge_slave_1: left promiscuous mode [ 1295.556553][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.565131][ T9321] bridge_slave_0: left allmulticast mode [ 1295.571049][ T9321] bridge_slave_0: left promiscuous mode [ 1295.576904][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.790432][ T9365] netlink: 'syz.9.11637': attribute type 29 has an invalid length. [ 1295.814945][ T9357] netlink: 'syz.9.11637': attribute type 29 has an invalid length. [ 1295.828843][ T9365] netlink: 'syz.9.11637': attribute type 29 has an invalid length. [ 1295.954778][ T9388] netlink: 'syz.8.11647': attribute type 4 has an invalid length. [ 1296.317625][ T28] audit: type=1400 audit(1775660879.648:1494): avc: denied { write } for pid=9452 comm="syz.0.11665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1296.337903][ T3178] failed to send hello msg [ 1296.351962][ T3178] failed while handling packet from 1:16384 [ 1296.499092][ T28] audit: type=1400 audit(1775660879.828:1495): avc: denied { unmount } for pid=6097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1297.425287][ T9520] chnl_net:caif_netlink_parms(): no params data found [ 1297.566890][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.582244][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.590206][ T9520] bridge_slave_0: entered allmulticast mode [ 1297.597419][ T9520] bridge_slave_0: entered promiscuous mode [ 1297.626588][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.647026][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.664930][ T9520] bridge_slave_1: entered allmulticast mode [ 1297.680862][ T9520] bridge_slave_1: entered promiscuous mode [ 1297.726436][ T9520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.736081][ T9591] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 1297.765429][ T9520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.815748][ T9520] team0: Port device team_slave_0 added [ 1297.843345][ T9520] team0: Port device team_slave_1 added [ 1297.885014][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.892836][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.349515][ T9520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.361145][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.368429][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.397634][ T9520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.464892][ T9520] hsr_slave_0: entered promiscuous mode [ 1298.478408][ T9520] hsr_slave_1: entered promiscuous mode [ 1298.490406][ T9520] debugfs: 'hsr0' already exists in 'hsr' [ 1298.508799][ T9520] Cannot create hsr debugfs directory [ 1298.597408][ T9641] __nla_validate_parse: 6 callbacks suppressed [ 1298.597523][ T9641] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.11704'. [ 1298.805931][ T9665] syzkaller0: entered promiscuous mode [ 1298.813205][ T9665] syzkaller0: entered allmulticast mode [ 1298.828716][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11711'. [ 1298.982834][ T9520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1299.407206][ T9520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1299.457911][ T9520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1299.540386][ T9520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1299.575882][ T9712] syzkaller0: entered promiscuous mode [ 1299.583043][ T9712] syzkaller0: entered allmulticast mode [ 1299.675740][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.717126][ T9520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.751488][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.758737][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.778803][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.786127][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.854357][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11729'. [ 1299.877678][ T9520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1299.992872][ T9773] netlink: 'syz.8.11735': attribute type 10 has an invalid length. [ 1300.088370][ T9520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.474138][ T9520] veth0_vlan: entered promiscuous mode [ 1300.509078][ T9520] veth1_vlan: entered promiscuous mode [ 1300.598456][ T9520] veth0_macvtap: entered promiscuous mode [ 1300.633239][ T9520] veth1_macvtap: entered promiscuous mode [ 1300.693132][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.769676][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.815220][ T3182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.850136][ T3462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.876813][ T4236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.901025][ T4236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.394406][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11761'. [ 1301.959615][ T9911] netlink: 'syz.5.11766': attribute type 10 has an invalid length. [ 1302.063205][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11769'. [ 1302.209531][ T9935] netlink: 'syz.5.11773': attribute type 10 has an invalid length. [ 1302.243927][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1302.271303][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1302.295362][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1302.360368][ T9942] veth3: entered allmulticast mode [ 1302.373853][ T9942] team0: Port device veth3 added [ 1302.420599][ T9951] team0 (unregistering): Port device team_slave_0 removed [ 1302.442631][ T9951] team0 (unregistering): Port device team_slave_1 removed [ 1302.459826][ T9951] team0 (unregistering): Port device veth3 removed [ 1302.493121][ T9961] pim6reg1: entered allmulticast mode [ 1302.655754][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11782'. [ 1302.729329][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11785'. [ 1303.713949][ T4233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.811620][ T4233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.896062][ T4233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.986743][ T4233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.086144][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11810'. [ 1304.202673][ T4233] bridge_slave_1: left allmulticast mode [ 1304.220379][ T4233] bridge_slave_1: left promiscuous mode [ 1304.228080][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.260749][ T4233] bridge_slave_0: left allmulticast mode [ 1304.266557][ T4233] bridge_slave_0: left promiscuous mode [ 1304.274009][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.413017][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.423432][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.433653][ T4233] bond0 (unregistering): Released all slaves [ 1304.441188][T10085] netlink: 1 bytes leftover after parsing attributes in process `syz.8.11811'. [ 1304.456261][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11815'. [ 1304.516510][T10070] chnl_net:caif_netlink_parms(): no params data found [ 1304.566711][ T4233] tipc: Left network mode [ 1304.702087][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.723457][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.747652][T10070] bridge_slave_0: entered allmulticast mode [ 1304.760984][T10070] bridge_slave_0: entered promiscuous mode [ 1304.768154][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.775427][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.784086][T10070] bridge_slave_1: entered allmulticast mode [ 1304.791077][T10070] bridge_slave_1: entered promiscuous mode [ 1304.814020][T10070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.831760][T10070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.885003][T10070] team0: Port device team_slave_0 added [ 1304.893028][T10070] team0: Port device team_slave_1 added [ 1304.915009][T10128] netlink: 'syz.4.11821': attribute type 10 has an invalid length. [ 1304.937122][T10070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.961098][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.987584][T10070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.150540][T10070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.160122][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.211524][T10070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.241908][ T4233] hsr_slave_0: left promiscuous mode [ 1305.274719][ T28] audit: type=1400 audit(1775660888.607:1496): avc: denied { create } for pid=10143 comm="syz.8.11825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1305.276534][ T4233] hsr_slave_1: left promiscuous mode [ 1305.318001][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.351270][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.371775][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.383724][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.425391][ T4233] veth1_macvtap: left promiscuous mode [ 1305.437582][ T4233] veth0_macvtap: left promiscuous mode [ 1305.459222][ T4233] veth1_vlan: left promiscuous mode [ 1305.475510][ T4233] veth0_vlan: left promiscuous mode [ 1305.671241][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 1305.682130][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 1305.829314][T10070] hsr_slave_0: entered promiscuous mode [ 1305.858905][T10070] hsr_slave_1: entered promiscuous mode [ 1305.872274][T10070] debugfs: 'hsr0' already exists in 'hsr' [ 1305.885795][T10070] Cannot create hsr debugfs directory [ 1305.903498][T10176] pim6reg1: entered allmulticast mode [ 1306.743855][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11841'. [ 1306.860599][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11841'. [ 1307.051393][ T4233] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.145331][ T4233] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.256103][ T4233] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.336723][T10070] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1307.401429][T10070] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1307.461516][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11848'. [ 1307.495819][ T4233] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.513252][T10070] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1307.524954][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11848'. [ 1307.541240][T10070] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1307.549121][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11848'. [ 1307.689091][T10234] veth5: entered allmulticast mode [ 1307.984830][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11855'. [ 1308.005324][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.017198][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.029349][ T4233] bond0 (unregistering): Released all slaves [ 1308.048726][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11855'. [ 1308.093894][ T4233] tipc: Left network mode [ 1308.137208][T10070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.148368][T10282] netlink: 'syz.6.11857': attribute type 9 has an invalid length. [ 1308.170706][ T4233] hsr_slave_0: left promiscuous mode [ 1308.199319][ T4233] hsr_slave_1: left promiscuous mode [ 1308.211480][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.229085][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.262886][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.289584][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.326484][ T4233] veth1_macvtap: left promiscuous mode [ 1308.341926][ T4233] veth0_macvtap: left promiscuous mode [ 1308.357817][ T4233] veth1_vlan: left promiscuous mode [ 1308.370925][ T4233] veth0_vlan: left promiscuous mode [ 1308.608099][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 1308.636285][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 1308.737055][T10307] veth5: entered allmulticast mode [ 1308.769403][T10324] pim6reg1: entered allmulticast mode [ 1308.779892][T10070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.791970][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.799194][T13531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.832318][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.839496][T13531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.929277][T10070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1308.975888][T10070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.127913][T10070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.442566][T10070] veth0_vlan: entered promiscuous mode [ 1309.646014][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.653462][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.752015][T10420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.764343][T10420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.823799][T10070] veth1_vlan: entered promiscuous mode [ 1309.855460][ T4236] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.902341][ T4236] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.940838][ T4236] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.978820][ T4236] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.044947][T10070] veth0_macvtap: entered promiscuous mode [ 1310.069161][T10070] veth1_macvtap: entered promiscuous mode [ 1310.115596][T10070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.159688][T10070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.187456][ T3182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.206872][ T3182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.243945][T10483] __nla_validate_parse: 5 callbacks suppressed [ 1310.243968][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11905'. [ 1310.260555][ T3182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.288207][ T3182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.551151][T10513] pim6reg1: entered allmulticast mode [ 1310.617733][T10534] syzkaller0: entered promiscuous mode [ 1310.624492][T10534] syzkaller0: entered allmulticast mode [ 1310.662834][ T3178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.732421][T10549] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11920'. [ 1310.743775][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11920'. [ 1310.849069][ T3178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.962908][ T3178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.027966][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11929'. [ 1311.037479][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11929'. [ 1311.066330][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1311.084262][T10585] veth5: entered allmulticast mode [ 1311.114709][ T3178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.137812][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1311.280089][ T3178] bridge_slave_1: left allmulticast mode [ 1311.287632][ T3178] bridge_slave_1: left promiscuous mode [ 1311.293824][ T3178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.315658][ T3178] bridge_slave_0: left allmulticast mode [ 1311.321568][ T3178] bridge_slave_0: left promiscuous mode [ 1311.327408][ T3178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.453968][ T3178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.464246][ T3178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.473928][ T3178] bond0 (unregistering): Released all slaves [ 1311.533308][ T3178] hsr_slave_0: left promiscuous mode [ 1311.542860][ T3178] hsr_slave_1: left promiscuous mode [ 1311.549606][ T3178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.557448][ T3178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.566270][ T3178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.574055][ T3178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.586245][ T3178] veth1_vlan: left promiscuous mode [ 1311.595233][ T3178] veth0_vlan: left promiscuous mode [ 1311.727851][T10556] chnl_net:caif_netlink_parms(): no params data found [ 1311.744135][T10638] syzkaller0: entered promiscuous mode [ 1311.752289][T10638] syzkaller0: entered allmulticast mode [ 1311.771872][T10638] tipc: Enabling of bearer rejected, failed to enable media [ 1311.806080][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.813441][T10556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.820957][T10556] bridge_slave_0: entered allmulticast mode [ 1311.828649][T10556] bridge_slave_0: entered promiscuous mode [ 1311.836126][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.843518][T10556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.850866][T10556] bridge_slave_1: entered allmulticast mode [ 1311.858727][T10556] bridge_slave_1: entered promiscuous mode [ 1311.912923][T10556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.927151][T10556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.980707][T10556] team0: Port device team_slave_0 added [ 1312.010623][T10556] team0: Port device team_slave_1 added [ 1312.058714][T10556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.087925][T10556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.126901][T10556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.139052][T10556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.146426][T10556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.172872][T10556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.285258][T10687] syzkaller0: entered promiscuous mode [ 1312.291816][T10687] syzkaller0: entered allmulticast mode [ 1312.303611][T10556] hsr_slave_0: entered promiscuous mode [ 1312.319618][T10556] hsr_slave_1: entered promiscuous mode [ 1312.337395][T10556] debugfs: 'hsr0' already exists in 'hsr' [ 1312.349284][T10556] Cannot create hsr debugfs directory [ 1312.357029][T10687] tipc: Enabling of bearer rejected, failed to enable media [ 1312.544491][T10723] netlink: 'syz.5.11964': attribute type 10 has an invalid length. [ 1312.688448][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11969'. [ 1312.698328][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11969'. [ 1312.708352][T10743] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11969'. [ 1312.767921][T10556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1312.904217][T10556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1312.914139][T10556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1312.923699][T10556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1313.133125][T10556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.353078][T10779] veth3: entered allmulticast mode [ 1313.479087][T10556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.571518][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.578790][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.721238][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.728484][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.831896][T10797] pim6reg1: entered allmulticast mode [ 1314.673321][T10556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.861024][T10556] veth0_vlan: entered promiscuous mode [ 1314.886085][T10556] veth1_vlan: entered promiscuous mode [ 1314.926082][T10556] veth0_macvtap: entered promiscuous mode [ 1314.951105][T10556] veth1_macvtap: entered promiscuous mode [ 1314.976265][T10556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.003956][T10556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.048755][ T3182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.066374][ T3182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.087846][T10926] netlink: 'syz.5.12006': attribute type 10 has an invalid length. [ 1315.097597][ T3182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.116357][ T3182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.387152][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.394558][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.492151][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1315.502805][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1315.553562][ T3178] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.583070][ T3182] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.602558][ T3182] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.612188][ T3182] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.765664][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.815202][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.903763][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.951865][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.024152][T11046] __nla_validate_parse: 3 callbacks suppressed [ 1316.024175][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12033'. [ 1316.054582][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.062219][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.075345][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12033'. [ 1316.086115][T11050] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12033'. [ 1316.114803][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.200199][T11050] veth5: entered allmulticast mode [ 1316.212523][T11050] bond1: (slave veth5): Enslaving as an active interface with an up link [ 1316.232362][T11051] bond1 (unregistering): (slave veth5): Releasing backup interface [ 1316.253141][T11051] bond1 (unregistering): Released all slaves [ 1316.283835][ T3964] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.303311][ T3964] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.388152][ T3964] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.438920][ T3964] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.504557][ T3462] bridge_slave_1: left allmulticast mode [ 1316.510310][ T3462] bridge_slave_1: left promiscuous mode [ 1316.519213][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.532162][ T3462] bridge_slave_0: left allmulticast mode [ 1316.551857][ T3462] bridge_slave_0: left promiscuous mode [ 1316.557792][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.632115][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12045'. [ 1316.693105][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12045'. [ 1316.720455][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12045'. [ 1316.805250][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.816396][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.827802][ T3462] bond0 (unregistering): Released all slaves [ 1316.835796][ T3462] bond1 (unregistering): Released all slaves [ 1316.868988][T11118] veth5: entered allmulticast mode [ 1316.878342][T11118] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1316.891857][ T28] audit: type=1400 audit(1775660900.226:1497): avc: denied { create } for pid=11126 comm="syz.8.12049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1316.891943][T11122] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1316.934114][T11122] bond2 (unregistering): Released all slaves [ 1316.985954][ T3462] hsr_slave_0: left promiscuous mode [ 1317.002076][ T3462] hsr_slave_1: left promiscuous mode [ 1317.008459][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.028961][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.040879][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.049896][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.077229][ T3462] veth1_macvtap: left promiscuous mode [ 1317.094125][ T3462] veth0_macvtap: left promiscuous mode [ 1317.106883][ T3462] veth1_vlan: left promiscuous mode [ 1317.120186][ T3462] veth0_vlan: left promiscuous mode [ 1317.365329][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 1317.388494][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 1317.547622][T11174] netlink: 'syz.6.12059': attribute type 10 has an invalid length. [ 1317.707134][T11045] chnl_net:caif_netlink_parms(): no params data found [ 1317.839653][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.870484][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.893545][T11045] bridge_slave_0: entered allmulticast mode [ 1317.928492][T11045] bridge_slave_0: entered promiscuous mode [ 1317.950681][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.981706][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.004815][T11045] bridge_slave_1: entered allmulticast mode [ 1318.029483][T11045] bridge_slave_1: entered promiscuous mode [ 1318.091485][T11045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.115871][T11045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.197639][T11045] team0: Port device team_slave_0 added [ 1318.231064][T11045] team0: Port device team_slave_1 added [ 1318.307827][T11045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.325042][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.368227][T11045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.379535][T11242] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12071'. [ 1318.394419][T11045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.417195][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.481762][T11045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.543917][T11045] hsr_slave_0: entered promiscuous mode [ 1318.560374][T11045] hsr_slave_1: entered promiscuous mode [ 1318.592097][T11045] debugfs: 'hsr0' already exists in 'hsr' [ 1318.597913][T11045] Cannot create hsr debugfs directory [ 1318.662674][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12084'. [ 1318.714988][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12084'. [ 1318.775505][T11298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12084'. [ 1318.805833][T11290] bond2 (unregistering): Released all slaves [ 1318.843562][T11302] netlink: 'syz.8.12087': attribute type 33 has an invalid length. [ 1318.900342][T11298] veth7: entered allmulticast mode [ 1319.068847][ T28] audit: type=1400 audit(1775660902.406:1498): avc: denied { write } for pid=11325 comm="syz.6.12094" path="socket:[143834]" dev="sockfs" ino=143834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1319.376339][T11045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1319.416294][T11045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1319.442971][T11045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1319.472383][T11045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1319.597671][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.627320][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.654382][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.661550][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.695499][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.702742][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.893973][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.087096][T11045] veth0_vlan: entered promiscuous mode [ 1320.097034][T11045] veth1_vlan: entered promiscuous mode [ 1320.120480][T11045] veth0_macvtap: entered promiscuous mode [ 1320.143211][T11045] veth1_macvtap: entered promiscuous mode [ 1320.189487][T11045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.211309][T11045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.232172][ T3182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.259954][ T3182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.302579][ T3182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.340778][ T3182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.002478][T11527] veth3: entered allmulticast mode [ 1321.015036][T11527] team0: Port device veth3 added [ 1322.069248][T11533] team0 (unregistering): Port device team_slave_0 removed [ 1322.084542][T11533] team0 (unregistering): Port device team_slave_1 removed [ 1322.105906][T11533] team0 (unregistering): Port device veth3 removed [ 1322.396688][T11603] __nla_validate_parse: 8 callbacks suppressed [ 1322.396706][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12164'. [ 1322.413908][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12164'. [ 1322.432610][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12164'. [ 1322.463456][T11603] veth5: entered allmulticast mode [ 1322.816216][T11612] chnl_net:caif_netlink_parms(): no params data found [ 1322.884306][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.891523][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.900058][T11612] bridge_slave_0: entered allmulticast mode [ 1322.907112][T11612] bridge_slave_0: entered promiscuous mode [ 1322.915269][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.922516][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.929920][T11612] bridge_slave_1: entered allmulticast mode [ 1322.936830][T11612] bridge_slave_1: entered promiscuous mode [ 1322.958583][T11612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.969608][T11612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.006891][T11612] team0: Port device team_slave_0 added [ 1323.014484][T11612] team0: Port device team_slave_1 added [ 1323.046483][T11612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.055279][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.081781][T11612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.093261][T11612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.100341][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.126996][T11612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.157159][T11612] hsr_slave_0: entered promiscuous mode [ 1323.173191][T11612] hsr_slave_1: entered promiscuous mode [ 1323.187381][T11612] debugfs: 'hsr0' already exists in 'hsr' [ 1323.197413][T11612] Cannot create hsr debugfs directory [ 1323.600269][T11612] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1323.617390][T11612] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1323.628943][T11612] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1323.643213][T11612] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1323.672956][T11755] syzkaller0: entered promiscuous mode [ 1323.678590][T11755] syzkaller0: entered allmulticast mode [ 1323.722811][T11612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.735810][T11612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.748969][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.756141][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.771925][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.779069][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.870960][T11612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.035754][T11612] veth0_vlan: entered promiscuous mode [ 1324.044619][T11612] veth1_vlan: entered promiscuous mode [ 1324.067600][T11612] veth0_macvtap: entered promiscuous mode [ 1324.076507][T11612] veth1_macvtap: entered promiscuous mode [ 1324.090282][T11612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.103168][T11612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.116179][ T4236] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.130131][ T4236] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.146604][ T4236] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.156339][ T4236] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.391250][T11844] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12198'. [ 1324.433471][T11849] syzkaller0: entered promiscuous mode [ 1324.450105][T11849] syzkaller0: entered allmulticast mode [ 1324.972354][T11934] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12218'. [ 1325.118047][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12226'. [ 1325.176170][T11962] syzkaller0: entered promiscuous mode [ 1325.188900][T11962] syzkaller0: entered allmulticast mode [ 1325.446901][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12239'. [ 1325.635908][T12031] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12246'. [ 1325.777650][T12046] nftables ruleset with unbound chain [ 1325.802010][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12254'. [ 1325.850340][T12057] netlink: 'syz.7.12255': attribute type 10 has an invalid length. [ 1325.943296][T12071] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12259'. [ 1326.391558][T12146] tmpfs: Unknown parameter 'Í¢úŠx5½—IKÈ5'OjÈíúÔ]VÏÌ…$‚WÈÑä3RM«±ž' [ 1326.391594][ T28] audit: type=1400 audit(1775660909.725:1499): avc: denied { remount } for pid=12145 comm="syz.3.12272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1327.662590][T12347] __nla_validate_parse: 1 callbacks suppressed [ 1327.662611][T12347] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12320'. [ 1327.703238][T12347] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1327.844947][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12329'. [ 1327.877644][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12329'. [ 1327.891493][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12329'. [ 1327.917438][T12375] veth7: entered allmulticast mode [ 1327.929285][T12384] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12333'. [ 1327.940561][T12375] bond1: (slave veth7): Enslaving as an active interface with an up link [ 1327.974470][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12335'. [ 1328.013550][T12388] bond1 (unregistering): (slave veth7): Releasing backup interface [ 1328.039257][T12388] bond1 (unregistering): Released all slaves [ 1328.319281][T12450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12347'. [ 1328.333058][T12452] netlink: 'syz.3.12351': attribute type 10 has an invalid length. [ 1328.585409][T12476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12358'. [ 1328.634309][ T3178] bridge_slave_1: left allmulticast mode [ 1328.640367][ T3178] bridge_slave_1: left promiscuous mode [ 1328.647055][ T3178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.656266][ T3178] bridge_slave_0: left allmulticast mode [ 1328.657196][T12479] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12359'. [ 1328.662068][ T3178] bridge_slave_0: left promiscuous mode [ 1328.662409][ T3178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.785465][ T3178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.794954][ T3178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.804431][ T3178] bond0 (unregistering): Released all slaves [ 1328.847240][ T3178] tipc: Left network mode [ 1328.865456][ T3178] hsr_slave_0: left promiscuous mode [ 1328.871642][ T3178] hsr_slave_1: left promiscuous mode [ 1328.879039][ T3178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.889002][ T3178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.934624][ T3178] team0 (unregistering): Port device team_slave_1 removed [ 1328.946640][ T3178] team0 (unregistering): Port device team_slave_0 removed [ 1329.085095][T12465] chnl_net:caif_netlink_parms(): no params data found [ 1329.178997][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.186967][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.194451][T12465] bridge_slave_0: entered allmulticast mode [ 1329.201470][T12465] bridge_slave_0: entered promiscuous mode [ 1329.209811][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.217782][T12465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.225260][T12465] bridge_slave_1: entered allmulticast mode [ 1329.234460][T12465] bridge_slave_1: entered promiscuous mode [ 1329.258885][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.275788][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.308563][T12465] team0: Port device team_slave_0 added [ 1329.331673][T12465] team0: Port device team_slave_1 added [ 1329.373870][T12465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.395228][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.440947][T12465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.470581][T12465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.482612][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.522552][T12465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.611223][T12465] hsr_slave_0: entered promiscuous mode [ 1329.617944][T12465] hsr_slave_1: entered promiscuous mode [ 1329.624258][T12465] debugfs: 'hsr0' already exists in 'hsr' [ 1329.630140][T12465] Cannot create hsr debugfs directory [ 1329.643836][T12546] netlink: 'syz.7.12370': attribute type 29 has an invalid length. [ 1329.668357][T12546] netlink: 'syz.7.12370': attribute type 29 has an invalid length. [ 1329.761552][T12518] chnl_net:caif_netlink_parms(): no params data found [ 1329.844682][T12518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.851986][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.862959][T12518] bridge_slave_0: entered allmulticast mode [ 1329.876602][T12518] bridge_slave_0: entered promiscuous mode [ 1329.889603][T12518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.898624][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.906499][T12518] bridge_slave_1: entered allmulticast mode [ 1329.913526][T12518] bridge_slave_1: entered promiscuous mode [ 1329.939594][T12518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.950641][T12518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.979855][T12518] team0: Port device team_slave_0 added [ 1329.987030][T12518] team0: Port device team_slave_1 added [ 1330.007791][T12518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.016561][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.043085][T12518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.080821][T12518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.088034][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.114257][T12518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.152669][T12518] hsr_slave_0: entered promiscuous mode [ 1330.159339][T12518] hsr_slave_1: entered promiscuous mode [ 1330.165810][T12518] debugfs: 'hsr0' already exists in 'hsr' [ 1330.171601][T12518] Cannot create hsr debugfs directory [ 1330.194378][T12465] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1330.238672][T12465] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1330.261193][T12465] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1330.274171][T12465] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1330.367281][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12376'. [ 1330.427109][T12465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.468251][T12465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.481727][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.489262][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.527631][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.534896][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.657446][T12518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1330.704694][T12518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1330.741863][T12518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1330.767605][T12518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1330.798745][T12465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.922561][T12518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.961724][T12518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.991470][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.998635][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.053192][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.060425][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.164890][T12465] veth0_vlan: entered promiscuous mode [ 1331.189913][T12465] veth1_vlan: entered promiscuous mode [ 1331.218495][T12465] veth0_macvtap: entered promiscuous mode [ 1331.241140][T12465] veth1_macvtap: entered promiscuous mode [ 1331.258423][T12518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.266914][T12722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1331.294333][T12465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.309068][T12465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.329087][ T4236] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.350507][ T4236] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.370208][ T4236] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.389417][ T4236] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.536531][T12750] netlink: 'syz.2.12400': attribute type 10 has an invalid length. [ 1331.642726][ T28] audit: type=1400 audit(1775660914.974:1500): avc: denied { name_bind } for pid=12763 comm="syz.7.12403" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1331.686941][T12518] veth0_vlan: entered promiscuous mode [ 1331.696398][T12518] veth1_vlan: entered promiscuous mode [ 1331.719065][T12518] veth0_macvtap: entered promiscuous mode [ 1331.727793][T12518] veth1_macvtap: entered promiscuous mode [ 1331.736714][ T28] audit: type=1400 audit(1775660915.004:1501): avc: denied { name_connect } for pid=12763 comm="syz.7.12403" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1331.809459][T12518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.863523][T12518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.918278][ T3462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.933787][ T3462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.958009][ T3462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.973595][ T3462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.112608][ T28] audit: type=1400 audit(1775660915.444:1502): avc: denied { ioctl } for pid=12804 comm="syz.9.12414" path="socket:[148108]" dev="sockfs" ino=148108 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1332.848221][T12910] __nla_validate_parse: 9 callbacks suppressed [ 1332.848243][T12910] netlink: 32 bytes leftover after parsing attributes in process `syz.9.12442'. [ 1332.893558][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12445'. [ 1333.249856][T12971] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12455'. [ 1333.270420][T12971] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1333.328198][T12978] netlink: 'syz.0.12456': attribute type 10 has an invalid length. [ 1333.746116][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12457'. [ 1333.828481][T13051] netlink: 830 bytes leftover after parsing attributes in process `syz.6.12461'. [ 1334.194970][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12479'. [ 1334.283007][ T28] audit: type=1400 audit(1775660917.614:1503): avc: denied { remount } for pid=13125 comm="syz.9.12482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1334.374461][ T28] audit: type=1400 audit(1775660917.704:1504): avc: denied { unmount } for pid=12465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1334.476544][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12492'. [ 1334.505207][T13159] netlink: 'syz.0.12491': attribute type 29 has an invalid length. [ 1334.524370][T13153] netlink: 'syz.0.12491': attribute type 29 has an invalid length. [ 1334.546670][T13159] netlink: 'syz.0.12491': attribute type 29 has an invalid length. [ 1334.605783][T13172] netlink: 'syz.7.12496': attribute type 10 has an invalid length. [ 1334.624795][T13172] hsr0: entered promiscuous mode [ 1334.655183][T13172] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1334.698536][T13172] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1334.744941][T13172] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1334.820569][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12503'. [ 1335.746127][T13252] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12508'. [ 1335.958811][T13266] netlink: 'syz.0.12514': attribute type 1 has an invalid length. [ 1335.996401][T13266] netlink: 'syz.0.12514': attribute type 2 has an invalid length. [ 1336.834763][T13345] netlink: 'syz.7.12537': attribute type 10 has an invalid length. [ 1337.403723][T13378] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12546'. [ 1337.606276][T13394] netlink: 'syz.0.12552': attribute type 3 has an invalid length. [ 1338.498582][T13430] netlink: 'syz.0.12561': attribute type 10 has an invalid length. [ 1338.736166][T13447] __nla_validate_parse: 1 callbacks suppressed [ 1338.736184][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12567'. [ 1338.926685][T13453] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12570'. [ 1339.242284][T13470] netlink: 'syz.2.12574': attribute type 10 has an invalid length. [ 1339.593655][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12579'. [ 1342.242429][T13598] netlink: 'syz.2.12606': attribute type 10 has an invalid length. [ 1343.176938][T13717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13717 comm=syz.2.12642 [ 1343.245811][T13717] netlink: 'syz.2.12642': attribute type 11 has an invalid length. [ 1343.388522][T13746] netlink: 'syz.2.12649': attribute type 10 has an invalid length. [ 1343.433283][T13746] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1343.862459][T13782] netlink: 84 bytes leftover after parsing attributes in process `syz.6.12662'. [ 1343.888747][T13782] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12662'. [ 1344.697408][T13828] netlink: 'syz.6.12680': attribute type 10 has an invalid length. [ 1345.059715][T13814] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12673'. [ 1345.099983][T13814] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12673'. [ 1345.655143][T13884] netlink: 84 bytes leftover after parsing attributes in process `syz.6.12702'. [ 1345.695189][T13884] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12702'. [ 1346.217901][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12716'. [ 1346.246474][T13915] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12716'. [ 1346.839510][T13991] netlink: 'syz.0.12745': attribute type 10 has an invalid length. [ 1349.969027][ T3182] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.997421][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12763'. [ 1350.015267][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12763'. [ 1350.038132][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12765'. [ 1350.063780][T14060] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12765'. [ 1350.085805][ T3182] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.165182][ T3182] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.275094][ T3182] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.461789][ T28] audit: type=1400 audit(1775660933.792:1505): avc: denied { ioctl } for pid=14108 comm="syz.0.12779" path="socket:[151923]" dev="sockfs" ino=151923 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1350.502793][T14018] chnl_net:caif_netlink_parms(): no params data found [ 1350.528951][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12780'. [ 1350.567251][T14114] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12780'. [ 1350.663544][T14018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.681042][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.696048][T14018] bridge_slave_0: entered allmulticast mode [ 1350.711329][T14018] bridge_slave_0: entered promiscuous mode [ 1350.720675][T14018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.728181][T14018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.735725][T14018] bridge_slave_1: entered allmulticast mode [ 1350.743097][T14018] bridge_slave_1: entered promiscuous mode [ 1350.797507][T14018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.840019][ T3182] bridge_slave_1: left allmulticast mode [ 1350.851294][ T3182] bridge_slave_1: left promiscuous mode [ 1350.866854][ T3182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.878057][ T3182] bridge_slave_0: left allmulticast mode [ 1350.895522][ T3182] bridge_slave_0: left promiscuous mode [ 1350.922619][ T3182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.157660][ T3182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.169878][ T3182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.180291][ T3182] bond0 (unregistering): Released all slaves [ 1351.189290][T14018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.217003][T14018] team0: Port device team_slave_0 added [ 1351.233920][T14018] team0: Port device team_slave_1 added [ 1351.276550][ T3182] hsr_slave_0: left promiscuous mode [ 1351.286638][ T3182] hsr_slave_1: left promiscuous mode [ 1351.307648][ T3182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.317309][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12794'. [ 1351.326725][ T3182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.334412][T14163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12794'. [ 1351.344834][ T3182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.363458][ T3182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.390490][ T3182] veth1_macvtap: left promiscuous mode [ 1351.401649][ T3182] veth0_macvtap: left promiscuous mode [ 1351.422821][ T3182] veth1_vlan: left promiscuous mode [ 1351.431707][ T3182] veth0_vlan: left promiscuous mode [ 1351.487238][T14175] netlink: 'syz.7.12801': attribute type 10 has an invalid length. [ 1351.989389][ T3182] team0 (unregistering): Port device team_slave_1 removed [ 1352.006105][ T3182] team0 (unregistering): Port device team_slave_0 removed [ 1352.052293][T14018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.059627][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.089263][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.231094][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.250619][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.298149][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.397964][T14018] hsr_slave_0: entered promiscuous mode [ 1352.407604][T14018] hsr_slave_1: entered promiscuous mode [ 1352.413941][T14018] debugfs: 'hsr0' already exists in 'hsr' [ 1352.425864][T14207] netlink: 'syz.0.12807': attribute type 10 has an invalid length. [ 1352.435359][T14018] Cannot create hsr debugfs directory [ 1352.746229][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12816'. [ 1352.775147][T14239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12816'. [ 1352.930994][T14256] netlink: 'syz.2.12823': attribute type 31 has an invalid length. [ 1353.061814][T14018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.103596][T14018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1353.136113][T14018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1353.174335][T14018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1353.265830][T14291] netlink: 'syz.0.12832': attribute type 10 has an invalid length. [ 1353.373982][T14297] netlink: 'syz.7.12834': attribute type 29 has an invalid length. [ 1353.479633][T14018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.544908][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.572589][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.579889][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.635705][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.642963][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.785673][T14330] netlink: 'syz.7.12845': attribute type 10 has an invalid length. [ 1353.885257][T14018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.348058][T14380] netlink: 'syz.7.12856': attribute type 10 has an invalid length. [ 1354.461101][T14018] veth0_vlan: entered promiscuous mode [ 1354.517243][T14018] veth1_vlan: entered promiscuous mode [ 1354.581501][T14018] veth0_macvtap: entered promiscuous mode [ 1354.638146][T14018] veth1_macvtap: entered promiscuous mode [ 1354.709483][T14018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.781561][T14018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.835313][ T3964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.887005][ T3964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.961999][T14418] netlink: 'syz.2.12867': attribute type 29 has an invalid length. [ 1355.002967][ T3964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.041337][ T3964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.323354][T14463] __nla_validate_parse: 10 callbacks suppressed [ 1355.323372][T14463] netlink: 84 bytes leftover after parsing attributes in process `syz.6.12880'. [ 1355.407104][T14463] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12880'. [ 1355.543520][T14485] netlink: 300 bytes leftover after parsing attributes in process `syz.6.12887'. [ 1355.587669][T14489] netlink: 'syz.7.12888': attribute type 31 has an invalid length. [ 1355.913231][T14518] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12897'. [ 1356.049813][T14531] netlink: 'syz.6.12902': attribute type 10 has an invalid length. [ 1356.091029][T14535] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14535 comm=syz.0.12904 [ 1356.130268][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12905'. [ 1356.177963][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12905'. [ 1356.883104][T14578] netlink: 300 bytes leftover after parsing attributes in process `syz.6.12912'. [ 1356.961799][ T28] audit: type=1400 audit(1775660940.291:1506): avc: denied { read } for pid=14584 comm="syz.4.12915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1357.126273][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1357.149191][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1357.289696][T14623] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14623 comm=syz.6.12928 [ 1357.367524][T14631] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.12930'. [ 1358.032954][T14714] netlink: 'syz.7.12947': attribute type 29 has an invalid length. [ 1358.382683][T14749] netlink: 'syz.0.12949': attribute type 10 has an invalid length. [ 1358.603175][T14771] netlink: 'syz.6.12960': attribute type 1 has an invalid length. [ 1358.698932][T14781] netlink: 'syz.2.12964': attribute type 10 has an invalid length. [ 1358.712488][T14783] netlink: 'syz.6.12965': attribute type 10 has an invalid length. [ 1358.971303][T14813] netlink: 'syz.7.12979': attribute type 10 has an invalid length. [ 1359.528734][T14835] netlink: 'syz.6.12990': attribute type 10 has an invalid length. [ 1359.556050][T14838] netlink: 'syz.4.12991': attribute type 5 has an invalid length. [ 1359.758406][ T28] audit: type=1400 audit(1775660943.091:1507): avc: denied { unmount } for pid=12518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1359.856545][ T28] audit: type=1400 audit(1775660943.181:1508): avc: denied { unmount } for pid=12518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1359.881697][ T28] audit: type=1400 audit(1775660943.211:1509): avc: denied { unmount } for pid=12518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1360.347241][T14878] netlink: 'syz.4.13011': attribute type 10 has an invalid length. [ 1360.550847][T14891] __nla_validate_parse: 11 callbacks suppressed [ 1360.550867][T14891] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13017'. [ 1360.607481][T14891] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13017'. [ 1360.628093][T14896] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13019'. [ 1360.730002][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13022'. [ 1360.759429][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13022'. [ 1361.091437][T14923] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13032'. [ 1361.265533][T14935] netlink: 14 bytes leftover after parsing attributes in process `syz.6.13037'. [ 1361.303682][T14947] netlink: 'syz.7.13042': attribute type 10 has an invalid length. [ 1361.312696][T14935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1361.329262][T14935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.351012][T14935] bond0 (unregistering): Released all slaves [ 1361.459684][T14962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13047'. [ 1361.571746][T14974] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13055'. [ 1362.083361][T15012] netlink: 128 bytes leftover after parsing attributes in process `syz.7.13070'. [ 1362.185454][T15023] netdevsim netdevsim7 : renamed from netdevsim1 (while UP) [ 1362.642115][ T28] audit: type=1400 audit(1775660945.971:1510): avc: denied { read } for pid=15070 comm="syz.2.13099" lport=13532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1363.184957][T15121] validate_nla: 8 callbacks suppressed [ 1363.184975][T15121] netlink: 'syz.4.13120': attribute type 10 has an invalid length. [ 1363.227349][T15125] netlink: 'syz.4.13122': attribute type 10 has an invalid length. [ 1363.353813][T15137] delete_channel: no stack [ 1365.405627][T15151] netlink: 'syz.2.13132': attribute type 10 has an invalid length. [ 1365.455166][T15155] netlink: 'syz.4.13135': attribute type 1 has an invalid length. [ 1365.473465][T15155] netlink: 'syz.4.13135': attribute type 2 has an invalid length. [ 1365.700199][T15168] __nla_validate_parse: 10 callbacks suppressed [ 1365.700236][T15168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13140'. [ 1366.225990][T15220] netlink: 'syz.7.13153': attribute type 10 has an invalid length. [ 1366.245366][T15228] netlink: 'syz.6.13154': attribute type 10 has an invalid length. [ 1366.247188][T15220] netlink: 55 bytes leftover after parsing attributes in process `syz.7.13153'. [ 1366.633914][T15283] netlink: 'syz.6.13166': attribute type 10 has an invalid length. [ 1366.903977][ T28] audit: type=1400 audit(1775660950.230:1511): avc: denied { unmount } for pid=12518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1367.179461][T15357] netlink: 'syz.6.13178': attribute type 29 has an invalid length. [ 1367.258013][T15363] netlink: 'syz.4.13180': attribute type 10 has an invalid length. [ 1367.269424][T15363] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13180'. [ 1367.279357][T15363] hsr0: entered promiscuous mode [ 1367.285606][T15363] bridge0: port 3(hsr0) entered blocking state [ 1367.292968][T15363] bridge0: port 3(hsr0) entered disabled state [ 1367.301548][T15363] hsr0: entered allmulticast mode [ 1367.330179][T15363] hsr_slave_0: entered allmulticast mode [ 1367.340870][T15363] hsr_slave_1: entered allmulticast mode [ 1367.376278][T15363] bridge0: port 3(hsr0) entered blocking state [ 1367.383132][T15363] bridge0: port 3(hsr0) entered forwarding state [ 1367.417835][T15380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15380 comm=syz.7.13186 [ 1367.437041][T15375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1367.650150][T15403] netlink: 300 bytes leftover after parsing attributes in process `syz.7.13199'. [ 1367.744252][T15409] delete_channel: no stack [ 1367.758157][T15409] delete_channel: no stack [ 1370.124768][T15506] validate_nla: 1 callbacks suppressed [ 1370.124787][T15506] netlink: 'syz.6.13232': attribute type 10 has an invalid length. [ 1370.143236][T15506] team0: Device wg1 is of different type [ 1370.321894][T15518] netlink: 'syz.7.13237': attribute type 10 has an invalid length. [ 1370.338872][T15518] netlink: 2 bytes leftover after parsing attributes in process `syz.7.13237'. [ 1370.364278][T15518] bridge0: port 3(hsr0) entered blocking state [ 1370.380071][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1370.389583][T15518] bridge0: port 3(hsr0) entered disabled state [ 1370.395822][T15518] hsr0: entered allmulticast mode [ 1370.404457][T15518] hsr_slave_0: entered allmulticast mode [ 1370.408130][T15526] netlink: 'syz.6.13241': attribute type 1 has an invalid length. [ 1370.418683][T15518] hsr_slave_1: entered allmulticast mode [ 1370.425645][T15526] netlink: 'syz.6.13241': attribute type 2 has an invalid length. [ 1370.429105][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1370.460742][T15518] bridge0: port 3(hsr0) entered blocking state [ 1370.467260][T15518] bridge0: port 3(hsr0) entered forwarding state [ 1370.529412][T15518] syz.7.13237 (15518) used greatest stack depth: 8904 bytes left [ 1370.602769][T15540] netlink: 'syz.4.13247': attribute type 29 has an invalid length. [ 1370.666939][T15550] bridge_slave_0 (unregistering): left allmulticast mode [ 1370.674549][T15550] bridge_slave_0 (unregistering): left promiscuous mode [ 1370.682380][T15550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.728160][ T28] audit: type=1400 audit(1775660954.050:1512): avc: denied { write } for pid=15541 comm="syz.6.13248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1370.839734][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13257'. [ 1370.989152][T15591] netlink: 'syz.0.13263': attribute type 29 has an invalid length. [ 1371.194056][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13279'. [ 1371.204316][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13278'. [ 1371.205293][T15627] netlink: 'syz.2.13279': attribute type 1 has an invalid length. [ 1371.222004][T15627] netlink: 316 bytes leftover after parsing attributes in process `syz.2.13279'. [ 1371.231733][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13278'. [ 1371.577683][ T28] audit: type=1400 audit(1775660954.900:1513): avc: denied { read } for pid=15661 comm="syz.0.13293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1371.820767][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13306'. [ 1371.842556][T15690] netlink: 'syz.7.13307': attribute type 10 has an invalid length. [ 1371.881477][T15690] team0: Port device vlan0 added [ 1371.958241][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13313'. [ 1371.980902][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1371.998916][T15703] netlink: 348 bytes leftover after parsing attributes in process `syz.6.13313'. [ 1372.117211][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13322'. [ 1372.319352][T15748] netlink: 'syz.2.13332': attribute type 12 has an invalid length. [ 1376.500803][ T28] audit: type=1400 audit(1775660959.829:1514): avc: denied { setopt } for pid=15844 comm="syz.4.13376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1376.525884][T15850] netlink: 'syz.4.13376': attribute type 10 has an invalid length. [ 1376.931540][ T28] audit: type=1400 audit(1775660960.259:1515): avc: denied { nlmsg_write } for pid=15853 comm="syz.7.13378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1377.070371][T15874] __nla_validate_parse: 6 callbacks suppressed [ 1377.070462][T15874] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13387'. [ 1377.150284][T15884] netlink: 'syz.6.13392': attribute type 1 has an invalid length. [ 1377.402955][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13398'. [ 1377.962232][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13423'. [ 1378.205248][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13426'. [ 1378.228907][T15960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13426'. [ 1378.320505][T15973] netlink: 'syz.7.13431': attribute type 29 has an invalid length. [ 1378.483963][ T28] audit: type=1400 audit(1775660961.809:1516): avc: denied { setopt } for pid=15987 comm="syz.4.13438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1379.206949][ T28] audit: type=1400 audit(1775660962.529:1517): avc: denied { connect } for pid=16035 comm="syz.2.13457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1379.735668][T16054] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13465'. [ 1379.949402][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13476'. [ 1379.958640][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13476'. [ 1380.020989][T16083] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13477'. [ 1380.245394][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13490'. [ 1380.891780][T16141] netlink: 'syz.6.13504': attribute type 29 has an invalid length. [ 1381.043318][T16164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.071814][T16164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.609254][T16175] netlink: 'syz.4.13520': attribute type 29 has an invalid length. [ 1381.882118][T16198] netlink: 'syz.7.13531': attribute type 29 has an invalid length. [ 1382.046970][T16226] netlink: 'syz.2.13545': attribute type 29 has an invalid length. [ 1382.179965][T16243] __nla_validate_parse: 7 callbacks suppressed [ 1382.180022][T16243] netlink: 300 bytes leftover after parsing attributes in process `syz.2.13553'. [ 1382.282065][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13558'. [ 1382.347005][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13561'. [ 1382.582958][T16270] netlink: 160 bytes leftover after parsing attributes in process `syz.2.13566'. [ 1382.632988][T16274] netlink: 'syz.2.13569': attribute type 29 has an invalid length. [ 1382.633119][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13568'. [ 1382.718050][T16284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.728775][T16284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.776971][T16290] netlink: 300 bytes leftover after parsing attributes in process `syz.4.13576'. [ 1382.805252][T16292] netlink: 400 bytes leftover after parsing attributes in process `syz.4.13577'. [ 1382.858479][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13581'. [ 1382.912140][T16308] netlink: 'syz.4.13583': attribute type 29 has an invalid length. [ 1382.972288][T16317] netlink: 300 bytes leftover after parsing attributes in process `syz.7.13588'. [ 1383.026527][T16324] netlink: 400 bytes leftover after parsing attributes in process `syz.4.13590'. [ 1383.915539][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.948170][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.071155][T16349] netlink: 'syz.0.13601': attribute type 29 has an invalid length. [ 1384.263267][T16364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.315551][T16364] bridge_slave_0 (unregistering): left allmulticast mode [ 1384.337802][T16364] bridge_slave_0 (unregistering): left promiscuous mode [ 1384.345389][T16364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.392315][T16378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.409833][T16378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.440400][T16378] 9p: Bad value for 'wfdno' [ 1386.504349][T16498] netlink: 'syz.4.13659': attribute type 29 has an invalid length. [ 1387.701067][T16511] __nla_validate_parse: 24 callbacks suppressed [ 1387.701085][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13665'. [ 1387.749033][T16511] netlink: 356 bytes leftover after parsing attributes in process `syz.7.13665'. [ 1387.773033][ T28] audit: type=1400 audit(1775660971.088:1518): avc: denied { connect } for pid=16519 comm="syz.0.13668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1387.815649][ T28] audit: type=1400 audit(1775660971.118:1519): avc: denied { write } for pid=16519 comm="syz.0.13668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1388.053558][T16537] netlink: 'syz.7.13674': attribute type 29 has an invalid length. [ 1388.691660][T16572] netlink: 'syz.2.13691': attribute type 29 has an invalid length. [ 1388.741674][T16574] netlink: 160 bytes leftover after parsing attributes in process `syz.6.13690'. [ 1388.992716][T16614] bridge_slave_0 (unregistering): left allmulticast mode [ 1389.001231][T16614] bridge_slave_0 (unregistering): left promiscuous mode [ 1389.008472][T16614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.104390][T16623] netlink: 'syz.4.13712': attribute type 29 has an invalid length. [ 1389.664256][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13721'. [ 1389.743674][T16655] netlink: 'syz.2.13726': attribute type 29 has an invalid length. [ 1389.862774][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13732'. [ 1389.899940][T16663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1389.933428][T16663] veth3: entered promiscuous mode [ 1389.943255][T16663] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1390.026646][T16687] ip6tnl1: entered promiscuous mode [ 1390.069449][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13745'. [ 1390.089033][T16694] netlink: 356 bytes leftover after parsing attributes in process `syz.6.13745'. [ 1390.811671][T16728] netlink: 160 bytes leftover after parsing attributes in process `syz.4.13760'. [ 1391.015207][T16741] syzkaller0: entered promiscuous mode [ 1391.021036][T16741] syzkaller0: entered allmulticast mode [ 1391.269057][T16754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.288971][ T3964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.306841][T16754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.328206][ T3964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.346331][ T3964] bond0 (unregistering): Released all slaves [ 1391.366397][ T3964] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1391.382666][ T3964] bond1 (unregistering): Released all slaves [ 1391.456900][T16765] loop8: detected capacity change from 0 to 8 [ 1391.570732][ T3964] tipc: Left network mode [ 1391.606236][ T3964] hsr_slave_0: left promiscuous mode [ 1391.614909][ T3964] hsr_slave_1: left promiscuous mode [ 1391.730845][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.738512][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.821576][ T28] audit: type=1326 audit(1775660975.107:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.4.13782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4377c819 code=0x7ffc0000 [ 1391.868975][ T28] audit: type=1326 audit(1775660975.107:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.4.13782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fde4377c819 code=0x7ffc0000 [ 1391.893345][ T28] audit: type=1326 audit(1775660975.107:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.4.13782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4377c819 code=0x7ffc0000 [ 1391.917610][ T28] audit: type=1326 audit(1775660975.107:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.4.13782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4377c819 code=0x7ffc0000 [ 1391.942833][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 1391.954232][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 1392.178309][T16767] chnl_net:caif_netlink_parms(): no params data found [ 1392.236071][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.243543][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.251462][T16767] bridge_slave_0: entered allmulticast mode [ 1392.258447][T16767] bridge_slave_0: entered promiscuous mode [ 1392.265324][T16821] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13795'. [ 1392.281756][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.289202][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.296584][T16767] bridge_slave_1: entered allmulticast mode [ 1392.303754][T16767] bridge_slave_1: entered promiscuous mode [ 1392.324006][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.342447][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.364484][T16767] team0: Port device team_slave_0 added [ 1392.371717][T16767] team0: Port device team_slave_1 added [ 1392.389293][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.396675][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.422943][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.434680][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.441866][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.468474][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.502657][T16767] hsr_slave_0: entered promiscuous mode [ 1392.509478][T16767] hsr_slave_1: entered promiscuous mode [ 1392.516249][T16767] debugfs: 'hsr0' already exists in 'hsr' [ 1392.523159][T16767] Cannot create hsr debugfs directory [ 1392.534390][ T28] audit: type=1400 audit(1775660975.857:1524): avc: denied { write } for pid=16828 comm="syz.0.13799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1392.599631][ T3964] bridge_slave_1: left allmulticast mode [ 1392.608139][ T3964] bridge_slave_1: left promiscuous mode [ 1392.614091][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.669664][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13802'. [ 1392.702370][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.712585][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.732303][ T3964] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1392.741124][ T3964] bond1 (unregistering): Released all slaves [ 1392.794022][ T3964] hsr_slave_0: left promiscuous mode [ 1392.801007][ T3964] hsr_slave_1: left promiscuous mode [ 1392.807042][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.846943][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 1392.864248][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 1392.903010][T16847] __nla_validate_parse: 1 callbacks suppressed [ 1392.903028][T16847] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13805'. [ 1392.939604][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.946882][T16767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.954437][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.961589][T16767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.000918][ T28] audit: type=1326 audit(1775660976.317:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.035268][ T3961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.048132][ T28] audit: type=1326 audit(1775660976.327:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.074412][ T3961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.085160][ T28] audit: type=1326 audit(1775660976.327:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.117669][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.134962][ T28] audit: type=1326 audit(1775660976.317:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.160363][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.170957][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.178147][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.201768][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.208924][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.217156][ T28] audit: type=1326 audit(1775660976.357:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.286925][ T28] audit: type=1326 audit(1775660976.357:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.323438][ T28] audit: type=1326 audit(1775660976.357:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.360197][ T28] audit: type=1326 audit(1775660976.357:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.395732][ T28] audit: type=1326 audit(1775660976.357:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16861 comm="syz.7.13809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1393.417817][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.500409][T16900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.512174][T16900] bridge_slave_0 (unregistering): left allmulticast mode [ 1393.519410][T16900] bridge_slave_0 (unregistering): left promiscuous mode [ 1393.528224][T16900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.640889][T16767] veth0_vlan: entered promiscuous mode [ 1393.649246][T16767] veth1_vlan: entered promiscuous mode [ 1393.685321][T16767] veth0_macvtap: entered promiscuous mode [ 1393.696197][T16767] veth1_macvtap: entered promiscuous mode [ 1393.715265][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.731930][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.934303][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.947375][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.483478][T17019] syzkaller0: entered promiscuous mode [ 1394.499930][T17019] syzkaller0: entered allmulticast mode [ 1394.822018][T17077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=17077 comm=syz.2.13840 [ 1394.944357][T17087] syzkaller0: entered promiscuous mode [ 1394.950369][T17087] syzkaller0: entered allmulticast mode [ 1395.127543][ T28] audit: type=1400 audit(1775660978.447:1534): avc: denied { getopt } for pid=17102 comm="syz.6.13851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1395.259333][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.271806][T17117] bridge_slave_0 (unregistering): left allmulticast mode [ 1395.279070][T17117] bridge_slave_0 (unregistering): left promiscuous mode [ 1395.287317][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.257920][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13910'. [ 1396.916938][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13921'. [ 1397.113097][T17284] batadv_slave_1: entered promiscuous mode [ 1397.132817][T17282] batadv_slave_1: left promiscuous mode [ 1398.184244][T17329] cgroup: fork rejected by pids controller in /syz2 [ 1399.434692][T17574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.445015][T17574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.638839][T17587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=17587 comm=syz.2.13968 [ 1400.002291][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13974'. [ 1400.011744][T17697] netlink: 'syz.2.13973': attribute type 10 has an invalid length. [ 1400.022173][T17697] team0: Failed to send options change via netlink (err -105) [ 1400.029878][T17697] team0: Port device dummy0 added [ 1400.258319][T17728] veth1_to_bond: entered allmulticast mode [ 1400.270321][T17727] veth1_to_bond: left allmulticast mode [ 1400.284710][T17734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.294026][T17734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.437897][T17759] syzkaller0: entered promiscuous mode [ 1400.444144][T17759] syzkaller0: entered allmulticast mode [ 1400.654539][T17789] netlink: 'syz.2.14016': attribute type 29 has an invalid length. [ 1400.680556][T17792] syzkaller0: entered promiscuous mode [ 1400.686364][T17792] syzkaller0: entered allmulticast mode [ 1400.856912][T17817] netlink: 'syz.6.14029': attribute type 29 has an invalid length. [ 1400.954789][T17863] syzkaller0: entered promiscuous mode [ 1400.960685][T17863] syzkaller0: entered allmulticast mode [ 1401.263856][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1401.263873][ T28] audit: type=1400 audit(1775660984.596:1537): avc: denied { read } for pid=17936 comm="syz.2.14039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1401.315592][T17942] netlink: 'syz.2.14041': attribute type 29 has an invalid length. [ 1401.389644][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.401707][T17949] bridge_slave_0 (unregistering): left allmulticast mode [ 1401.408990][T17949] bridge_slave_0 (unregistering): left promiscuous mode [ 1401.416854][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.446495][T17953] syzkaller0: entered promiscuous mode [ 1401.452281][T17953] syzkaller0: entered allmulticast mode [ 1401.515639][ T28] audit: type=1326 audit(1775660984.846:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.540219][ T28] audit: type=1326 audit(1775660984.846:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.564541][ T28] audit: type=1326 audit(1775660984.856:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d8991d04e code=0x7ffc0000 [ 1401.589812][ T28] audit: type=1326 audit(1775660984.856:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.614396][ T28] audit: type=1326 audit(1775660984.856:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.642218][ T28] audit: type=1326 audit(1775660984.856:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.666930][ T28] audit: type=1326 audit(1775660984.856:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.691635][ T28] audit: type=1326 audit(1775660984.856:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.751600][ T28] audit: type=1326 audit(1775660984.856:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.7.14046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8995c819 code=0x7ffc0000 [ 1401.929834][T18085] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1402.036692][T18085] bond1 (unregistering): Released all slaves [ 1402.157145][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14070'. [ 1402.590790][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14085'. [ 1402.772840][T18353] tipc: Started in network mode [ 1402.783095][T18353] tipc: Node identity 06cf0c3f56b1, cluster identity 4711 [ 1402.801683][T18353] tipc: Enabled bearer , priority 0 [ 1402.820181][T18353] syzkaller0: entered promiscuous mode [ 1402.833315][T18353] syzkaller0: entered allmulticast mode [ 1402.859298][T18353] tipc: Resetting bearer [ 1402.872075][T18351] tipc: Resetting bearer [ 1402.884080][T18351] tipc: Disabling bearer [ 1403.830569][T18520] netlink: 'syz.6.14119': attribute type 29 has an invalid length. [ 1404.242072][T18555] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14134'. [ 1404.781426][T18693] batadv_slave_1: entered promiscuous mode [ 1404.795115][T18690] batadv_slave_1: left promiscuous mode [ 1405.045477][T18729] netlink: 'syz.7.14162': attribute type 29 has an invalid length. [ 1405.163258][T18742] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14165'. [ 1405.177946][T18747] syz.2.14168 (18747): attempted to duplicate a private mapping with mremap. This is not supported. [ 1405.941368][T18988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.957550][T18988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.159303][T19028] netlink: 'syz.4.14192': attribute type 29 has an invalid length. [ 1406.173719][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14193'. [ 1406.185258][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14193'. [ 1406.352733][T19142] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14195'. [ 1406.363220][T19142] bridge0: port 3(hsr0) entered disabled state [ 1406.369605][T19142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.384884][T19142] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14195'. [ 1406.756822][T28322] IPVS: starting estimator thread 0... [ 1406.762603][T19282] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1406.922476][T19283] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1407.567669][T19426] netlink: 76 bytes leftover after parsing attributes in process `syz.7.14233'. [ 1407.628255][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14235'. [ 1408.145695][T19463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14247'. [ 1408.317865][T19468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.336819][T19468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.565716][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14257'. [ 1408.603735][T19498] loop8: detected capacity change from 0 to 7 [ 1409.851312][T19530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.861985][T19530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.982786][T19532] netlink: 'syz.6.14272': attribute type 11 has an invalid length. [ 1410.004677][T19540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.018436][T19540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.031359][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14277'. [ 1410.219573][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14289'. [ 1410.378459][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1410.378478][ T28] audit: type=1326 audit(1775660993.705:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.412632][ T28] audit: type=1326 audit(1775660993.705:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.437350][ T28] audit: type=1326 audit(1775660993.705:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.491670][ T28] audit: type=1326 audit(1775660993.705:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.521892][ T28] audit: type=1326 audit(1775660993.705:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.550912][ T28] audit: type=1326 audit(1775660993.705:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.574959][ T28] audit: type=1326 audit(1775660993.705:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.599502][ T28] audit: type=1326 audit(1775660993.705:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.600200][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14302'. [ 1410.624461][ T28] audit: type=1326 audit(1775660993.705:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.660895][ T28] audit: type=1326 audit(1775660993.705:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.2.14298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fdb958fc819 code=0x7ffc0000 [ 1410.758687][T19816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14309'. [ 1410.806017][T19822] netlink: 'syz.4.14312': attribute type 10 has an invalid length. [ 1410.836637][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.952118][T19822] team0: Failed to send options change via netlink (err -105) [ 1410.960462][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.968340][T19822] team0: Port device dummy0 added [ 1411.172243][T16346] IPVS: starting estimator thread 0... [ 1411.262611][T19940] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1411.503731][T19949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14322'. [ 1411.609413][T19973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19973 comm=syz.2.14329 [ 1411.853892][T20102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.864395][T20102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.470864][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14346'. [ 1412.884161][T20350] loop8: detected capacity change from 0 to 7 [ 1412.975966][T20358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.984775][T20358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.197724][T20358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.208031][T20358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.773803][T20473] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14373'. [ 1413.810634][T20475] batadv_slave_1: entered promiscuous mode [ 1413.817204][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14374'. [ 1413.830079][T20475] vlan2: entered promiscuous mode [ 1413.835511][T20475] gretap0: entered promiscuous mode [ 1413.865453][T14018] ================================================================== [ 1413.873794][T14018] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 1413.882011][T14018] [ 1413.884474][T14018] read-write to 0xffff888134ac6240 of 8 bytes by task 20465 on cpu 1: [ 1413.892755][T14018] shmem_add_to_page_cache+0x4b2/0x5b0 [ 1413.898536][T14018] shmem_get_folio_gfp+0x4f3/0xd60 [ 1413.903707][T14018] shmem_write_begin+0xfc/0x1f0 [ 1413.908902][T14018] generic_perform_write+0x183/0x490 [ 1413.914368][T14018] shmem_file_write_iter+0xc5/0xf0 [ 1413.919542][T14018] __kernel_write_iter+0x319/0x590 [ 1413.924704][T14018] dump_user_range+0xa7d/0xdb0 [ 1413.929539][T14018] elf_core_dump+0x21a2/0x2330 [ 1413.934361][T14018] coredump_write+0xacc/0xdd0 [ 1413.939086][T14018] vfs_coredump+0x26c7/0x3130 [ 1413.943896][T14018] get_signal+0xd80/0xf60 [ 1413.948300][T14018] arch_do_signal_or_restart+0x96/0x450 [ 1413.954002][T14018] irqentry_exit+0xf7/0x520 [ 1413.958735][T14018] asm_exc_page_fault+0x26/0x30 [ 1413.963722][T14018] [ 1413.966100][T14018] read to 0xffff888134ac6240 of 8 bytes by task 14018 on cpu 0: [ 1413.973946][T14018] shmem_getattr+0x68/0x200 [ 1413.978514][T14018] vfs_getattr_nosec+0x146/0x1e0 [ 1413.983595][T14018] vfs_getattr+0x48/0x60 [ 1413.987890][T14018] vfs_statx_path+0x28/0x140 [ 1413.992536][T14018] vfs_statx+0xc4/0x170 [ 1413.996727][T14018] vfs_fstatat+0x118/0x170 [ 1414.001368][T14018] __se_sys_newfstatat+0x55/0x3e0 [ 1414.006706][T14018] __x64_sys_newfstatat+0x55/0x70 [ 1414.011772][T14018] x64_sys_call+0x2c64/0x3020 [ 1414.016577][T14018] do_syscall_64+0x12c/0x370 [ 1414.021226][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.027244][T14018] [ 1414.029720][T14018] value changed: 0x0000000000002c51 -> 0x0000000000002c54 [ 1414.036869][T14018] [ 1414.039222][T14018] Reported by Kernel Concurrency Sanitizer on: [ 1414.045442][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1414.056861][T14018] Tainted: [W]=WARN [ 1414.060755][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1414.072192][T14018] ================================================================== [ 1414.165194][T20474] batadv_slave_1: left promiscuous mode