last executing test programs: 27m58.841625716s ago: executing program 32 (id=275): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfacc, 0x100, 0x2, 0x48}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000007080)=""/4095, 0xfff}], 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpid}]}, 0xd, 0x5d8, &(0x7f0000006a80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000000400)="00da703b7ef8c18d", 0x8) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 26m5.806599291s ago: executing program 33 (id=547): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@minixdf}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x20, 0x0, @desc2}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) fcntl$dupfd(r0, 0x0, r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x2000000000006) fcntl$getown(r6, 0x9) lseek(r6, 0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) 26m0.955720388s ago: executing program 34 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 24m7.672860716s ago: executing program 35 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) 16m33.110608163s ago: executing program 4 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000010, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) setrlimit(0xc, &(0x7f0000000000)={0x2}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 16m31.66954249s ago: executing program 4 (id=1757): epoll_create1(0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 16m21.659693842s ago: executing program 4 (id=1779): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16m5.990013992s ago: executing program 36 (id=1779): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15m59.54107696s ago: executing program 37 (id=1793): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r6, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 14m35.01367114s ago: executing program 38 (id=1967): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 14m7.040118296s ago: executing program 0 (id=2057): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_settime(0xffffffea, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) syz_open_dev$vcsn(&(0x7f00000000c0), 0x86, 0x509e03) fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getpid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r3) 14m5.276814111s ago: executing program 0 (id=2061): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000c00)={&(0x7f0000000a80)="80441f6fe632e705f8fbb99e", &(0x7f0000000ac0)=""/226, &(0x7f0000001340)="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", &(0x7f0000000bc0), 0x0, 0x1}, 0x38) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r6, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 14m4.795599323s ago: executing program 0 (id=2063): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x70d, 0x1f}, {0x0, 0x0, 0x0, 0x4b}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x18, 0x4b7}]}, 0xf8}}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) 14m3.350714231s ago: executing program 0 (id=2067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "59df9bafbcfdb56315f245396a297796990e82b4ae58f23aceb70576cbc23bcf", "2b536027a7994037f51fcc3a0ec483e3792474f83462ba98870aa688d1b5cdb0", "918ccf48820000000000cd231f8ff94845fe17b702610000000000429200", "34f231ce71b6afd5f9585a8787eb6a402f9c0012781f716b2a5ccab61835cc21", "bb500649861d98c16388c83d37d69c38e4bef90c3cb04c56b47c7dc408fa5f7c", "5958dd3d80c1542523c508e5", 0x882c, 0x0, 0xbc, 0x201}}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800, 0x10000}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x10) setxattr$security_selinux(&(0x7f0000000240)='./cgroup.net/devices.allow\x00', &(0x7f0000000280), &(0x7f0000000340)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x1) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB='\x00\x00\x00'], 0x50) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @private0, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private2, [{0x19, 0x1, "3ae42c72f374"}]}}}}}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, 0x0, 0xd) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), &(0x7f00000001c0)={'U-', 0x4}, 0x16, 0x3) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0>0', 0xe0, 0xfffffffffffffffb) syz_usb_connect$cdc_ecm(0x5, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0x14, 0x20, 0xfe, [{{0x9, 0x4, 0x0, 0xc3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xd421, 0x7, 0x7fff, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm_detail={0x69, 0x24, 0x13, 0x2, "214aa0a814296153f04598291429daa55dc32c8c8521f2fbd492395dc42d2cba259e73aeef90925d0e400a6571692424a9deeaedb99c46534b6a41a62dadf3b82f2fa7bdeb9704b77fbdabe60cb5dcdf139770cd89b6d860db9efa39f6cf565e48789edd82"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0x7, 0x1, 0x6fd6, 0x79}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x14, 0xff, 0x18}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf8, 0x3, 0xf2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x64, 0xc, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0f05092007c242a8a936"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 13m57.971347225s ago: executing program 0 (id=2080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff}, 0x18}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) 13m57.031176127s ago: executing program 0 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 13m41.737472475s ago: executing program 39 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12m31.584208629s ago: executing program 1 (id=2240): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_settime(0xffffffea, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc98853278"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x10000, @value=r3}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x86, 0x509e03) fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getpid() ioctl$XFS_IOC_ERROR_INJECTION(r4, 0x40085874, &(0x7f0000000140)={r5}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r6) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1}) 12m26.529679034s ago: executing program 1 (id=2249): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12m23.674974346s ago: executing program 1 (id=2253): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 12m20.391407795s ago: executing program 1 (id=2257): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_settime(0xffffffea, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = dup(0xffffffffffffffff) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='securityfs\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getpid() ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r4) 12m17.077726627s ago: executing program 1 (id=2262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "59df9bafbcfdb56315f245396a297796990e82b4ae58f23aceb70576cbc23bcf", "2b536027a7994037f51fcc3a0ec483e3792474f83462ba98870aa688d1b5cdb0", "918ccf48820000000000cd231f8ff94845fe17b702610000000000429200", "34f231ce71b6afd5f9585a8787eb6a402f9c0012781f716b2a5ccab61835cc21", "bb500649861d98c16388c83d37d69c38e4bef90c3cb04c56b47c7dc408fa5f7c", "5958dd3d80c1542523c508e5", 0x882c, 0x0, 0xbc, 0x201}}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x800, 0x10000}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x10) setxattr$security_selinux(&(0x7f0000000240)='./cgroup.net/devices.allow\x00', &(0x7f0000000280), &(0x7f0000000340)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x1) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB='\x00\x00\x00'], 0x50) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @private0, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private2, [{0x19, 0x1, "3ae42c72f374"}]}}}}}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, 0x0, 0xd) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./cgroup.net/devices.allow\x00', &(0x7f0000000140), &(0x7f00000001c0)={'U-', 0x4}, 0x16, 0x3) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0>0', 0xe0, 0xfffffffffffffffb) syz_usb_connect$cdc_ecm(0x5, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0x14, 0x20, 0xfe, [{{0x9, 0x4, 0x0, 0xc3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xd421, 0x7, 0x7fff, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm_detail={0x69, 0x24, 0x13, 0x2, "214aa0a814296153f04598291429daa55dc32c8c8521f2fbd492395dc42d2cba259e73aeef90925d0e400a6571692424a9deeaedb99c46534b6a41a62dadf3b82f2fa7bdeb9704b77fbdabe60cb5dcdf139770cd89b6d860db9efa39f6cf565e48789edd82"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0x7, 0x1, 0x6fd6, 0x79}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x14, 0xff, 0x18}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf8, 0x3, 0xf2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x64, 0xc, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0f05092007c242a8a936"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 12m13.595101744s ago: executing program 1 (id=2270): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r6, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 11m58.462268147s ago: executing program 40 (id=2270): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r6, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 8m23.145695935s ago: executing program 5 (id=2623): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 8m19.054818415s ago: executing program 5 (id=2627): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r2, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) sendto$inet6(r0, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) sendmmsg$inet(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r7, &(0x7f0000002080)=ANY=[], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m16.921402623s ago: executing program 5 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 8m7.119914467s ago: executing program 5 (id=2640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 8m2.482860256s ago: executing program 5 (id=2643): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 7m59.066239507s ago: executing program 5 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 7m43.391815618s ago: executing program 41 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 7m5.714990149s ago: executing program 4 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6m57.507878312s ago: executing program 4 (id=2720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 6m51.473867284s ago: executing program 4 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 6m35.992375939s ago: executing program 42 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004", 0x29}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18030000ffffffff000000000410000095000000000000003d4f9dedea023495180b134813f98ce23d9f0737a984228ce8b40ac0a8b9be99eeb86835f775227acd22d083be642889abf9e1799137868fa47de913222f2625677c33695c249afbf8fba2bd1a6ae045346902e9ec62d129730ee6cf9c738e8b9f251f74d6a3af"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000700000500000a280000000009f30000000000000000000a00000708000240000000020900010073797e31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) unshare(0x40020600) 2m36.641089524s ago: executing program 8 (id=3920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fc", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m36.57643386s ago: executing program 8 (id=3923): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2012) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000000d80)=""/4050, 0xfd2}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000000c0)=""/122, 0x7a}], 0x6}, 0x120) 2m35.617327454s ago: executing program 8 (id=3931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.424677612s ago: executing program 8 (id=3935): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xe, 0x100000000009}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m34.708690024s ago: executing program 8 (id=3944): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)='\x00'/14, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.444687208s ago: executing program 8 (id=3947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x1c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 2m34.437393979s ago: executing program 43 (id=3947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x1c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.394773067s ago: executing program 3 (id=7131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x100003}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xff, 0x10000000, 0x5, 0x9, 0xffffffffffff07a6}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40080d1}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="ba927afbc9b55400040000ea0732", 0xe, 0x24044085, &(0x7f0000000340)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.351224141s ago: executing program 6 (id=7133): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.342094772s ago: executing program 2 (id=7134): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) 1.306331965s ago: executing program 6 (id=7135): socket$igmp(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3, 0x0, 0xffff}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x1, 0x0, @remote}}}, 0x2a) 1.306171585s ago: executing program 2 (id=7136): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x5, 0x4) 1.224678832s ago: executing program 9 (id=7137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) 1.224476852s ago: executing program 9 (id=7138): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) 1.218397043s ago: executing program 3 (id=7139): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13", 0x49}], 0x1}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="7535b2c14a32bc47baa89ed180f4dd6163553e95ee1684dd74cd620913bb139ed8b8c34e00833cfe8c4c6811940a24cf29", @ANYRESHEX=r1, @ANYRES32=r7, @ANYBLOB="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"], 0xffdd) 1.173376417s ago: executing program 9 (id=7141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.172947387s ago: executing program 6 (id=7142): socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x4520, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.050323888s ago: executing program 3 (id=7144): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 991.604473ms ago: executing program 6 (id=7146): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 964.289915ms ago: executing program 3 (id=7147): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xc, 0x1, '%-5lx \x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x24040010) 957.300586ms ago: executing program 6 (id=7148): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r0, 0x0, 0x0, 0x20000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket(0x10, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x61d9, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 915.80224ms ago: executing program 3 (id=7150): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4, @v={0x0, 0x2, 0x4, 0x6, 0xdc, 0x3, 0x10, {0x9, 0xf, "bab0ec9438c39748"}, 0x7, 0x3d, 0x3, 0x9}}, 0x19) close(0x3) 811.148909ms ago: executing program 6 (id=7152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 449.321521ms ago: executing program 7 (id=7159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000002fc0)="5e000d001b71ecab36", 0x9, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x8}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @window={0x3, 0x1, 0x99}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000240)="35569dc24431fad4348d7251545aef09c4def3321ca3efa94c4b46e769f7033e9433d14d5d06f3c45d2b152f4f8503093f42f445e8d72bcf361572806a62865de0a85eadcc2e232d50e9176c1c66e8d0ebd499728a7406a8", 0x58, 0x805, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 404.448275ms ago: executing program 2 (id=7160): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 404.278644ms ago: executing program 7 (id=7161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) 389.005986ms ago: executing program 7 (id=7162): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xc, 0x1, '%-5lx \x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x24040010) 362.662098ms ago: executing program 7 (id=7163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 288.721005ms ago: executing program 9 (id=7164): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) 247.611578ms ago: executing program 9 (id=7165): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712e", 0x4e}], 0x1}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="7535b2c14a32bc47baa89ed180f4dd6163553e95ee1684dd74cd620913bb139ed8b8c34e00833cfe8c4c6811940a24cf29", @ANYRESHEX=r1, @ANYRES32=r7, @ANYBLOB="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"], 0xffdd) 247.182259ms ago: executing program 7 (id=7166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xbbe, 0x5}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 226.35229ms ago: executing program 2 (id=7167): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) 148.697127ms ago: executing program 2 (id=7168): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 129.308219ms ago: executing program 9 (id=7169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 83.879923ms ago: executing program 7 (id=7170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.7101ms ago: executing program 3 (id=7171): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x7d}], 0x1) 0s ago: executing program 2 (id=7172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000002fc0)="5e000d001b71ecab36", 0x9, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x8}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @window={0x3, 0x1, 0x99}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000240)="35569dc24431fad4348d7251545aef09c4def3321ca3efa94c4b46e769f7033e9433d14d5d06f3c45d2b152f4f8503093f42f445e8d72bcf361572806a62865de0a85eadcc2e232d50e9176c1c66e8d0ebd499728a7406a8", 0x58, 0x805, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): king HSR network [ 1644.441276][T22656] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4016'. [ 1644.559339][T22422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.569367][ T28] audit: type=1400 audit(1771894387.326:4875): avc: denied { setopt } for pid=22660 comm="syz.9.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1644.595059][T22662] netlink: 'syz.9.4017': attribute type 1 has an invalid length. [ 1644.639823][T22662] netlink: 'syz.9.4017': attribute type 2 has an invalid length. [ 1644.707815][T22422] veth0_vlan: entered promiscuous mode [ 1644.721201][T22422] veth1_vlan: entered promiscuous mode [ 1644.773633][T22422] veth0_macvtap: entered promiscuous mode [ 1644.797741][T22422] veth1_macvtap: entered promiscuous mode [ 1644.841242][T22422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.879144][T22422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.893422][T22701] netlink: 'syz.6.4027': attribute type 1 has an invalid length. [ 1644.927725][T22701] netlink: 'syz.6.4027': attribute type 2 has an invalid length. [ 1644.946960][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1644.957053][T22705] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4028'. [ 1645.014321][T20241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.036181][T20241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.083313][T20241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.096939][ T28] audit: type=1400 audit(1771894387.856:4876): avc: denied { mounton } for pid=22422 comm="syz-executor" path="/root/syzkaller.wIs5bh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1645.112539][T20241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.201541][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1645.522508][T22766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1645.550719][T22766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1645.585344][T22773] loop9: detected capacity change from 0 to 256 [ 1645.607022][T22775] netlink: 'syz.2.4041': attribute type 1 has an invalid length. [ 1645.631883][T22781] netlink: 'syz.3.4043': attribute type 1 has an invalid length. [ 1645.640176][T22773] vfat: Bad value for 'tz' [ 1645.644784][T22775] netlink: 'syz.2.4041': attribute type 2 has an invalid length. [ 1645.659637][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4040'. [ 1645.671658][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4041'. [ 1646.545908][T22829] loop7: detected capacity change from 0 to 256 [ 1646.570142][T22829] vfat: Bad value for 'tz' [ 1646.644102][T22835] netlink: 'syz.6.4057': attribute type 1 has an invalid length. [ 1646.662337][T22835] netlink: 'syz.6.4057': attribute type 2 has an invalid length. [ 1646.717992][ T28] audit: type=1400 audit(1771894389.476:4877): avc: denied { name_connect } for pid=22836 comm="syz.9.4058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1646.774739][ T28] audit: type=1400 audit(1771894389.526:4878): avc: denied { read } for pid=22836 comm="syz.9.4058" lport=54535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1646.827432][ T28] audit: type=1400 audit(1771894389.586:4879): avc: denied { name_connect } for pid=22836 comm="syz.9.4058" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1647.124813][T22882] loop2: detected capacity change from 0 to 256 [ 1647.164164][T22882] vfat: Bad value for 'tz' [ 1647.875111][T22921] hsr_slave_0: left promiscuous mode [ 1647.891181][T22921] hsr_slave_1: left promiscuous mode [ 1648.144623][T22947] pimreg: tun_chr_ioctl cmd 1074025677 [ 1648.170580][T22947] pimreg: linktype set to 773 [ 1648.324358][T22977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1648.685848][T22995] loop2: detected capacity change from 0 to 2048 [ 1648.766286][T22995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.860813][T22995] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.677270][T23036] __nla_validate_parse: 4 callbacks suppressed [ 1649.677300][T23036] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4108'. [ 1649.775911][T23038] netlink: 'syz.7.4109': attribute type 10 has an invalid length. [ 1650.212835][T13701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.346447][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4116'. [ 1651.122315][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'. [ 1651.143499][T23102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1651.162265][T23102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1651.401603][T23143] IPv6: NLM_F_CREATE should be specified when creating new route [ 1651.427236][T23143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1651.434549][T23143] IPv6: NLM_F_CREATE should be set when creating new route [ 1651.458668][T23143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1651.465994][T23143] IPv6: NLM_F_CREATE should be set when creating new route [ 1651.633344][ T28] audit: type=1400 audit(1771894394.396:4880): avc: denied { relabelfrom } for pid=23165 comm="syz.9.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1651.703082][ T28] audit: type=1400 audit(1771894394.396:4881): avc: denied { relabelto } for pid=23165 comm="syz.9.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1651.726876][T23172] syzkaller0: entered promiscuous mode [ 1651.745283][T23172] syzkaller0: entered allmulticast mode [ 1652.852056][T23266] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1653.022695][ T28] audit: type=1400 audit(1771894395.776:4882): avc: denied { nlmsg_read } for pid=23265 comm="syz.2.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1653.642097][T23319] loop7: detected capacity change from 0 to 2048 [ 1654.043059][T23319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1654.301664][T23319] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.427838][T23387] netlink: 'syz.6.4233': attribute type 1 has an invalid length. [ 1654.436153][T23387] netlink: 'syz.6.4233': attribute type 2 has an invalid length. [ 1654.546840][T21357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.606218][T23398] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1654.862122][T23428] loop9: detected capacity change from 0 to 2048 [ 1654.974777][T23433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4252'. [ 1655.125617][T23428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1655.217784][T23428] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1655.258692][T23443] netlink: 'syz.7.4255': attribute type 10 has an invalid length. [ 1656.363418][T11492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.539811][T23504] netlink: 'syz.7.4282': attribute type 1 has an invalid length. [ 1656.564131][T23504] netlink: 'syz.7.4282': attribute type 2 has an invalid length. [ 1656.573979][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 1656.895208][T23553] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4308'. [ 1656.934787][T23553] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4308'. [ 1656.965416][T23553] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4308'. [ 1657.014206][T23553] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4308'. [ 1657.077723][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4318'. [ 1657.425777][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.446657][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.463920][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 1657.473520][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.495534][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.506444][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4345'. [ 1657.522403][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.532717][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.543273][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.599865][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.609931][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.620331][T23625] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1657.694457][T23652] netlink: 'syz.3.4350': attribute type 16 has an invalid length. [ 1657.703498][T23652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4350'. [ 1658.926687][T23723] delete_channel: no stack [ 1659.038061][ T28] audit: type=1400 audit(1771894401.796:4883): avc: denied { setopt } for pid=23737 comm="syz.6.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1659.825366][T23828] netlink: 'syz.9.4434': attribute type 1 has an invalid length. [ 1659.849309][T23828] netlink: 'syz.9.4434': attribute type 2 has an invalid length. [ 1660.071587][T23858] loop9: detected capacity change from 0 to 2048 [ 1660.150547][T23860] __nla_validate_parse: 7 callbacks suppressed [ 1660.150563][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4450'. [ 1660.204723][T23858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1660.228802][T23864] netlink: 'syz.3.4451': attribute type 1 has an invalid length. [ 1660.237579][T23858] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.268879][T23864] netlink: 'syz.3.4451': attribute type 2 has an invalid length. [ 1660.312593][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1660.412724][T11492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.506534][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4464'. [ 1660.872766][T23921] loop3: detected capacity change from 0 to 2048 [ 1660.904413][T23921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1660.918484][T23921] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.974667][T23929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4478'. [ 1660.993206][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.375712][T23970] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4496'. [ 1661.890245][T24014] loop3: detected capacity change from 0 to 2048 [ 1661.965541][T24014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1662.023952][T24014] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1662.157217][T24038] netlink: 'syz.7.4518': attribute type 1 has an invalid length. [ 1662.165410][T24038] netlink: 'syz.7.4518': attribute type 2 has an invalid length. [ 1662.173557][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4518'. [ 1662.675985][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.812818][T24115] sock: sock_timestamping_bind_phc: sock not bind to device [ 1663.081737][T24159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1663.090744][T24159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1663.121821][T24153] sock: sock_timestamping_bind_phc: sock not bind to device [ 1663.239709][T24173] netlink: 'syz.2.4569': attribute type 1 has an invalid length. [ 1663.247776][T24173] netlink: 'syz.2.4569': attribute type 2 has an invalid length. [ 1663.257476][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1663.320118][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4574'. [ 1663.460314][T24184] sock: sock_timestamping_bind_phc: sock not bind to device [ 1663.558042][T24211] netlink: 'syz.2.4585': attribute type 1 has an invalid length. [ 1663.569294][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4586'. [ 1663.579730][T24211] netlink: 'syz.2.4585': attribute type 2 has an invalid length. [ 1663.591334][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4585'. [ 1663.815995][T24237] sock: sock_timestamping_bind_phc: sock not bind to device [ 1663.864092][T24247] netlink: 'syz.9.4602': attribute type 1 has an invalid length. [ 1663.872176][T24247] netlink: 'syz.9.4602': attribute type 2 has an invalid length. [ 1664.091587][T24269] sock: sock_timestamping_bind_phc: sock not bind to device [ 1664.132926][T24282] net_ratelimit: 33018 callbacks suppressed [ 1664.132942][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.158903][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.169184][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.179563][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.189696][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.199874][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.209950][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.220833][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.231046][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1664.241731][T24282] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1665.012927][T24298] netlink: 'syz.6.4627': attribute type 32 has an invalid length. [ 1665.179182][T24317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.194350][T24317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.208277][T24318] __nla_validate_parse: 4 callbacks suppressed [ 1665.208297][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4633'. [ 1665.356215][T24333] IPv6: NLM_F_CREATE should be specified when creating new route [ 1665.364470][T24333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1665.371729][T24333] IPv6: NLM_F_CREATE should be set when creating new route [ 1665.458270][ T28] audit: type=1400 audit(1771894408.176:4884): avc: denied { connect } for pid=24337 comm="syz.3.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1665.948423][T24360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1666.325003][T24401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.334570][T24401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.609270][ T28] audit: type=1400 audit(1771894409.366:4885): avc: denied { create } for pid=24423 comm="syz.3.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1666.662824][ T3406] IPVS: starting estimator thread 0... [ 1666.668804][ T28] audit: type=1400 audit(1771894409.396:4886): avc: denied { ioctl } for pid=24423 comm="syz.3.4682" path="socket:[91772]" dev="sockfs" ino=91772 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1666.762394][T24429] IPVS: using max 2208 ests per chain, 110400 per kthread [ 1667.036058][T24435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1667.280336][ T28] audit: type=1400 audit(1771894410.036:4887): avc: denied { shutdown } for pid=24461 comm="syz.6.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1667.790556][T24520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.813907][T24521] loop7: detected capacity change from 0 to 2048 [ 1667.822706][T24520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.838808][T24521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.838893][T24521] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1668.525311][ T28] audit: type=1400 audit(1771894411.286:4888): avc: denied { mount } for pid=24574 comm="syz.6.4747" name="/" dev="ramfs" ino=90996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1668.611079][T21357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.793514][T24591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.812201][T24591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.055481][T24606] loop6: detected capacity change from 0 to 2048 [ 1669.153461][T24606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.172613][T24606] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.246930][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.355628][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4767'. [ 1670.236788][T24654] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1670.250692][T24652] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1670.324034][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1670.718494][T24670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.737498][T24670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.619257][T24640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1672.904250][T24744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.914084][T24744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.087100][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4824'. [ 1673.313324][T24779] vxcan0: tx address claim with dlc 0 [ 1673.396641][T24783] validate_nla: 2 callbacks suppressed [ 1673.396694][T24783] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 1673.410117][T24783] netlink: 'syz.2.4838': attribute type 2 has an invalid length. [ 1673.428577][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'. [ 1673.542809][T24794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.551376][T24794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.700114][T19594] IPVS: starting estimator thread 0... [ 1673.705931][T24799] net_ratelimit: 12977 callbacks suppressed [ 1673.705950][T24799] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1673.812311][T24803] IPVS: using max 2160 ests per chain, 108000 per kthread [ 1674.120966][T24824] loop9: detected capacity change from 0 to 2048 [ 1674.148157][T24824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.183987][T24824] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1674.428069][T24830] chnl_net:caif_netlink_parms(): no params data found [ 1674.498800][T24830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.506253][T24830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.514415][T24830] bridge_slave_0: entered allmulticast mode [ 1674.522636][T24830] bridge_slave_0: entered promiscuous mode [ 1674.529633][T24830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.536977][T24830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.544359][T24830] bridge_slave_1: entered allmulticast mode [ 1674.550916][T24830] bridge_slave_1: entered promiscuous mode [ 1674.572725][T24830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.585057][T24830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.606316][T24830] team0: Port device team_slave_0 added [ 1674.613622][T24830] team0: Port device team_slave_1 added [ 1674.630745][T24830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.637908][T24830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.665655][T24830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.678725][T24830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.686008][T24830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.713698][T24830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.743208][T24830] hsr_slave_0: entered promiscuous mode [ 1674.749648][T24830] hsr_slave_1: entered promiscuous mode [ 1674.755829][T24830] debugfs: 'hsr0' already exists in 'hsr' [ 1674.761750][T24830] Cannot create hsr debugfs directory [ 1675.033444][T24830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.061386][T11492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.141483][T24830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.256426][T24830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.298992][ T28] audit: type=1400 audit(1771894418.056:4889): avc: denied { connect } for pid=24877 comm="syz.9.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1675.359998][T24883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.371793][T24883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.392767][T24830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.500797][T24830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1675.512136][T24830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1675.524044][T24830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1675.547945][T24830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1675.742683][T24830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.806633][T24830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.850991][T21594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.858137][T21594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.879006][ T28] audit: type=1400 audit(1771894418.476:4890): avc: denied { bind } for pid=24901 comm="syz.3.4878" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1675.899279][ T28] audit: type=1400 audit(1771894418.476:4891): avc: denied { name_bind } for pid=24901 comm="syz.3.4878" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1675.902482][T24908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4881'. [ 1675.920401][ T28] audit: type=1400 audit(1771894418.476:4892): avc: denied { node_bind } for pid=24901 comm="syz.3.4878" saddr=172.20.20.22 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1675.958925][T21586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.966204][T21586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.017681][ T28] audit: type=1400 audit(1771894418.476:4893): avc: denied { connect } for pid=24901 comm="syz.3.4878" laddr=172.20.20.22 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1676.055541][ T28] audit: type=1400 audit(1771894418.756:4894): avc: denied { read } for pid=24909 comm="syz.3.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1676.161591][T24830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.343974][T24830] veth0_vlan: entered promiscuous mode [ 1676.362777][T24830] veth1_vlan: entered promiscuous mode [ 1676.407115][T24830] veth0_macvtap: entered promiscuous mode [ 1676.425439][T24830] veth1_macvtap: entered promiscuous mode [ 1676.444363][T24830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.483835][T24830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.500858][T21582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.561569][T21582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.596861][T21582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.608522][T21582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.673758][T24966] netlink: 'syz.2.4856': attribute type 1 has an invalid length. [ 1676.683615][T24966] netlink: 'syz.2.4856': attribute type 2 has an invalid length. [ 1676.691500][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1676.716490][T24937] loop2: detected capacity change from 0 to 7 [ 1676.849482][T24975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4906'. [ 1676.863034][T24975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.881080][T24975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.891806][T24975] bond0 (unregistering): Released all slaves [ 1676.913626][T24980] devtmpfs: Unsupported parameter 'huge' [ 1676.919402][ T28] audit: type=1400 audit(1771894419.676:4895): avc: denied { mount } for pid=24974 comm="syz.3.4906" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1676.969774][T24984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.995506][ T28] audit: type=1400 audit(1771894419.676:4896): avc: denied { remount } for pid=24974 comm="syz.3.4906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1677.004711][T24984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.385230][T21582] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.467099][T21582] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.540448][T21582] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.600002][T24993] chnl_net:caif_netlink_parms(): no params data found [ 1677.702552][T21582] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.768691][T24993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.772594][ T28] audit: type=1400 audit(1771894420.526:4897): avc: denied { mount } for pid=25040 comm="syz.7.4927" name="/" dev="autofs" ino=93030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1677.776409][T24993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.806772][T24993] bridge_slave_0: entered allmulticast mode [ 1677.813668][T24993] bridge_slave_0: entered promiscuous mode [ 1677.820640][T24993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.828033][T24993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.835723][T24993] bridge_slave_1: entered allmulticast mode [ 1677.842730][T24993] bridge_slave_1: entered promiscuous mode [ 1677.917688][T24993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.938872][T24993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.988833][T24993] team0: Port device team_slave_0 added [ 1678.004562][T24993] team0: Port device team_slave_1 added [ 1678.012023][T21582] bridge_slave_1: left allmulticast mode [ 1678.032269][T21582] bridge_slave_1: left promiscuous mode [ 1678.062119][T21582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.104535][T21582] bridge_slave_0: left allmulticast mode [ 1678.110305][T21582] bridge_slave_0: left promiscuous mode [ 1678.116522][T21582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.294451][T25080] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4936'. [ 1678.328226][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4936'. [ 1678.363599][T25080] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4936'. [ 1678.399619][T25080] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4936'. [ 1678.876482][T21582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.920714][T21582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.959995][T21582] bond0 (unregistering): Released all slaves [ 1679.013258][T24993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.020672][T24993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.047156][T24993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.060786][T24993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.085826][T24993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.118729][T24993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.139312][T21582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.153775][T21582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.161312][T21582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.177272][T21582] veth1_macvtap: left promiscuous mode [ 1679.189389][T21582] veth0_macvtap: left promiscuous mode [ 1679.196937][T21582] veth1_vlan: left promiscuous mode [ 1679.202579][T21582] veth0_vlan: left promiscuous mode [ 1679.350198][T21582] pimreg (unregistering): left allmulticast mode [ 1679.385411][T25113] netlink: 'syz.6.4949': attribute type 1 has an invalid length. [ 1679.394477][T25113] netlink: 'syz.6.4949': attribute type 2 has an invalid length. [ 1679.413002][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4949'. [ 1679.480606][T21582] team0 (unregistering): Port device team_slave_1 removed [ 1679.502779][T21582] team0 (unregistering): Port device team_slave_0 removed [ 1679.579513][T24993] hsr_slave_0: entered promiscuous mode [ 1679.592523][T24993] hsr_slave_1: entered promiscuous mode [ 1679.613069][T24993] debugfs: 'hsr0' already exists in 'hsr' [ 1679.627655][T24993] Cannot create hsr debugfs directory [ 1680.263165][T24993] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1680.282052][T24993] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1680.298675][T24993] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1680.314457][T24993] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1680.426877][T24993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.441911][T24993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.460675][T21582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.467833][T21582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.504405][T21582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.511519][T21582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.542533][T24993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1680.658569][T24993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.941215][T24993] veth0_vlan: entered promiscuous mode [ 1680.974311][T24993] veth1_vlan: entered promiscuous mode [ 1681.016342][T24993] veth0_macvtap: entered promiscuous mode [ 1681.095357][T24993] veth1_macvtap: entered promiscuous mode [ 1681.121217][T24993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.163565][T24993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.296785][T21594] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.613610][T21594] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.645195][T21594] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.672708][T21594] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.567829][T25349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5010'. [ 1683.321724][T25381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5024'. [ 1684.815281][T25394] netlink: 'syz.7.5030': attribute type 1 has an invalid length. [ 1684.823717][T25394] netlink: 'syz.7.5030': attribute type 2 has an invalid length. [ 1684.831616][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5030'. [ 1684.927231][T25406] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5035'. [ 1685.065902][ T28] audit: type=1400 audit(1771894427.816:4898): avc: denied { create } for pid=25416 comm="syz.7.5040" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1685.105808][ T28] audit: type=1400 audit(1771894427.816:4899): avc: denied { write } for pid=25416 comm="syz.7.5040" name="file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1685.145352][ T28] audit: type=1400 audit(1771894427.816:4900): avc: denied { open } for pid=25416 comm="syz.7.5040" path="/299/file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1685.168898][ T28] audit: type=1400 audit(1771894427.816:4901): avc: denied { ioctl } for pid=25416 comm="syz.7.5040" path="/299/file0" dev="tmpfs" ino=1545 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1685.195004][ T28] audit: type=1400 audit(1771894427.826:4902): avc: denied { unlink } for pid=21357 comm="syz-executor" name="file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1686.053336][T25432] netlink: 'syz.9.5046': attribute type 1 has an invalid length. [ 1686.061314][T25432] netlink: 'syz.9.5046': attribute type 2 has an invalid length. [ 1686.069383][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5046'. [ 1686.181107][T25436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5048'. [ 1686.200468][T17518] IPVS: starting estimator thread 0... [ 1686.292305][T25440] IPVS: using max 1968 ests per chain, 98400 per kthread [ 1687.461044][T25500] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5075'. [ 1687.477042][T25502] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5073'. [ 1687.511492][T25502] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5073'. [ 1687.591750][T25504] netlink: 'syz.6.5076': attribute type 10 has an invalid length. [ 1687.629647][T25504] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1688.995905][T25539] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1689.018882][T25537] loop9: detected capacity change from 0 to 2048 [ 1689.072517][T25539] team0: Port device bond0 removed [ 1689.074557][T25549] devtmpfs: Unsupported parameter 'huge' [ 1689.088613][T25539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.102920][T25549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.113187][T25539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.117706][T25549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.123043][T25537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.142185][T25537] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.153126][T25539] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 1689.168127][T25539] bond0 (unregistering): Released all slaves [ 1689.182892][ T28] audit: type=1400 audit(1771894431.946:4903): avc: denied { create } for pid=25558 comm="syz.2.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1689.233698][T24993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.278458][T25567] netlink: 'syz.7.5097': attribute type 1 has an invalid length. [ 1689.286715][T25567] netlink: 'syz.7.5097': attribute type 2 has an invalid length. [ 1689.294997][T25567] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5097'. [ 1689.549497][T19594] IPVS: starting estimator thread 0... [ 1689.652372][T25582] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1689.876232][T25595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.893092][T25595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.905674][T25593] loop6: detected capacity change from 0 to 2048 [ 1689.923749][T25593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.936292][T25593] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.973777][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.475426][T25623] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5116'. [ 1690.488414][T25623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.498754][T25623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.509038][T25623] bond0 (unregistering): Released all slaves [ 1690.526935][T25624] devtmpfs: Unsupported parameter 'huge' [ 1690.943114][T25645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.951840][T25645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.524190][T25649] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5127'. [ 1691.671980][T25661] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5133'. [ 1691.681847][T25661] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5133'. [ 1691.691418][T25661] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5133'. [ 1691.737525][T25667] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1691.744115][T25667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1691.752420][T25667] vhci_hcd vhci_hcd.0: Device attached [ 1691.759394][T25668] usbip_core: unknown command [ 1691.764311][T25668] vhci_hcd: unknown pdu 0 [ 1691.768670][T25668] usbip_core: unknown command [ 1691.773812][T21594] vhci_hcd vhci_hcd.6: stop threads [ 1691.779036][T21594] vhci_hcd vhci_hcd.6: release socket [ 1691.784865][T21594] vhci_hcd vhci_hcd.6: disconnect device [ 1692.180110][T25559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1692.260261][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.297744][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.330096][T25682] loop7: detected capacity change from 0 to 2048 [ 1692.351624][T25687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.364229][T25687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.392745][T25682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.411944][T25682] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.991827][T21357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.070095][T25718] netlink: 'syz.2.5157': attribute type 1 has an invalid length. [ 1693.099583][T25718] netlink: 'syz.2.5157': attribute type 2 has an invalid length. [ 1693.116187][T25718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5157'. [ 1693.186578][T25734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1693.193163][T25734] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1693.202406][T25734] vhci_hcd vhci_hcd.0: Device attached [ 1693.217379][T25735] vhci_hcd: connection closed [ 1693.217820][T21582] vhci_hcd vhci_hcd.2: stop threads [ 1693.230956][T21582] vhci_hcd vhci_hcd.2: release socket [ 1693.236686][T21582] vhci_hcd vhci_hcd.2: disconnect device [ 1693.281811][T25745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.291536][T25745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.260119][T25789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.273871][T25789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.589328][T25791] sock: sock_timestamping_bind_phc: sock not bind to device [ 1694.615931][T25793] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1694.629143][T25793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1694.639744][T25793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1694.649953][T25793] bond0 (unregistering): Released all slaves [ 1694.833915][T25812] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5190'. [ 1694.846778][T25812] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5190'. [ 1694.856067][T25812] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5190'. [ 1694.865188][T25812] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5190'. [ 1694.893281][T25818] sock: sock_timestamping_bind_phc: sock not bind to device [ 1694.919812][T25821] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5194'. [ 1694.950973][T25823] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1694.957551][T25823] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1694.965794][T25823] vhci_hcd vhci_hcd.0: Device attached [ 1694.978774][T25824] usbip_core: unknown command [ 1694.983866][T25824] vhci_hcd: unknown pdu 0 [ 1694.988260][T25824] usbip_core: unknown command [ 1694.999507][T21568] vhci_hcd vhci_hcd.9: stop threads [ 1695.006812][T21568] vhci_hcd vhci_hcd.9: release socket [ 1695.012208][T21568] vhci_hcd vhci_hcd.9: disconnect device [ 1695.554945][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.563713][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.573282][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.581865][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.763993][T25851] sock: sock_timestamping_bind_phc: sock not bind to device [ 1695.776161][T25853] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1695.807828][T25855] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1695.814442][T25855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1695.832566][T25855] vhci_hcd vhci_hcd.0: Device attached [ 1695.839644][T25856] usbip_core: unknown command [ 1695.844687][T25856] vhci_hcd: unknown pdu 0 [ 1695.849154][T25856] usbip_core: unknown command [ 1695.892292][T21586] vhci_hcd vhci_hcd.6: stop threads [ 1695.897563][T21586] vhci_hcd vhci_hcd.6: release socket [ 1695.903337][T21586] vhci_hcd vhci_hcd.6: disconnect device [ 1696.281960][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1696.291024][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1697.101772][T25912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1697.108367][T25912] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1697.116937][T25912] vhci_hcd vhci_hcd.0: Device attached [ 1697.123838][T25913] usbip_core: unknown command [ 1697.129364][T25913] vhci_hcd: unknown pdu 0 [ 1697.134010][T25913] usbip_core: unknown command [ 1697.138993][T21594] vhci_hcd vhci_hcd.3: stop threads [ 1697.149445][T21594] vhci_hcd vhci_hcd.3: release socket [ 1697.161208][T21594] vhci_hcd vhci_hcd.3: disconnect device [ 1697.783434][T25948] tipc: Started in network mode [ 1697.788353][T25948] tipc: Node identity 4, cluster identity 4711 [ 1697.873762][T25948] tipc: Node number set to 4 [ 1698.026836][ T28] audit: type=1400 audit(1771894440.786:4904): avc: denied { create } for pid=25962 comm="syz.9.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1698.092393][ T28] audit: type=1400 audit(1771894440.806:4905): avc: denied { bind } for pid=25962 comm="syz.9.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1698.237490][T25975] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1698.244088][T25975] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1698.332315][T25975] vhci_hcd vhci_hcd.0: Device attached [ 1698.340947][T25976] vhci_hcd: connection closed [ 1698.358711][T21594] vhci_hcd vhci_hcd.9: stop threads [ 1698.377095][T21594] vhci_hcd vhci_hcd.9: release socket [ 1698.384034][T21594] vhci_hcd vhci_hcd.9: disconnect device [ 1698.802801][T25983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.811563][T25983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.898565][ T28] audit: type=1400 audit(1771894441.656:4906): avc: denied { read } for pid=25992 comm="syz.7.5256" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1698.924091][ T28] audit: type=1400 audit(1771894441.686:4907): avc: denied { open } for pid=25992 comm="syz.7.5256" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1698.948171][ T28] audit: type=1400 audit(1771894441.686:4908): avc: denied { ioctl } for pid=25992 comm="syz.7.5256" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1698.997009][T25999] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1699.032074][T26003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.041591][T26003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.059335][T26003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.069318][T26003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.114166][T26012] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1699.120712][T26012] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1699.128799][T26012] vhci_hcd vhci_hcd.0: Device attached [ 1699.135574][T26013] usbip_core: unknown command [ 1699.140275][T26013] vhci_hcd: unknown pdu 0 [ 1699.144843][T26013] usbip_core: unknown command [ 1699.149724][T21586] vhci_hcd vhci_hcd.9: stop threads [ 1699.155039][T21586] vhci_hcd vhci_hcd.9: release socket [ 1699.160440][T21586] vhci_hcd vhci_hcd.9: disconnect device [ 1699.597998][T26022] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1699.604602][T26022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1699.615040][T26022] vhci_hcd vhci_hcd.0: Device attached [ 1699.621728][T26024] vhci_hcd: connection closed [ 1699.621788][T21586] vhci_hcd vhci_hcd.7: stop threads [ 1699.632755][T21586] vhci_hcd vhci_hcd.7: release socket [ 1699.647544][T21586] vhci_hcd vhci_hcd.7: disconnect device [ 1699.679595][T26032] veth1_macvtap: left promiscuous mode [ 1699.685371][T26032] macsec0: entered promiscuous mode [ 1699.700216][T26032] veth1_macvtap: entered promiscuous mode [ 1699.707352][T26032] macsec0: left promiscuous mode [ 1699.720843][ T28] audit: type=1400 audit(1771894442.476:4909): avc: denied { ioctl } for pid=26035 comm="syz.9.5273" path="socket:[96895]" dev="sockfs" ino=96895 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1699.770683][T26043] syzkaller1: entered promiscuous mode [ 1699.776306][T26043] syzkaller1: entered allmulticast mode [ 1699.796625][ T28] audit: type=1400 audit(1771894442.556:4910): avc: denied { write } for pid=26044 comm="syz.3.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1699.796656][T26045] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.942946][T26058] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1699.949576][T26058] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1699.957400][T26058] vhci_hcd vhci_hcd.0: Device attached [ 1699.964694][T26059] usbip_core: unknown command [ 1699.969476][T26059] vhci_hcd: unknown pdu 0 [ 1699.974132][T26059] usbip_core: unknown command [ 1699.979020][T21586] vhci_hcd vhci_hcd.3: stop threads [ 1699.984829][T21586] vhci_hcd vhci_hcd.3: release socket [ 1699.990385][T21586] vhci_hcd vhci_hcd.3: disconnect device [ 1700.194586][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5285'. [ 1700.222511][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5285'. [ 1700.459729][T26092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5294'. [ 1700.479820][T26092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5294'. [ 1700.541398][T26092] ip6erspan0: entered allmulticast mode [ 1700.562199][T26094] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5295'. [ 1700.589074][T26094] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5295'. [ 1700.626568][T26094] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5295'. [ 1700.757866][T26108] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5302'. [ 1701.793874][T26115] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1701.800463][T26115] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1701.811731][T26108] team0: Port device bond0 removed [ 1701.813996][T26115] vhci_hcd vhci_hcd.0: Device attached [ 1701.826265][T26116] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 1701.833858][ T2175] vhci_hcd vhci_hcd.2: stop threads [ 1701.839483][T26108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.848157][ T2175] vhci_hcd vhci_hcd.2: release socket [ 1701.848180][ T2175] vhci_hcd vhci_hcd.2: disconnect device [ 1701.870258][T26108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.893172][T26108] bond0 (unregistering): Released all slaves [ 1701.905716][T26121] syzkaller1: entered promiscuous mode [ 1701.911957][T26121] syzkaller1: entered allmulticast mode [ 1701.947528][T26125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5309'. [ 1701.960898][T26125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5309'. [ 1702.492536][T26158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.615216][T26170] loop6: detected capacity change from 0 to 2048 [ 1702.634310][T26170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1702.652137][T26170] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1703.229627][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1703.315150][T26186] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1703.321736][T26186] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1703.351669][T26186] vhci_hcd vhci_hcd.0: Device attached [ 1703.370230][T26189] vhci_hcd: connection closed [ 1703.370853][T21582] vhci_hcd vhci_hcd.7: stop threads [ 1703.392874][T21582] vhci_hcd vhci_hcd.7: release socket [ 1703.398437][T21582] vhci_hcd vhci_hcd.7: disconnect device [ 1703.451321][T26208] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 1703.463205][ T28] audit: type=1400 audit(1771894446.216:4911): avc: denied { create } for pid=26207 comm="syz.9.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1703.485674][T26208] netlink: 'syz.2.5339': attribute type 2 has an invalid length. [ 1703.491175][ T28] audit: type=1400 audit(1771894446.226:4912): avc: denied { ioctl } for pid=26207 comm="syz.9.5338" path="socket:[97173]" dev="sockfs" ino=97173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1703.533587][T26214] loop3: detected capacity change from 0 to 2048 [ 1703.557049][T26214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1703.584999][T26214] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1703.796105][T26239] syzkaller0: entered promiscuous mode [ 1703.801775][T26239] syzkaller0: entered allmulticast mode [ 1703.907041][T26243] netlink: 'syz.7.5351': attribute type 1 has an invalid length. [ 1703.915536][T26243] netlink: 'syz.7.5351': attribute type 2 has an invalid length. [ 1704.140832][ T28] audit: type=1400 audit(1771894446.896:4913): avc: denied { ioctl } for pid=26260 comm="syz.2.5360" path="socket:[97923]" dev="sockfs" ino=97923 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1704.182520][T26261] syzkaller0: entered promiscuous mode [ 1704.188178][T26261] syzkaller0: entered allmulticast mode [ 1704.316367][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.599146][T26307] netlink: 'syz.3.5379': attribute type 1 has an invalid length. [ 1704.607828][T26307] netlink: 'syz.3.5379': attribute type 2 has an invalid length. [ 1704.828231][T26332] netlink: 'syz.3.5390': attribute type 1 has an invalid length. [ 1704.836401][T26332] netlink: 'syz.3.5390': attribute type 2 has an invalid length. [ 1705.495763][T26375] __nla_validate_parse: 12 callbacks suppressed [ 1705.495832][T26375] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5408'. [ 1705.511936][T26375] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5408'. [ 1705.521536][T26375] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5408'. [ 1705.729222][T26393] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5416'. [ 1705.909597][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5426'. [ 1705.929898][ T28] audit: type=1400 audit(1771894448.686:4914): avc: denied { mounton } for pid=26411 comm="syz.7.5425" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1706.107221][T26430] syzkaller0: entered promiscuous mode [ 1706.113396][T26430] syzkaller0: entered allmulticast mode [ 1706.187089][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5438'. [ 1706.518690][T26459] ieee802154 phy0 wpan0: encryption failed: -22 [ 1706.670966][T26468] syzkaller0: entered promiscuous mode [ 1706.688481][T26468] syzkaller0: entered allmulticast mode [ 1706.741389][T26476] netlink: 'syz.9.5455': attribute type 1 has an invalid length. [ 1706.749940][T26476] netlink: 'syz.9.5455': attribute type 2 has an invalid length. [ 1706.776130][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5455'. [ 1706.802980][T26485] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.797111][T26480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1709.891951][T26556] syzkaller0: entered promiscuous mode [ 1709.898188][T26556] syzkaller0: entered allmulticast mode [ 1709.960971][T26568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5491'. [ 1710.980835][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5519'. [ 1711.251425][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1712.167598][T26730] unsupported nlmsg_type 40 [ 1712.176575][T26728] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1712.186581][T26728] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1712.201727][T26728] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1712.252317][ T28] audit: type=1400 audit(1771894454.956:4915): avc: denied { bind } for pid=26727 comm="syz.2.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1712.273143][ T28] audit: type=1400 audit(1771894454.956:4916): avc: denied { map } for pid=26727 comm="syz.2.5561" path="socket:[99821]" dev="sockfs" ino=99821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1712.333017][T26730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.343052][T26730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.356983][T26734] netlink: 'syz.9.5562': attribute type 16 has an invalid length. [ 1712.365227][T26734] netlink: 'syz.9.5562': attribute type 17 has an invalid length. [ 1713.662356][T26734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1713.684731][T26751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5569'. [ 1713.703280][T26752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5569'. [ 1713.736743][T26753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5569'. [ 1713.863097][T26766] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1714.025375][T26791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1714.035137][T26791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1714.369768][T26807] syzkaller0: entered promiscuous mode [ 1714.375485][T26807] syzkaller0: entered allmulticast mode [ 1715.725180][T26845] syzkaller0: entered promiscuous mode [ 1715.730972][T26845] syzkaller0: entered allmulticast mode [ 1716.431741][T26859] loop3: detected capacity change from 0 to 2048 [ 1716.481382][T26859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.493867][T26859] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.548290][T26869] syzkaller1: entered promiscuous mode [ 1716.553868][T26869] syzkaller1: entered allmulticast mode [ 1716.807366][ T28] audit: type=1400 audit(1771894459.566:4917): avc: denied { create } for pid=26877 comm="syz.7.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1716.868345][T26776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1716.975793][T26884] __nla_validate_parse: 5 callbacks suppressed [ 1716.975821][T26884] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5621'. [ 1717.094666][T26893] syzkaller0: entered promiscuous mode [ 1717.100390][T26893] syzkaller0: entered allmulticast mode [ 1717.184575][T26899] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5628'. [ 1717.219286][T26899] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5628'. [ 1717.324501][T26907] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5632'. [ 1717.334076][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.353666][T26907] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5632'. [ 1717.363115][T26907] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5632'. [ 1717.372495][T26907] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5632'. [ 1717.433776][T26917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5636'. [ 1717.530205][T26928] syzkaller0: entered promiscuous mode [ 1717.542835][T26928] syzkaller0: entered allmulticast mode [ 1717.554913][T26933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1717.564703][T26933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1717.655427][ T28] audit: type=1400 audit(1771894460.416:4918): avc: denied { create } for pid=26936 comm="syz.9.5644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1717.682877][ T28] audit: type=1400 audit(1771894460.446:4919): avc: denied { setopt } for pid=26936 comm="syz.9.5644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1717.733525][T26944] loop3: detected capacity change from 0 to 2048 [ 1717.834940][T26944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1717.847934][T26944] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.440676][T26954] syzkaller1: entered promiscuous mode [ 1718.446376][T26954] syzkaller1: entered allmulticast mode [ 1718.513562][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.480136][T26968] syzkaller0: entered promiscuous mode [ 1719.485741][T26968] syzkaller0: entered allmulticast mode [ 1720.325198][T26910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1720.424974][T26999] macsec0: entered allmulticast mode [ 1720.432327][T26999] veth1_macvtap: entered allmulticast mode [ 1720.461332][T27002] loop2: detected capacity change from 0 to 2048 [ 1720.503641][T27004] syzkaller0: entered promiscuous mode [ 1720.509333][T27004] syzkaller0: entered allmulticast mode [ 1720.551377][T27002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1720.599442][T27002] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1721.239315][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.392807][T27043] syzkaller0: entered promiscuous mode [ 1721.398485][T27043] syzkaller0: entered allmulticast mode [ 1721.856608][T27066] syzkaller0: entered promiscuous mode [ 1721.862372][T27066] syzkaller0: entered allmulticast mode [ 1723.711471][T27024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1723.790656][T27076] __nla_validate_parse: 16 callbacks suppressed [ 1723.790678][T27076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1723.830514][T27078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1723.844163][T27082] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5692'. [ 1723.893195][T27087] syzkaller0: entered promiscuous mode [ 1723.898731][T27087] syzkaller0: entered allmulticast mode [ 1723.943714][ T28] audit: type=1400 audit(1771894466.696:4920): avc: denied { bind } for pid=27090 comm="syz.2.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1723.989432][T27088] netlink: 'syz.6.5693': attribute type 33 has an invalid length. [ 1723.997427][T27088] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5693'. [ 1724.006501][T27091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1724.016682][T27093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1724.032718][T27091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1724.039587][ T28] audit: type=1400 audit(1771894466.796:4921): avc: denied { write } for pid=27090 comm="syz.2.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1724.061812][T27091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1724.107214][T27098] syzkaller1: entered promiscuous mode [ 1724.112846][T27098] syzkaller1: entered allmulticast mode [ 1724.211637][T27108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5701'. [ 1724.227654][T27108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5701'. [ 1724.574504][T27150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.588805][T27150] macvlan2: entered promiscuous mode [ 1724.596011][T27150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1724.752779][T27160] loop9: detected capacity change from 0 to 2048 [ 1724.771309][T27160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1724.797689][T27160] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1724.922386][T27176] netlink: 'syz.3.5728': attribute type 1 has an invalid length. [ 1725.065275][ T2175] bridge0: port 3(dummy0) entered disabled state [ 1725.128299][T27187] syzkaller0: entered promiscuous mode [ 1725.137206][T27187] syzkaller0: entered allmulticast mode [ 1725.147623][T27187] 0: reclassify loop, rule prio 0, protocol 700 [ 1725.358148][T27213] tipc: Started in network mode [ 1725.363473][T27213] tipc: Node identity a66c8d1d45fe, cluster identity 4711 [ 1725.370908][T27213] tipc: Enabled bearer , priority 0 [ 1725.397354][T27213] syzkaller0: entered promiscuous mode [ 1725.403206][T27213] syzkaller0: entered allmulticast mode [ 1725.409728][T27213] tipc: Resetting bearer [ 1725.434992][T27211] tipc: Resetting bearer [ 1725.449568][T27211] tipc: Disabling bearer [ 1725.564930][T24993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.626584][ T28] audit: type=1400 audit(1771894468.386:4922): avc: denied { write } for pid=27225 comm="syz.3.5748" path="socket:[101842]" dev="sockfs" ino=101842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1725.653471][ T28] audit: type=1400 audit(1771894468.416:4923): avc: denied { getopt } for pid=27225 comm="syz.3.5748" laddr=fe80::e lport=32810 faddr=fe80::20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1726.587515][T27267] syzkaller1: entered promiscuous mode [ 1726.595916][T27267] syzkaller1: entered allmulticast mode [ 1726.847196][T27302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1726.888499][T27309] syzkaller1: entered promiscuous mode [ 1726.895675][T27309] syzkaller1: entered allmulticast mode [ 1727.061719][T27329] tipc: Started in network mode [ 1727.067205][T27329] tipc: Node identity 66bfebfa8f81, cluster identity 4711 [ 1727.074954][T27329] tipc: Enabled bearer , priority 0 [ 1727.117764][T27329] syzkaller0: entered promiscuous mode [ 1727.123535][T27329] syzkaller0: entered allmulticast mode [ 1727.130095][T27329] tipc: Resetting bearer [ 1727.149648][T21586] tipc: Resetting bearer [ 1727.171651][T27328] tipc: Resetting bearer [ 1727.184409][T27328] tipc: Disabling bearer [ 1727.192013][T27340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.229964][T27345] tipc: Started in network mode [ 1727.236074][T27345] tipc: Node identity 82bda1e44522, cluster identity 4711 [ 1727.244193][T27345] tipc: Enabled bearer , priority 0 [ 1727.255080][T27345] tipc: Resetting bearer [ 1727.262933][T27344] tipc: Disabling bearer [ 1727.384953][T27365] syzkaller0: entered promiscuous mode [ 1727.390595][T27365] syzkaller0: entered allmulticast mode [ 1727.399977][T27365] 0: reclassify loop, rule prio 0, protocol 800 [ 1727.401803][T27362] netlink: 'syz.2.5800': attribute type 1 has an invalid length. [ 1727.414382][T27362] netlink: 'syz.2.5800': attribute type 2 has an invalid length. [ 1727.613012][T27383] syzkaller0: entered promiscuous mode [ 1727.622309][T27383] syzkaller0: entered allmulticast mode [ 1727.626727][T27388] loop2: detected capacity change from 0 to 2048 [ 1727.647464][T27388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.677421][T27388] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1727.871114][T27420] syzkaller0: entered promiscuous mode [ 1727.876784][T27420] syzkaller0: entered allmulticast mode [ 1727.944423][T27428] syzkaller0: entered promiscuous mode [ 1727.951694][T27428] syzkaller0: entered allmulticast mode [ 1728.086736][T27449] syzkaller0: entered promiscuous mode [ 1728.095187][T27449] syzkaller0: entered allmulticast mode [ 1728.117573][T27449] tipc: Started in network mode [ 1728.124587][T27449] tipc: Node identity 92dd1f4b0328, cluster identity 4711 [ 1728.139268][T27449] tipc: Enabled bearer , priority 0 [ 1728.172778][T27448] tipc: Resetting bearer [ 1728.196195][T27448] tipc: Disabling bearer [ 1728.272688][T27471] syzkaller0: entered promiscuous mode [ 1728.278370][T27471] syzkaller0: entered allmulticast mode [ 1728.387720][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.198884][T27534] syzkaller0: entered promiscuous mode [ 1729.204837][T27534] syzkaller0: entered allmulticast mode [ 1729.326332][T27547] __nla_validate_parse: 41 callbacks suppressed [ 1729.326353][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1729.344288][T27547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1729.353622][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1729.378659][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1730.261518][T27581] syzkaller0: entered promiscuous mode [ 1730.268184][T27581] syzkaller0: entered allmulticast mode [ 1730.370687][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1730.407308][T27594] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5886'. [ 1730.417520][T27594] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5886'. [ 1730.427221][T27594] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5886'. [ 1730.437533][T27594] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5886'. [ 1730.523444][T27603] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5889'. [ 1730.982055][T27638] tipc: Enabled bearer , priority 0 [ 1730.990986][T27637] tipc: Disabling bearer [ 1731.016937][T27640] syzkaller1: entered promiscuous mode [ 1731.022612][T27640] syzkaller1: entered allmulticast mode [ 1731.538058][T27701] syzkaller0: entered promiscuous mode [ 1731.544729][T27701] syzkaller0: entered allmulticast mode [ 1731.718732][T27719] tipc: Enabled bearer , priority 0 [ 1731.725840][T27720] syzkaller1: entered promiscuous mode [ 1731.731486][T27720] syzkaller1: entered allmulticast mode [ 1731.746157][T27718] tipc: Disabling bearer [ 1732.147391][T27748] tipc: Enabled bearer , priority 0 [ 1732.156911][T27747] tipc: Disabling bearer [ 1732.355568][T27759] loop7: detected capacity change from 0 to 2048 [ 1732.385219][T27759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1732.397637][T27759] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1732.443432][T27768] macvlan2: entered promiscuous mode [ 1732.449598][T27768] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1732.766707][T27780] tipc: Enabled bearer , priority 0 [ 1732.776221][T27779] tipc: Disabling bearer [ 1732.921833][T27792] syzkaller1: entered promiscuous mode [ 1732.927679][T27792] syzkaller1: entered allmulticast mode [ 1733.170086][T21357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1733.422074][T27807] syzkaller0: entered promiscuous mode [ 1733.427809][T27807] syzkaller0: entered allmulticast mode [ 1734.132848][T27827] syzkaller1: entered promiscuous mode [ 1734.138445][T27827] syzkaller1: entered allmulticast mode [ 1734.251745][T27831] syzkaller0: entered promiscuous mode [ 1734.257326][T27831] syzkaller0: entered allmulticast mode [ 1734.265063][T27831] 0: reclassify loop, rule prio 0, protocol 700 [ 1735.215442][T27849] __nla_validate_parse: 50 callbacks suppressed [ 1735.215470][T27849] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5989'. [ 1735.235374][T27849] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5989'. [ 1735.245406][T27849] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5989'. [ 1735.254966][T27849] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5989'. [ 1735.303245][T27853] syzkaller1: entered promiscuous mode [ 1735.308938][T27853] syzkaller1: entered allmulticast mode [ 1736.038199][T27795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1736.103468][T27866] syzkaller0: entered promiscuous mode [ 1736.109279][T27866] syzkaller0: entered allmulticast mode [ 1736.185556][T27879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6002'. [ 1736.203263][T27879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6002'. [ 1736.430825][T27906] loop3: detected capacity change from 0 to 2048 [ 1736.444578][T27906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1736.457434][T27906] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.026007][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6016'. [ 1737.037992][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6016'. [ 1737.047750][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6016'. [ 1737.058437][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6016'. [ 1737.227855][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.335652][T27957] tipc: Enabled bearer , priority 0 [ 1737.345146][T27956] tipc: Disabling bearer [ 1737.359602][T27959] tipc: Enabled bearer , priority 0 [ 1737.369042][T27959] tipc: Resetting bearer [ 1737.383137][T27958] tipc: Disabling bearer [ 1737.589279][T27990] tipc: Enabled bearer , priority 0 [ 1737.598269][T27989] tipc: Disabling bearer [ 1737.800264][T28024] tipc: Enabled bearer , priority 0 [ 1737.809488][T28022] tipc: Disabling bearer [ 1738.082670][T28060] tipc: Enabled bearer , priority 0 [ 1738.101769][T28059] tipc: Disabling bearer [ 1738.375827][T28100] tipc: Enabled bearer , priority 0 [ 1738.383277][T28101] tipc: Enabled bearer , priority 0 [ 1738.392026][T28101] tipc: Resetting bearer [ 1738.402997][T28099] tipc: Disabling bearer [ 1738.422531][T28098] tipc: Disabling bearer [ 1738.688350][T28143] tipc: Enabled bearer , priority 0 [ 1738.697867][T28141] tipc: Disabling bearer [ 1739.040575][T28185] tipc: Enabled bearer , priority 0 [ 1739.049418][T28185] tipc: Resetting bearer [ 1739.056740][T28184] tipc: Disabling bearer [ 1739.795830][T28269] syzkaller1: entered promiscuous mode [ 1739.801376][T28269] syzkaller1: entered allmulticast mode [ 1739.900116][T28273] syzkaller0: entered promiscuous mode [ 1739.905821][T28273] syzkaller0: entered allmulticast mode [ 1740.401243][T28303] syzkaller1: entered promiscuous mode [ 1740.407078][T28303] syzkaller1: entered allmulticast mode [ 1740.524437][T28318] __nla_validate_parse: 43 callbacks suppressed [ 1740.524461][T28318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6162'. [ 1740.744651][T28344] syzkaller1: entered promiscuous mode [ 1740.750262][T28344] syzkaller1: entered allmulticast mode [ 1741.426981][T28355] loop6: detected capacity change from 0 to 2048 [ 1741.445952][T28355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1741.458544][T28355] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.927652][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.007808][T28383] syzkaller1: entered promiscuous mode [ 1742.013544][T28383] syzkaller1: entered allmulticast mode [ 1742.085359][T28394] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6186'. [ 1742.249597][T28407] loop2: detected capacity change from 0 to 2048 [ 1742.273968][T28407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1742.294553][T28407] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.493664][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1743.509218][T28434] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6197'. [ 1743.626364][T28448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1743.637815][T28448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1743.647350][T28448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1743.688026][T28457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6205'. [ 1743.735000][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6208'. [ 1743.780832][T28468] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6210'. [ 1745.040835][T28511] syzkaller0: entered promiscuous mode [ 1745.058556][T28511] syzkaller0: entered allmulticast mode [ 1747.948661][T28508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1748.038371][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 1748.134999][ T28] audit: type=1400 audit(1771894490.896:4924): avc: denied { create } for pid=28567 comm="syz.6.6241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1748.193141][T28568] netlink: 'syz.6.6241': attribute type 1 has an invalid length. [ 1748.226347][T28575] syzkaller0: entered promiscuous mode [ 1748.234003][T28575] syzkaller0: entered allmulticast mode [ 1748.244018][T28568] veth0: entered promiscuous mode [ 1748.304169][T28568] veth0: left promiscuous mode [ 1748.354351][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6249'. [ 1748.392628][T28593] netlink: 'syz.2.6250': attribute type 1 has an invalid length. [ 1748.455963][ T28] audit: type=1400 audit(1771894491.216:4925): avc: denied { ioctl } for pid=28598 comm="syz.6.6252" path="pid:[4026532400]" dev="nsfs" ino=4026532400 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1749.465017][ T2175] bridge_slave_1: left allmulticast mode [ 1749.470691][ T2175] bridge_slave_1: left promiscuous mode [ 1749.476469][ T2175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.484316][ T2175] bridge_slave_0: left allmulticast mode [ 1749.490009][ T2175] bridge_slave_0: left promiscuous mode [ 1749.495758][ T2175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.734569][ T2175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.745106][ T2175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.755002][ T2175] bond0 (unregistering): Released all slaves [ 1749.796736][ T2175] hsr_slave_0: left promiscuous mode [ 1749.802469][ T2175] hsr_slave_1: left promiscuous mode [ 1749.808190][ T2175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.815677][ T2175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.826254][ T2175] veth1_macvtap: left promiscuous mode [ 1749.831830][ T2175] veth0_macvtap: left promiscuous mode [ 1749.837926][ T2175] veth1_vlan: left promiscuous mode [ 1749.843391][ T2175] veth0_vlan: left promiscuous mode [ 1749.908001][ T2175] team0 (unregistering): Port device team_slave_1 removed [ 1749.917998][ T2175] team0 (unregistering): Port device team_slave_0 removed [ 1750.187527][ T2175] IPVS: stop unused estimator thread 0... [ 1751.181593][T28577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1751.249124][T28638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1751.321894][T28647] loop6: detected capacity change from 0 to 2048 [ 1751.370444][T28647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1751.392177][T28647] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1751.522630][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1751.742277][ T28] audit: type=1400 audit(1771894494.496:4926): avc: denied { setopt } for pid=28698 comm="syz.2.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1751.773471][ T28] audit: type=1400 audit(1771894494.526:4927): avc: denied { bind } for pid=28698 comm="syz.2.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1753.522155][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6306'. [ 1753.612505][T28741] syzkaller0: entered promiscuous mode [ 1753.618040][T28741] syzkaller0: entered allmulticast mode [ 1753.820276][T28755] syzkaller0: entered promiscuous mode [ 1753.826379][T28755] syzkaller0: entered allmulticast mode [ 1754.389038][T28660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1754.503933][T28767] syzkaller0: entered promiscuous mode [ 1754.509565][T28767] syzkaller0: entered allmulticast mode [ 1754.566483][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6320'. [ 1754.849052][T28801] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6332'. [ 1754.863900][T28799] syzkaller0: entered promiscuous mode [ 1754.872901][T28799] syzkaller0: entered allmulticast mode [ 1755.053946][T28821] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6343'. [ 1755.155717][T28835] syzkaller0: entered promiscuous mode [ 1755.162176][T28835] syzkaller0: entered allmulticast mode [ 1755.277201][T28844] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6352'. [ 1755.332714][T28845] syzkaller0: entered promiscuous mode [ 1755.338342][T28845] syzkaller0: entered allmulticast mode [ 1755.371604][T28850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1755.387697][T28850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1755.397087][T28850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1755.455382][T28856] netlink: 'syz.7.6358': attribute type 1 has an invalid length. [ 1755.514462][T28866] syzkaller0: entered promiscuous mode [ 1755.520716][T28866] syzkaller0: entered allmulticast mode [ 1755.593447][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6366'. [ 1755.641106][T28883] syzkaller0: entered promiscuous mode [ 1755.649947][T28883] syzkaller0: entered allmulticast mode [ 1755.666011][ T28] audit: type=1400 audit(1771894498.426:4928): avc: denied { setopt } for pid=28886 comm="syz.9.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1755.666400][T28888] netlink: 'syz.9.6371': attribute type 1 has an invalid length. [ 1755.700010][T28888] netlink: 'syz.9.6371': attribute type 2 has an invalid length. [ 1755.709447][T28889] syzkaller0: entered promiscuous mode [ 1755.714984][T28889] syzkaller0: entered allmulticast mode [ 1755.938257][T28907] syzkaller0: entered promiscuous mode [ 1755.952672][T28907] syzkaller0: entered allmulticast mode [ 1755.989706][T28914] netlink: 'syz.7.6382': attribute type 1 has an invalid length. [ 1756.082730][T28921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6384'. [ 1756.182084][T28936] syzkaller0: entered promiscuous mode [ 1756.190133][T28936] syzkaller0: entered allmulticast mode [ 1756.305616][T28946] syzkaller0: entered promiscuous mode [ 1756.322412][T28946] syzkaller0: entered allmulticast mode [ 1756.363601][T28958] netlink: 'syz.9.6400': attribute type 1 has an invalid length. [ 1756.424155][ T28] audit: type=1400 audit(1771894499.186:4929): avc: denied { create } for pid=28952 comm="syz.2.6398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1756.464490][T28961] syzkaller0: entered promiscuous mode [ 1756.477770][T28961] syzkaller0: entered allmulticast mode [ 1756.550824][T28976] syzkaller0: entered promiscuous mode [ 1756.562592][T28976] syzkaller0: entered allmulticast mode [ 1756.571860][T28980] syzkaller0: entered promiscuous mode [ 1756.580304][T28980] syzkaller0: entered allmulticast mode [ 1756.647287][T28995] syzkaller0: entered promiscuous mode [ 1756.653025][T28995] syzkaller0: entered allmulticast mode [ 1756.920020][T29036] loop3: detected capacity change from 0 to 2048 [ 1756.940006][T29036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1756.956236][T29036] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1756.980860][T29046] syzkaller0: entered promiscuous mode [ 1756.986648][T29046] syzkaller0: entered allmulticast mode [ 1756.994787][T29044] syzkaller0: entered promiscuous mode [ 1757.000623][T29044] syzkaller0: entered allmulticast mode [ 1757.152182][ T28] audit: type=1400 audit(1771894499.906:4930): avc: denied { ioctl } for pid=29059 comm="syz.2.6438" path="socket:[108257]" dev="sockfs" ino=108257 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1757.187101][T29062] netlink: 'syz.9.6439': attribute type 1 has an invalid length. [ 1757.361122][T29080] syzkaller0: entered promiscuous mode [ 1757.367020][T29080] syzkaller0: entered allmulticast mode [ 1757.704468][T29128] syzkaller0: entered promiscuous mode [ 1757.710070][T29128] syzkaller0: entered allmulticast mode [ 1757.725238][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.836283][T29149] tipc: Enabling of bearer rejected, failed to enable media [ 1758.006307][T29174] loop3: detected capacity change from 0 to 2048 [ 1758.038556][T29174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1758.053631][T29174] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1758.121107][T29191] syzkaller0: entered promiscuous mode [ 1758.126873][T29191] syzkaller0: entered allmulticast mode [ 1758.266752][T29196] tipc: Enabling of bearer rejected, failed to enable media [ 1758.473722][T29233] netlink: 'syz.6.6493': attribute type 1 has an invalid length. [ 1758.487862][T29233] bond0: entered promiscuous mode [ 1758.493396][T29233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.510246][T29234] syzkaller0: entered promiscuous mode [ 1758.516828][T29234] syzkaller0: entered allmulticast mode [ 1758.530135][T29233] bond0: (slave bridge4): making interface the new active one [ 1758.537968][T29233] bridge4: entered promiscuous mode [ 1758.545006][T29233] bridge4: left promiscuous mode [ 1758.711342][T29246] __nla_validate_parse: 11 callbacks suppressed [ 1758.711363][T29246] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6498'. [ 1758.782651][T22422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.796919][T29255] tipc: Enabling of bearer rejected, failed to enable media [ 1758.888275][T29262] syzkaller0: entered promiscuous mode [ 1758.895744][T29262] syzkaller0: entered allmulticast mode [ 1759.088996][T29277] syzkaller0: entered promiscuous mode [ 1759.094716][T29277] syzkaller0: entered allmulticast mode [ 1759.269712][T29297] tipc: Enabling of bearer rejected, failed to enable media [ 1759.396688][T29299] loop9: detected capacity change from 0 to 2048 [ 1759.430002][T29299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1759.444255][T29299] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1759.536619][T29316] syzkaller0: entered promiscuous mode [ 1759.552822][T29316] syzkaller0: entered allmulticast mode [ 1759.640704][T29323] syzkaller0: entered promiscuous mode [ 1759.646396][T29323] syzkaller0: entered allmulticast mode [ 1759.876874][T29344] tipc: Enabling of bearer rejected, failed to enable media [ 1760.095913][T24993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.151619][T29367] netlink: 'syz.7.6534': attribute type 3 has an invalid length. [ 1760.159616][T29367] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6534'. [ 1760.238635][T29371] syzkaller0: entered promiscuous mode [ 1760.253822][T29371] syzkaller0: entered allmulticast mode [ 1760.640581][T29385] syzkaller0: entered promiscuous mode [ 1760.654390][T29385] syzkaller0: entered allmulticast mode [ 1760.831407][T29402] loop6: detected capacity change from 0 to 2048 [ 1760.844277][T29402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1760.861194][T29402] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1761.596917][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.695735][T29416] syzkaller0: entered promiscuous mode [ 1761.701440][T29416] syzkaller0: entered allmulticast mode [ 1761.727367][T29426] tipc: Enabling of bearer rejected, failed to enable media [ 1761.855857][T29440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6554'. [ 1761.921248][T29443] loop6: detected capacity change from 0 to 2048 [ 1761.962452][T29443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1761.983386][T29443] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.070222][T29448] syzkaller0: entered promiscuous mode [ 1762.075827][T29448] syzkaller0: entered allmulticast mode [ 1762.157875][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6564'. [ 1763.284068][T20314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.327089][T29470] syzkaller0: entered promiscuous mode [ 1763.332713][T29470] syzkaller0: entered allmulticast mode [ 1763.407463][T29476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6568'. [ 1763.476590][T29480] tipc: Enabling of bearer rejected, failed to enable media [ 1763.641381][T29499] netlink: 'syz.3.6573': attribute type 3 has an invalid length. [ 1763.649621][T29499] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6573'. [ 1763.712433][T29505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6575'. [ 1763.790529][T29507] syzkaller0: entered promiscuous mode [ 1763.819966][T29507] syzkaller0: entered allmulticast mode [ 1764.733630][T29511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1764.758597][T29517] syzkaller0: entered promiscuous mode [ 1764.764501][T29517] syzkaller0: entered allmulticast mode [ 1764.773780][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1764.835600][T29527] tipc: Enabling of bearer rejected, failed to enable media [ 1764.892707][T29536] netlink: 'syz.7.6587': attribute type 1 has an invalid length. [ 1764.922553][T29540] netlink: 'syz.6.6588': attribute type 1 has an invalid length. [ 1764.934620][T29536] bond1: entered promiscuous mode [ 1764.939891][T29536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1764.969900][T29543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6589'. [ 1764.988902][T29540] bond1: entered promiscuous mode [ 1764.994682][T29540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1765.040396][T29540] bond1: (slave bridge5): making interface the new active one [ 1765.056640][T29540] bridge5: entered promiscuous mode [ 1765.063751][T29540] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 1766.005541][T29563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6595'. [ 1766.070705][T29580] syzkaller0: entered promiscuous mode [ 1766.093740][T29580] syzkaller0: entered allmulticast mode [ 1766.113412][T29582] syzkaller0: entered promiscuous mode [ 1766.118962][T29582] syzkaller0: entered allmulticast mode [ 1766.213085][T29594] netlink: 'syz.2.6603': attribute type 1 has an invalid length. [ 1766.305190][T29607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1767.188199][T29615] chnl_net:caif_netlink_parms(): no params data found [ 1767.226241][T29615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.234236][T29615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.241492][T29615] bridge_slave_0: entered allmulticast mode [ 1767.248173][T29615] bridge_slave_0: entered promiscuous mode [ 1767.255628][T29615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.262926][T29615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.270105][T29615] bridge_slave_1: entered allmulticast mode [ 1767.276904][T29615] bridge_slave_1: entered promiscuous mode [ 1767.294386][T29615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.305006][T29615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.324288][T29615] team0: Port device team_slave_0 added [ 1767.331073][T29615] team0: Port device team_slave_1 added [ 1767.347541][T29615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.354673][T29615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.380998][T29615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.392805][T29615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.399757][T29615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.425955][T29615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.451950][T29615] hsr_slave_0: entered promiscuous mode [ 1767.458095][T29615] hsr_slave_1: entered promiscuous mode [ 1767.466611][T29615] debugfs: 'hsr0' already exists in 'hsr' [ 1767.472422][T29615] Cannot create hsr debugfs directory [ 1767.528403][T29615] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.575211][T29615] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.645574][T29615] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.685670][T29615] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.038292][T29575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1769.061795][T29615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1769.087530][T29615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1769.109240][T29615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1769.182793][T29615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1769.200062][T29643] syzkaller0: entered promiscuous mode [ 1769.205991][T29643] syzkaller0: entered allmulticast mode [ 1769.225549][T29641] syzkaller0: entered promiscuous mode [ 1769.231188][T29641] syzkaller0: entered allmulticast mode [ 1769.293180][T29615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.317114][T29615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.344222][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.351348][ T2175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.390910][T29655] tipc: Enabling of bearer rejected, failed to enable media [ 1769.411572][ T2175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.418790][ T2175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.477821][T29615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1769.506981][T29615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1769.596924][T29678] syzkaller0: entered promiscuous mode [ 1769.602843][T29678] syzkaller0: entered allmulticast mode [ 1769.618009][T29685] syzkaller0: entered promiscuous mode [ 1769.623738][T29685] syzkaller0: entered allmulticast mode [ 1769.659709][T29615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1769.743375][T29701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1769.825460][T29706] syzkaller0: entered promiscuous mode [ 1769.831090][T29706] syzkaller0: entered allmulticast mode [ 1769.843401][T29705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6632'. [ 1769.934055][T29615] veth0_vlan: entered promiscuous mode [ 1769.955763][T29727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6637'. [ 1769.962896][T29615] veth1_vlan: entered promiscuous mode [ 1770.008557][T29615] veth0_macvtap: entered promiscuous mode [ 1770.028927][T29615] veth1_macvtap: entered promiscuous mode [ 1770.058444][T29615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1770.091348][T29615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1770.116637][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1770.156973][T21568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.172245][T21568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.181009][T21568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.196868][T21568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.243383][ T28] audit: type=1400 audit(1771894512.996:4931): avc: denied { mount } for pid=29615 comm="syz-executor" name="/" dev="gadgetfs" ino=42213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1770.275648][T29753] syzkaller0: entered promiscuous mode [ 1770.281434][T29753] syzkaller0: entered allmulticast mode [ 1770.334439][T29760] syzkaller0: entered promiscuous mode [ 1770.340034][T29760] syzkaller0: entered allmulticast mode [ 1770.398723][T29768] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6652'. [ 1770.524185][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6659'. [ 1770.676030][T29802] syzkaller0: entered promiscuous mode [ 1770.681574][T29802] syzkaller0: entered allmulticast mode [ 1770.806107][T29819] syzkaller0: entered promiscuous mode [ 1770.811669][T29819] syzkaller0: entered allmulticast mode [ 1770.885311][T29833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6678'. [ 1771.031389][T29848] syzkaller0: entered promiscuous mode [ 1771.052386][T29848] syzkaller0: entered allmulticast mode [ 1771.081944][T29788] chnl_net:caif_netlink_parms(): no params data found [ 1771.117948][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6693'. [ 1771.134918][T29866] syzkaller0: entered promiscuous mode [ 1771.140525][T29866] syzkaller0: entered allmulticast mode [ 1771.151401][T29868] vlan2: entered promiscuous mode [ 1771.157354][T29868] syz_tun: entered promiscuous mode [ 1771.205792][T29788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.217884][T29788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.226814][T29788] bridge_slave_0: entered allmulticast mode [ 1771.233598][T29788] bridge_slave_0: entered promiscuous mode [ 1771.249929][T29788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.275499][T29788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.283018][T29788] bridge_slave_1: entered allmulticast mode [ 1771.289766][T29788] bridge_slave_1: entered promiscuous mode [ 1771.365042][T29788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.388785][T29788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.412854][T29901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6705'. [ 1771.440608][T29788] team0: Port device team_slave_0 added [ 1771.449803][T29788] team0: Port device team_slave_1 added [ 1771.456554][T29897] syzkaller0: entered promiscuous mode [ 1771.462064][T29897] syzkaller0: entered allmulticast mode [ 1771.507096][T29788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.514631][T29788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.541489][T29788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.560933][T29788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.570943][T29788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.597927][T29788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.646721][T29788] hsr_slave_0: entered promiscuous mode [ 1771.657566][T29788] hsr_slave_1: entered promiscuous mode [ 1771.663793][T29788] debugfs: 'hsr0' already exists in 'hsr' [ 1771.669766][T29788] Cannot create hsr debugfs directory [ 1771.777201][T29935] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6718'. [ 1771.843387][T29788] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.904067][T29944] syzkaller0: entered promiscuous mode [ 1771.909581][T29944] syzkaller0: entered allmulticast mode [ 1771.962648][T29788] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.037430][T29788] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.143482][T29788] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.183426][T29986] netlink: 'syz.6.6736': attribute type 1 has an invalid length. [ 1772.202356][T29986] batman_adv: batadv0: Adding interface: bridge1 [ 1772.208735][T29986] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.236765][T29986] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 1772.283857][T29988] syzkaller0: entered promiscuous mode [ 1772.289388][T29988] syzkaller0: entered allmulticast mode [ 1772.353783][T29788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1772.438005][T29788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1772.450629][T29788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1772.463080][T29788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1772.525671][T30021] syzkaller0: entered promiscuous mode [ 1772.531206][T30021] syzkaller0: entered allmulticast mode [ 1772.552997][T30029] netlink: 'syz.6.6751': attribute type 1 has an invalid length. [ 1772.701287][T29788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.713898][T29788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1772.724819][T21568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.732075][T21568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1772.745267][T21592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.752465][T21592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.830781][T29788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.965373][T29788] veth0_vlan: entered promiscuous mode [ 1772.975413][T29788] veth1_vlan: entered promiscuous mode [ 1772.992967][T29788] veth0_macvtap: entered promiscuous mode [ 1773.000720][T29788] veth1_macvtap: entered promiscuous mode [ 1773.013007][T29788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.024979][T29788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.037330][T21592] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.046886][T21586] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.057106][T21586] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.067218][T21586] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.261436][T30086] syzkaller0: entered promiscuous mode [ 1773.267122][T30086] syzkaller0: entered allmulticast mode [ 1774.751373][T30088] loop7: detected capacity change from 0 to 2048 [ 1774.767689][T30088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1774.780030][T30088] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1775.583160][T29788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1775.655281][T30043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1775.743117][T30105] netlink: 'syz.6.6768': attribute type 1 has an invalid length. [ 1775.850310][T30115] syzkaller0: entered promiscuous mode [ 1775.856016][T30115] syzkaller0: entered allmulticast mode [ 1775.896668][T30117] loop6: detected capacity change from 0 to 2048 [ 1775.919587][T30117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1775.941216][T30117] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.060992][T30141] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1776.076682][T30143] netlink: 'syz.3.6785': attribute type 1 has an invalid length. [ 1776.091909][T30143] bond0: entered promiscuous mode [ 1776.097347][T30143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.166746][ T28] audit: type=1400 audit(1771894518.926:4932): avc: denied { setopt } for pid=30144 comm="syz.2.6786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1776.187380][T30151] __nla_validate_parse: 2 callbacks suppressed [ 1776.187402][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1776.288088][T30157] syzkaller0: entered promiscuous mode [ 1776.293849][T30157] syzkaller0: entered allmulticast mode [ 1776.515385][T30191] netlink: 'syz.9.6805': attribute type 1 has an invalid length. [ 1776.681203][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.708177][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.715060][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.760194][T30210] infiniband syz2: set active [ 1776.765028][T15483] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.771482][T30210] infiniband syz2: added ip6_vti0 [ 1776.794744][T29615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.809944][T30210] RDS/IB: syz2: added [ 1776.821474][T30210] smc: adding ib device syz2 with port count 1 [ 1776.828262][T30210] smc: ib device syz2 port 1 has no pnetid [ 1776.834696][ T3406] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.841523][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.892946][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1776.931456][T30224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6817'. [ 1776.990341][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1777.103495][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1777.149335][T30242] netlink: 'syz.6.6826': attribute type 1 has an invalid length. [ 1777.195014][T30242] bond1: entered promiscuous mode [ 1777.206575][T30244] loop2: detected capacity change from 0 to 2048 [ 1777.215771][T30242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1777.237070][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1777.238595][T30244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1777.255888][T30244] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1777.306726][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1777.364266][T30210] ip6_vti0 speed is unknown, defaulting to 1000 [ 1777.375093][T30259] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6830'. [ 1777.460002][T30264] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6833'. [ 1777.500372][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6832'. [ 1777.748860][T30290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4880 sclass=netlink_route_socket pid=30290 comm=syz.3.6843 [ 1777.800944][T30293] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6846'. [ 1778.084043][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1778.136574][T30319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17168 sclass=netlink_route_socket pid=30319 comm=syz.6.6855 [ 1778.169203][T30323] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1778.347651][T30343] loop2: detected capacity change from 0 to 2048 [ 1778.380545][T30345] netlink: 'syz.3.6870': attribute type 1 has an invalid length. [ 1778.389545][T30339] syzkaller0: entered promiscuous mode [ 1778.403284][T30343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1778.417104][T30339] syzkaller0: entered allmulticast mode [ 1778.423515][T30343] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.444926][T30345] bond1: entered promiscuous mode [ 1778.450294][T30345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1778.494309][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.003709][T30368] ip6_vti0 speed is unknown, defaulting to 1000 [ 1779.011372][T30384] loop2: detected capacity change from 0 to 2048 [ 1779.038400][T30384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1779.066843][T30384] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.122967][T30368] chnl_net:caif_netlink_parms(): no params data found [ 1779.202717][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.243817][T30392] syzkaller0: entered promiscuous mode [ 1779.250036][T30392] syzkaller0: entered allmulticast mode [ 1779.329004][T30368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.336568][T30368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.344228][T30368] bridge_slave_0: entered allmulticast mode [ 1779.350881][T30368] bridge_slave_0: entered promiscuous mode [ 1779.362499][T30368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.380696][T30368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.389001][T30368] bridge_slave_1: entered allmulticast mode [ 1779.397136][T30368] bridge_slave_1: entered promiscuous mode [ 1779.453110][T30368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.464709][T30368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1779.489983][T30417] loop2: detected capacity change from 0 to 2048 [ 1779.503796][T30368] team0: Port device team_slave_0 added [ 1779.516805][T30368] team0: Port device team_slave_1 added [ 1779.524198][T30417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1779.540101][T30417] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.558863][T30368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1779.569265][T30368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1779.598059][T30368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1779.610265][T30368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1779.617296][T30368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1779.645644][T30368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.656925][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.699243][T30368] hsr_slave_0: entered promiscuous mode [ 1779.706609][T30368] hsr_slave_1: entered promiscuous mode [ 1779.712838][T30368] debugfs: 'hsr0' already exists in 'hsr' [ 1779.718665][T30368] Cannot create hsr debugfs directory [ 1779.790015][T30430] syzkaller0: entered promiscuous mode [ 1779.804292][T30430] syzkaller0: entered allmulticast mode [ 1779.868229][T30368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.962715][T30434] syzkaller0: entered promiscuous mode [ 1779.968292][T30434] syzkaller0: entered allmulticast mode [ 1779.980780][T30368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.019002][T30368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.083825][T30443] netlink: 'syz.9.6902': attribute type 1 has an invalid length. [ 1780.100564][T30368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.103506][T30443] netlink: 'syz.9.6902': attribute type 2 has an invalid length. [ 1780.188951][T30368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1780.213966][T30448] loop9: detected capacity change from 0 to 2048 [ 1780.225632][T30368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1780.238781][T30368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1780.248982][T30368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1780.284196][T30448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1780.297552][T30448] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1780.385961][T30368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1780.401261][T30368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1780.412358][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.419566][ T2175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1780.433473][T21592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.440597][T21592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1780.499963][T30450] syzkaller0: entered promiscuous mode [ 1780.506043][T30450] syzkaller0: entered allmulticast mode [ 1780.897110][T30368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1781.106960][T30368] veth0_vlan: entered promiscuous mode [ 1781.132984][T24993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1781.179159][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6912'. [ 1781.197907][T30368] veth1_vlan: entered promiscuous mode [ 1781.247866][T30368] veth0_macvtap: entered promiscuous mode [ 1781.277060][T30368] veth1_macvtap: entered promiscuous mode [ 1781.299790][T30368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.309685][T30504] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1781.327399][T30368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.348530][T21582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.370186][T21582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.386935][T21592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.403180][T21592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.414774][T30507] syzkaller0: entered promiscuous mode [ 1781.420353][T30507] syzkaller0: entered allmulticast mode [ 1781.601781][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6924'. [ 1781.675141][T30540] syzkaller0: entered promiscuous mode [ 1781.680771][T30540] syzkaller0: entered allmulticast mode [ 1781.836777][T30551] syzkaller0: entered promiscuous mode [ 1781.855018][T30551] syzkaller0: entered allmulticast mode [ 1781.926116][T30572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6942'. [ 1781.953997][T30574] syzkaller0: entered promiscuous mode [ 1781.959705][T30574] syzkaller0: entered allmulticast mode [ 1785.436524][T30640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1785.577544][T30701] loop6: detected capacity change from 0 to 2048 [ 1785.604161][T30701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1785.617091][T30701] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1785.704574][T30715] syzkaller0: entered promiscuous mode [ 1785.732360][T30715] syzkaller0: entered allmulticast mode [ 1785.750245][T29615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.438108][T30740] netlink: 'syz.7.7004': attribute type 1 has an invalid length. [ 1786.452062][T30740] bond1: entered promiscuous mode [ 1786.457398][T30740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1786.522953][T30745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7006'. [ 1786.634928][T30757] loop2: detected capacity change from 0 to 2048 [ 1786.660284][T30757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1786.673003][T30757] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.709874][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.908395][T30773] syzkaller0: entered promiscuous mode [ 1786.914089][T30773] syzkaller0: entered allmulticast mode [ 1788.590659][T30777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7017'. [ 1788.655865][T30785] syzkaller0: entered promiscuous mode [ 1788.661508][T30785] syzkaller0: entered allmulticast mode [ 1788.827602][T30725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1788.881830][T30790] netlink: 'syz.3.7021': attribute type 1 has an invalid length. [ 1788.921183][T30791] loop2: detected capacity change from 0 to 2048 [ 1788.954231][T30791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1788.970125][T30791] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1789.049981][T24830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.069390][T30804] tipc: Enabled bearer , priority 0 [ 1789.083156][T30804] syzkaller0: entered promiscuous mode [ 1789.088691][T30804] syzkaller0: entered allmulticast mode [ 1789.103645][T30813] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7030'. [ 1789.131655][T30804] tipc: Resetting bearer [ 1789.149155][T30803] tipc: Resetting bearer [ 1789.157636][T30803] tipc: Disabling bearer [ 1789.235479][T30833] syzkaller0: entered promiscuous mode [ 1789.241015][T30833] syzkaller0: entered allmulticast mode [ 1789.327903][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813933e800: rx timeout, send abort [ 1789.827914][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad62c00: rx timeout, send abort [ 1789.836319][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813933e800: abort rx timeout. Force session deactivation [ 1789.920037][T30843] syzkaller0: entered promiscuous mode [ 1789.925747][T30843] syzkaller0: entered allmulticast mode [ 1789.956180][T30815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1789.987917][T30843] tipc: Started in network mode [ 1790.006547][T30843] tipc: Node identity 7283e96b72f9, cluster identity 4711 [ 1790.016973][T30843] tipc: Enabled bearer , priority 0 [ 1790.067155][T30842] tipc: Resetting bearer [ 1790.076093][T30842] tipc: Disabling bearer [ 1790.250016][T30875] netlink: 'syz.7.7052': attribute type 1 has an invalid length. [ 1790.336276][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad62c00: abort rx timeout. Force session deactivation [ 1790.391111][T30888] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7057'. [ 1790.421361][T30890] syzkaller0: entered promiscuous mode [ 1790.427680][T30890] syzkaller0: entered allmulticast mode [ 1790.491168][T30892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7059'. [ 1791.009546][T30864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1791.019486][T30881] netlink: 'syz.9.7054': attribute type 1 has an invalid length. [ 1791.181880][T30913] netlink: 'syz.9.7066': attribute type 1 has an invalid length. [ 1791.257758][T30929] netlink: 'syz.3.7071': attribute type 1 has an invalid length. [ 1791.371848][ T28] audit: type=1400 audit(1771894534.126:4933): avc: denied { connect } for pid=30940 comm="syz.2.7076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1791.559289][T30975] netlink: 'syz.7.7085': attribute type 1 has an invalid length. [ 1791.586254][T30979] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7087'. [ 1791.620193][T30981] netlink: 'syz.2.7088': attribute type 1 has an invalid length. [ 1792.139479][T30935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1792.174183][T30996] x_tables: duplicate underflow at hook 2 [ 1792.253307][T31007] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7098'. [ 1792.292693][T31014] netlink: 'syz.6.7100': attribute type 1 has an invalid length. [ 1792.410545][T31026] syzkaller0: entered promiscuous mode [ 1792.416327][T31026] syzkaller0: entered allmulticast mode [ 1792.426139][T31028] tipc: Enabling of bearer rejected, failed to enable media [ 1792.526013][T31040] netlink: 'syz.6.7111': attribute type 1 has an invalid length. [ 1792.781336][T31072] syzkaller0: entered promiscuous mode [ 1792.788178][T31072] syzkaller0: entered allmulticast mode [ 1793.002905][T31076] syzkaller0: entered promiscuous mode [ 1793.010951][T31076] syzkaller0: entered allmulticast mode [ 1793.163508][T31100] syzkaller0: entered promiscuous mode [ 1793.172302][T31100] syzkaller0: entered allmulticast mode [ 1793.453685][T31129] syzkaller0: entered promiscuous mode [ 1793.459225][T31129] syzkaller0: entered allmulticast mode [ 1793.704953][T31163] ip6_vti0 speed is unknown, defaulting to 1000 [ 1793.742003][T31171] syzkaller0: entered promiscuous mode [ 1793.747806][T31171] syzkaller0: entered allmulticast mode [ 1793.857725][T31178] syzkaller0: entered promiscuous mode [ 1793.871756][T31178] syzkaller0: entered allmulticast mode [ 1793.913711][T31180] syzkaller0: entered promiscuous mode [ 1793.919251][T31180] syzkaller0: entered allmulticast mode [ 1794.137810][T31194] netlink: 7 bytes leftover after parsing attributes in process `syz.7.7158'. [ 1794.198346][T31198] ip6_vti0 speed is unknown, defaulting to 1000 [ 1794.271720][T31206] syzkaller0: entered promiscuous mode [ 1794.277856][T31206] syzkaller0: entered allmulticast mode [ 1794.399227][T31210] syzkaller0: entered promiscuous mode [ 1794.405620][T31210] syzkaller0: entered allmulticast mode [ 1794.529479][T31166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1794.588594][T31227] tipc: Enabling of bearer rejected, failed to enable media [ 1794.611998][T31227] syzkaller0: entered promiscuous mode [ 1794.617711][T31227] syzkaller0: entered allmulticast mode [ 1794.617907][ T2996] ================================================================== [ 1794.631564][ T2996] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1794.638836][ T2996] [ 1794.641189][ T2996] write to 0xffffffff86c70770 of 8 bytes by task 31227 on cpu 1: [ 1794.649102][ T2996] data_alloc+0x310/0x390 [ 1794.653480][ T2996] prb_reserve+0x8d7/0xae0 [ 1794.657959][ T2996] vprintk_store+0x54a/0x910 [ 1794.662618][ T2996] vprintk_emit+0x1a4/0x600 [ 1794.667179][ T2996] vprintk_default+0x26/0x30 [ 1794.671962][ T2996] vprintk+0x1d/0x30 [ 1794.675897][ T2996] _printk+0x79/0xa0 [ 1794.679816][ T2996] __netdev_printk+0x310/0x370 [ 1794.684696][ T2996] netdev_info+0xa6/0xd0 [ 1794.689007][ T2996] netif_set_allmulti+0x14c/0x220 [ 1794.694058][ T2996] __dev_change_flags+0x32f/0x400 [ 1794.699125][ T2996] netif_change_flags+0x5a/0xd0 [ 1794.703996][ T2996] dev_change_flags+0xce/0x180 [ 1794.708778][ T2996] dev_ifsioc+0x462/0xf60 [ 1794.713146][ T2996] dev_ioctl+0x709/0x960 [ 1794.717422][ T2996] sock_do_ioctl+0x1aa/0x230 [ 1794.722046][ T2996] sock_ioctl+0x41b/0x610 [ 1794.726410][ T2996] __se_sys_ioctl+0xce/0x140 [ 1794.731032][ T2996] __x64_sys_ioctl+0x43/0x50 [ 1794.735658][ T2996] x64_sys_call+0x1563/0x3020 [ 1794.740367][ T2996] do_syscall_64+0x12c/0x370 [ 1794.744998][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.750921][ T2996] [ 1794.753270][ T2996] read to 0xffffffff86c70770 of 16 bytes by task 2996 on cpu 0: [ 1794.760927][ T2996] _prb_read_valid+0x1bc/0x950 [ 1794.765738][ T2996] prb_read_valid+0x3c/0x60 [ 1794.770276][ T2996] syslog_print+0x258/0x560 [ 1794.774799][ T2996] do_syslog+0x52b/0x7f0 [ 1794.779059][ T2996] __x64_sys_syslog+0x41/0x50 [ 1794.783754][ T2996] x64_sys_call+0x2b9e/0x3020 [ 1794.788460][ T2996] do_syscall_64+0x12c/0x370 [ 1794.793094][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.799033][ T2996] [ 1794.801377][ T2996] Reported by Kernel Concurrency Sanitizer on: [ 1794.807564][ T2996] CPU: 0 UID: 0 PID: 2996 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 1794.816448][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1794.826529][ T2996] ==================================================================