last executing test programs: 28m52.427052153s ago: executing program 32 (id=575): semget(0x3, 0x1, 0x28f) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 28m40.165393977s ago: executing program 33 (id=902): ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 28m24.965121658s ago: executing program 34 (id=1260): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 28m12.090340513s ago: executing program 35 (id=1550): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xf7}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 27m41.591918246s ago: executing program 36 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 27m6.537190385s ago: executing program 8 (id=2661): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) read(r1, &(0x7f0000000440)=""/52, 0x34) 27m5.496687166s ago: executing program 8 (id=2667): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r1, 0x100) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x4df, 0x0, 0x3, 0x5}, 0x14) r4 = dup(r0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f00000015c0)=@in6={0xa, 0x4e24, 0x100, @loopback, 0x10000005}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="d9", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x8850) 27m5.379151758s ago: executing program 8 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca159f68846960e56de42944af05000600000000000a00b9b60000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0xf9, 0x81, 0x2, @mcast2, @remote, 0x8, 0x8000, 0x324, 0x8}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 27m5.348687238s ago: executing program 8 (id=2676): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xe01, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_clone3(&(0x7f00000004c0)={0x48080000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 27m5.149804722s ago: executing program 8 (id=2681): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x7cb641, 0x0) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 27m4.75318071s ago: executing program 8 (id=2687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 27m4.718411501s ago: executing program 37 (id=2687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 26m38.446321363s ago: executing program 9 (id=3116): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x8, 0x0, 0xa3, 0x7}, {0x9, 0x5, 0x0, 0x2, 0x400, 0x2, 0x8, 0x81}, {0x9, 0x5, 0x6, 0x3, 0x10, 0x7, 0x5, 0x7c}}}}}}]}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 26m37.927968592s ago: executing program 9 (id=3122): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) 26m37.795526235s ago: executing program 9 (id=3125): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000080000000200000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000f0000000000000000000000000000000000000000b0887d0000f92073c7dad149f9c012e53b7a07e7d805278f54e589a358d8b791d6e7d442ad327182da5d69ae3ce78bdd8fe0e1bb9d0d470e02fd9c8a0367bd39e1512097ddaeacb1aaf7855a0331d7fa"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 26m37.205042526s ago: executing program 9 (id=3139): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20200500, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) sendfile(r0, r1, 0x0, 0x43) write$UHID_CREATE(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 26m36.979896011s ago: executing program 9 (id=3146): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x859fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x5535, 0x3acd, 0x22, 0x0, 0x0) 26m36.948069221s ago: executing program 9 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x480d53586e06ae86}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sync() sync() 26m36.927889891s ago: executing program 38 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x480d53586e06ae86}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sync() sync() 26m36.027681729s ago: executing program 5 (id=3167): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 26m35.909431861s ago: executing program 5 (id=3169): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$vcsa(0x0, 0x64, 0x101500) set_mempolicy(0x6005, 0x0, 0x4) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) read$hiddev(r2, &(0x7f0000010040)=""/208, 0xd0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) 26m35.835389912s ago: executing program 5 (id=3170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x1, 0xab3, 0x6}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x20000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x0) futimesat(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x431c5c57ca0a7d83}, 0x40010) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 26m35.521165088s ago: executing program 5 (id=3172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(0x0, 0x10) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2903097, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 26m35.520885569s ago: executing program 5 (id=3173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRESOCT], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 26m35.509740478s ago: executing program 5 (id=3175): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bind$inet(0xffffffffffffffff, 0x0, 0x0) 26m35.453414419s ago: executing program 39 (id=3175): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bind$inet(0xffffffffffffffff, 0x0, 0x0) 26m28.826575116s ago: executing program 2 (id=3267): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 26m28.741928468s ago: executing program 2 (id=3268): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000100000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = dup2(r0, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 26m28.398471954s ago: executing program 2 (id=3269): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = semget(0x1, 0x5, 0x4bc) pipe2$9p(&(0x7f0000000080), 0x800) semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xc, 0x2]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x3d, 0x3, 0x0, 0x1, 0x5}) 26m28.317934556s ago: executing program 2 (id=3272): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20200500, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) sendfile(r0, r1, 0x0, 0x43) write$UHID_CREATE(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 26m28.10399572s ago: executing program 2 (id=3279): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0xec, 0x5, 0x40, 0x6, 0x0, 0x0, 0x4d2d9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x10088a, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140ff"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x196}, &(0x7f0000000000), &(0x7f0000000280)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x480600, 0x0) 26m27.877141854s ago: executing program 2 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getgid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x30, 0x0, 0x0, 0xff7f0000}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 26m27.877004934s ago: executing program 40 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getgid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x30, 0x0, 0x0, 0xff7f0000}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m24.701209194s ago: executing program 7 (id=22083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m24.323311791s ago: executing program 7 (id=22090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x113}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) 3m23.435913518s ago: executing program 7 (id=22105): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m23.412739168s ago: executing program 7 (id=22106): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x523, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2, 0x9}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x7, 0x7, 0x0, 0x70bf2a, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x2, 0x4, 0x9, 0xd6}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x38}, 0x1, 0x7}, 0x4004080) 3m22.437822807s ago: executing program 7 (id=22118): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) io_uring_setup(0x30a7, &(0x7f0000000280)={0x0, 0x9dd9, 0x200, 0x2, 0x373}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0xd000}], 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) socketpair$unix(0x1, 0x3, 0x0, 0x0) 3m22.26511242s ago: executing program 7 (id=22119): socket$kcm(0x2, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 3m22.264981631s ago: executing program 41 (id=22119): socket$kcm(0x2, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 5.558886064s ago: executing program 6 (id=27331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 5.461072476s ago: executing program 6 (id=27333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) 4.621539001s ago: executing program 6 (id=27347): socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 4.620960362s ago: executing program 6 (id=27348): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x2075, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005196c0083d1bbb0111000000000109022443dfd64d000009043c0002b1a92a0009050901ff030c09"], 0x0) 3.860959246s ago: executing program 6 (id=27355): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x14}, 0x108003, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 3.784046027s ago: executing program 6 (id=27356): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000eeff00008fa9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.777594967s ago: executing program 1 (id=27357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000210400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) 3.695717589s ago: executing program 1 (id=27359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3.595618891s ago: executing program 1 (id=27363): close(0x3) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.543860281s ago: executing program 1 (id=27377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1.889776583s ago: executing program 3 (id=27380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.52901665s ago: executing program 1 (id=27385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.476063091s ago: executing program 1 (id=27387): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) r7 = dup(r5) inotify_rm_watch(r7, r6) 1.466077241s ago: executing program 3 (id=27388): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x6111471, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f00000004c0)={0xffffa773, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ftruncate(r0, 0x8800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.416142782s ago: executing program 4 (id=27389): setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r0}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x1e, 0x0) 1.415649682s ago: executing program 4 (id=27390): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.313966924s ago: executing program 4 (id=27391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) 1.272967185s ago: executing program 4 (id=27392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x36) 1.200744266s ago: executing program 4 (id=27393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5bb91d60155f6f93, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 442.917671ms ago: executing program 3 (id=27394): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 349.119893ms ago: executing program 0 (id=27396): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r0}, 0x10) fsync(0xffffffffffffffff) 348.782613ms ago: executing program 0 (id=27397): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='ext4_fc_track_inode\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c00)='./file1\x00', 0x800810, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0xff, 0x23f, &(0x7f0000000780)="$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") mknod$loop(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x1) 336.576363ms ago: executing program 3 (id=27398): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x200}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) socketpair(0x26, 0x1, 0x8, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b000000050002000f0000000400000085080100", @ANYRES32=r3, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02182e633e00000000000400000011efab4f", @ANYRES32=r5, @ANYBLOB="b32862838a0996b1c093e2b00613768681b2b3044da8a0a33edeca27cb2a129ef7f8449475a8dcfd0931c8ba079495362d79d47eb7e7d57d16653aaa796ff6e959430ef89417c3300d33f566c47fa08717fd275192337e3479ef79df51a479fe98314e52804a39f2273bacdae92ced6b75139008218233f4456d809a2413f665f29dd42705d3b8"], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1f, 0x9, 0xc, 0xd, 0x2010, r4, 0xffffff02, '\x00', 0x0, r4, 0x2, 0x5, 0x4}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r1, r6}, 0xc) close(r7) 263.234034ms ago: executing program 0 (id=27399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) lseek(0xffffffffffffffff, 0x104, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 262.145884ms ago: executing program 4 (id=27400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r1}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 156.892016ms ago: executing program 0 (id=27401): perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x101, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) 112.988327ms ago: executing program 0 (id=27402): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe26c8514785636ac, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000000000000"], 0x0, 0x1fffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 101.253408ms ago: executing program 3 (id=27403): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000eeff00008fa9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 72.449848ms ago: executing program 0 (id=27404): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000108100000001c00"/43], 0x40}, 0x20000000) 0s ago: executing program 3 (id=27405): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): ved [ 1619.431559][ T5348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.438995][ T5348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.448003][ T5348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.455470][ T5348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.509130][ T5360] netlink: 'syz.1.22878': attribute type 12 has an invalid length. [ 1619.552217][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22881'. [ 1619.564804][T18031] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.564824][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22881'. [ 1619.585911][T18031] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.594983][T18031] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.604684][T18031] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.615886][ T29] audit: type=1400 audit(1625.596:121863): avc: denied { ioctl } for pid=5369 comm="syz.3.22882" path="socket:[287765]" dev="sockfs" ino=287765 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1619.827644][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22884'. [ 1619.836813][ T5377] chnl_net:caif_netlink_parms(): no params data found [ 1620.132802][ T5399] syz_tun: entered allmulticast mode [ 1620.138627][ T5398] syz_tun: left allmulticast mode [ 1620.356293][ T5424] netlink: 104 bytes leftover after parsing attributes in process `syz.4.22907'. [ 1620.391538][ T5426] tipc: Started in network mode [ 1620.396456][ T5426] tipc: Node identity c6bc08dea171, cluster identity 4711 [ 1620.403683][ T5426] tipc: Enabled bearer , priority 0 [ 1620.411945][ T5426] syzkaller0: entered promiscuous mode [ 1620.417468][ T5426] syzkaller0: entered allmulticast mode [ 1620.450195][ T5426] tipc: Resetting bearer [ 1620.471904][ T5425] tipc: Resetting bearer [ 1620.503251][ T5425] tipc: Disabling bearer [ 1620.633641][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22919'. [ 1620.864309][ T5470] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1620.946445][ T29] audit: type=1400 audit(1626.926:121864): avc: denied { ioctl } for pid=5478 comm="syz.3.22931" path="socket:[287965]" dev="sockfs" ino=287965 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1621.101109][ T5488] macsec0: entered promiscuous mode [ 1621.106423][ T5488] macsec0: entered allmulticast mode [ 1621.111857][ T5488] veth1_macvtap: entered allmulticast mode [ 1621.124750][ T5488] bridge0: port 3(macsec0) entered blocking state [ 1621.130487][ T5477] futex_wake_op: syz.1.22930 tries to shift op by 144; fix this program [ 1621.131311][ T5488] bridge0: port 3(macsec0) entered disabled state [ 1621.146938][ T5488] bridge0: port 3(macsec0) entered blocking state [ 1621.153522][ T5488] bridge0: port 3(macsec0) entered forwarding state [ 1621.169123][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22935'. [ 1621.178214][ T5492] netlink: 'syz.3.22935': attribute type 7 has an invalid length. [ 1621.186102][ T5492] netlink: 'syz.3.22935': attribute type 8 has an invalid length. [ 1621.193943][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22935'. [ 1621.274941][ T29] audit: type=1400 audit(1627.256:121865): avc: denied { write } for pid=5497 comm="syz.3.22938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1621.621220][ T5531] syzkaller0: entered promiscuous mode [ 1621.626739][ T5531] syzkaller0: entered allmulticast mode [ 1621.640297][ T29] audit: type=1400 audit(1627.626:121866): avc: denied { relabelfrom } for pid=5530 comm="syz.4.22954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1621.693088][ T29] audit: type=1400 audit(1627.626:121867): avc: denied { relabelto } for pid=5530 comm="syz.4.22954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1621.754566][ T5544] netlink: 'syz.6.22960': attribute type 12 has an invalid length. [ 1621.802667][ T5552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22964'. [ 1621.811802][ T5552] netlink: 'syz.1.22964': attribute type 7 has an invalid length. [ 1621.819694][ T5552] netlink: 'syz.1.22964': attribute type 8 has an invalid length. [ 1621.827534][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22964'. [ 1622.220066][ T5574] netlink: 'syz.0.22974': attribute type 12 has an invalid length. [ 1622.289732][ T5579] netlink: 27 bytes leftover after parsing attributes in process `syz.0.22975'. [ 1622.360149][ T29] audit: type=1400 audit(1628.346:121868): avc: denied { cpu } for pid=5583 comm="syz.6.22978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1622.644972][ T5597] veth0_vlan: entered allmulticast mode [ 1622.803648][ T5615] sit0: entered allmulticast mode [ 1622.837108][ T5615] sit0: entered promiscuous mode [ 1623.211173][ T5649] syzkaller0: entered promiscuous mode [ 1623.216705][ T5649] syzkaller0: entered allmulticast mode [ 1623.316564][ T5661] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1623.567615][ T5676] syz_tun: entered allmulticast mode [ 1623.573849][ T5675] syz_tun: left allmulticast mode [ 1623.596435][ T5678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.606003][ T5678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.881399][ T5685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1624.089625][ T5699] netlink: 'syz.0.23027': attribute type 12 has an invalid length. [ 1624.118581][ T5691] futex_wake_op: syz.6.23023 tries to shift op by 144; fix this program [ 1624.480498][ T5721] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1624.687092][ T5728] futex_wake_op: syz.6.23040 tries to shift op by 144; fix this program [ 1624.703302][ T5742] __nla_validate_parse: 1 callbacks suppressed [ 1624.703318][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23046'. [ 1624.718673][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23046'. [ 1624.746634][ T5742] gretap0: entered promiscuous mode [ 1624.753797][ T5742] batadv_slave_1: entered promiscuous mode [ 1624.761344][ T5742] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 1624.771393][ T5742] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1624.835461][ T5752] syz_tun: entered allmulticast mode [ 1624.841238][ T5751] syz_tun: left allmulticast mode [ 1625.407907][ T5778] syzkaller0: entered promiscuous mode [ 1625.413534][ T5778] syzkaller0: entered allmulticast mode [ 1625.514269][ T5791] syz_tun: entered allmulticast mode [ 1625.557879][ T5790] syz_tun: left allmulticast mode [ 1625.615449][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23063'. [ 1625.654408][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 1625.917556][ T5817] syzkaller0: entered promiscuous mode [ 1625.923203][ T5817] syzkaller0: entered allmulticast mode [ 1626.112418][ T5832] netlink: 'syz.6.23083': attribute type 16 has an invalid length. [ 1626.120391][ T5832] netlink: 59 bytes leftover after parsing attributes in process `syz.6.23083'. [ 1626.332747][ T5862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23098'. [ 1626.341996][ T5862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23098'. [ 1626.354948][ T5862] gretap0: entered promiscuous mode [ 1626.362164][ T5862] batadv_slave_1: entered promiscuous mode [ 1626.369363][ T5862] debugfs: 'hsr1' already exists in 'hsr' [ 1626.375113][ T5862] Cannot create hsr debugfs directory [ 1626.475850][ T5860] futex_wake_op: syz.0.23097 tries to shift op by 144; fix this program [ 1626.920495][ T5896] syzkaller0: entered promiscuous mode [ 1626.926042][ T5896] syzkaller0: entered allmulticast mode [ 1627.208125][ T5916] netlink: 'syz.1.23122': attribute type 12 has an invalid length. [ 1627.234710][ T5919] syzkaller0: entered promiscuous mode [ 1627.240274][ T5919] syzkaller0: entered allmulticast mode [ 1627.409282][ T5934] syzkaller0: entered promiscuous mode [ 1627.414774][ T5934] syzkaller0: entered allmulticast mode [ 1627.582671][ T5947] netlink: 'syz.3.23134': attribute type 12 has an invalid length. [ 1627.610341][ T5953] syzkaller0: entered promiscuous mode [ 1627.615861][ T5953] syzkaller0: entered allmulticast mode [ 1627.795158][ T5965] sit0: entered allmulticast mode [ 1627.841663][ T5965] sit0: entered promiscuous mode [ 1628.098505][ T5986] syzkaller0: entered promiscuous mode [ 1628.104017][ T5986] syzkaller0: entered allmulticast mode [ 1628.232012][ T6000] bridge: RTM_NEWNEIGH with invalid ether address [ 1628.339881][ T6011] netlink: 'syz.1.23163': attribute type 12 has an invalid length. [ 1629.181877][ T6050] syzkaller0: entered promiscuous mode [ 1629.187413][ T6050] syzkaller0: entered allmulticast mode [ 1629.453282][ T6101] syz_tun: entered allmulticast mode [ 1629.474025][ T6100] syz_tun: left allmulticast mode [ 1629.496811][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23205'. [ 1629.505933][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23205'. [ 1629.518811][ T6110] gretap0: entered promiscuous mode [ 1629.525045][ T6110] batadv_slave_1: entered promiscuous mode [ 1629.532296][ T6110] debugfs: 'hsr1' already exists in 'hsr' [ 1629.538034][ T6110] Cannot create hsr debugfs directory [ 1629.624419][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23208'. [ 1630.137168][ T6137] syz_tun: entered allmulticast mode [ 1630.163428][ T6136] syz_tun: left allmulticast mode [ 1630.388306][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23219'. [ 1630.562229][ T6166] netlink: 'syz.1.23223': attribute type 16 has an invalid length. [ 1630.570260][ T6166] netlink: 59 bytes leftover after parsing attributes in process `syz.1.23223'. [ 1630.573957][ T6165] syzkaller0: entered promiscuous mode [ 1630.582494][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23229'. [ 1630.584835][ T6165] syzkaller0: entered allmulticast mode [ 1630.599536][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23229'. [ 1630.611437][ T6170] gretap0: entered promiscuous mode [ 1630.617686][ T6170] batadv_slave_1: entered promiscuous mode [ 1630.623918][ T6170] debugfs: 'hsr1' already exists in 'hsr' [ 1630.629682][ T6170] Cannot create hsr debugfs directory [ 1630.763035][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23242'. [ 1630.766469][ T6198] syz_tun: entered allmulticast mode [ 1630.790233][ T6196] syz_tun: left allmulticast mode [ 1630.887767][ T6208] syzkaller0: entered promiscuous mode [ 1630.893292][ T6208] syzkaller0: entered allmulticast mode [ 1631.094280][ T6224] syzkaller0: entered promiscuous mode [ 1631.099832][ T6224] syzkaller0: entered allmulticast mode [ 1631.107304][ T6227] syz_tun: entered allmulticast mode [ 1631.113387][ T6226] syz_tun: left allmulticast mode [ 1631.413489][ T6253] syz_tun: entered allmulticast mode [ 1631.426511][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23268'. [ 1631.431848][ T6251] syz_tun: left allmulticast mode [ 1631.435611][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23268'. [ 1631.478811][ T6242] futex_wake_op: syz.4.23262 tries to shift op by 144; fix this program [ 1631.504434][ T6258] syzkaller0: entered promiscuous mode [ 1631.510095][ T6258] syzkaller0: entered allmulticast mode [ 1631.647874][ T6286] netlink: 'syz.1.23276': attribute type 16 has an invalid length. [ 1631.655883][ T6286] netlink: 59 bytes leftover after parsing attributes in process `syz.1.23276'. [ 1631.766788][ T6308] veth0_vlan: entered allmulticast mode [ 1631.859673][ T6316] veth0_vlan: left promiscuous mode [ 1631.873396][ T6316] veth0_vlan: entered promiscuous mode [ 1631.932243][ T6321] syzkaller0: entered promiscuous mode [ 1631.937868][ T6321] syzkaller0: entered allmulticast mode [ 1631.947788][ T6318] -1: renamed from syzkaller0 [ 1632.339859][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23317'. [ 1632.396876][ T6396] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1632.458355][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23321'. [ 1632.677454][ T6415] pim6reg1: entered promiscuous mode [ 1632.682824][ T6415] pim6reg1: entered allmulticast mode [ 1632.800609][ T6423] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1632.872322][ T6428] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1633.237707][ T6454] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1633.305970][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 1633.881184][ T29] audit: type=1400 audit(1639.846:121869): avc: denied { write } for pid=6490 comm="syz.3.23359" name="cgroup.subtree_control" dev="cgroup2" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1633.904969][ T29] audit: type=1400 audit(1639.846:121870): avc: denied { open } for pid=6490 comm="syz.3.23359" path="" dev="cgroup2" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1634.667879][ T6549] netlink: 'syz.3.23378': attribute type 12 has an invalid length. [ 1635.413193][ T6605] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1635.456190][ T6608] __nla_validate_parse: 5 callbacks suppressed [ 1635.456271][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23403'. [ 1635.618352][ T6622] veth0_vlan: entered allmulticast mode [ 1635.789137][ T6626] veth0_vlan: left promiscuous mode [ 1635.805760][ T6626] veth0_vlan: entered promiscuous mode [ 1635.891552][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23412'. [ 1635.900733][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23412'. [ 1635.985286][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23410'. [ 1636.008965][ T6629] syzkaller0: entered promiscuous mode [ 1636.014599][ T6629] syzkaller0: entered allmulticast mode [ 1636.030769][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 1637.199357][ T6691] syzkaller0: entered promiscuous mode [ 1637.204853][ T6691] syzkaller0: entered allmulticast mode [ 1637.677419][ T6722] syzkaller0: entered promiscuous mode [ 1637.683129][ T6722] syzkaller0: entered allmulticast mode [ 1637.897348][ T6745] futex_wake_op: syz.0.23458 tries to shift op by 144; fix this program [ 1637.992025][ T6767] syzkaller0: entered promiscuous mode [ 1637.997578][ T6767] syzkaller0: entered allmulticast mode [ 1638.134695][ T6783] syzkaller0: entered promiscuous mode [ 1638.140252][ T6783] syzkaller0: entered allmulticast mode [ 1638.293300][ T6801] netlink: 88 bytes leftover after parsing attributes in process `syz.4.23482'. [ 1638.520813][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23486'. [ 1638.547156][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 1638.629393][ T6818] netlink: 'syz.6.23489': attribute type 12 has an invalid length. [ 1638.828438][ T6843] netlink: 'syz.6.23500': attribute type 12 has an invalid length. [ 1638.934479][ T6855] veth0_vlan: left promiscuous mode [ 1638.959227][ T6855] veth0_vlan: entered promiscuous mode [ 1639.171486][ T6887] syzkaller0: entered promiscuous mode [ 1639.177136][ T6887] syzkaller0: entered allmulticast mode [ 1639.192850][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23521'. [ 1639.202041][ T6891] netlink: 'syz.1.23521': attribute type 7 has an invalid length. [ 1639.210006][ T6891] netlink: 'syz.1.23521': attribute type 8 has an invalid length. [ 1639.217824][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23521'. [ 1639.286407][ T6905] netlink: 'syz.4.23522': attribute type 16 has an invalid length. [ 1639.294488][ T6905] netlink: 59 bytes leftover after parsing attributes in process `syz.4.23522'. [ 1639.411561][ T6925] syz_tun: entered allmulticast mode [ 1639.417487][ T6924] syz_tun: left allmulticast mode [ 1639.610918][ T6931] futex_wake_op: syz.0.23536 tries to shift op by 144; fix this program [ 1639.635693][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23533'. [ 1639.668111][ T6942] chnl_net:caif_netlink_parms(): no params data found [ 1639.816311][ T6946] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1640.083416][ T6959] syz_tun: entered allmulticast mode [ 1640.096959][ T6957] syz_tun: left allmulticast mode [ 1640.491778][ T6985] netlink: 'syz.1.23558': attribute type 12 has an invalid length. [ 1640.537396][ T6991] syz_tun: entered allmulticast mode [ 1640.548332][ T6990] syz_tun: left allmulticast mode [ 1641.171247][ T7017] __nla_validate_parse: 1 callbacks suppressed [ 1641.171258][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23570'. [ 1642.045241][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23590'. [ 1642.055112][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23590'. [ 1642.154641][ T7077] syz_tun: entered allmulticast mode [ 1642.160848][ T7076] syz_tun: left allmulticast mode [ 1642.529824][ T7095] netlink: 'syz.0.23599': attribute type 12 has an invalid length. [ 1642.781142][ T7110] syz_tun: entered allmulticast mode [ 1642.786898][ T7109] syz_tun: left allmulticast mode [ 1642.986727][ T7139] syz_tun: entered allmulticast mode [ 1642.993496][ T7138] syz_tun: left allmulticast mode [ 1642.995935][ T7140] netlink: 'syz.3.23613': attribute type 16 has an invalid length. [ 1643.006547][ T7140] netlink: 59 bytes leftover after parsing attributes in process `syz.3.23613'. [ 1644.176982][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23632'. [ 1644.200372][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 1644.782151][ T7210] netlink: 'syz.1.23642': attribute type 16 has an invalid length. [ 1644.790134][ T7210] netlink: 59 bytes leftover after parsing attributes in process `syz.1.23642'. [ 1644.834755][ T7203] futex_wake_op: syz.6.23641 tries to shift op by 144; fix this program [ 1644.954749][ T7221] netlink: 'syz.6.23649': attribute type 12 has an invalid length. [ 1645.087176][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7231 comm=syz.6.23654 [ 1645.102167][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7231 comm=syz.6.23654 [ 1645.651381][ T7274] syzkaller0: entered promiscuous mode [ 1645.657284][ T7274] syzkaller0: entered allmulticast mode [ 1645.764028][ T7295] syz_tun: entered allmulticast mode [ 1645.837560][ T7306] netlink: 87 bytes leftover after parsing attributes in process `syz.4.23683'. [ 1646.700765][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.736126][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.151071][ T7372] syzkaller0: entered promiscuous mode [ 1647.156791][ T7372] syzkaller0: entered allmulticast mode [ 1647.542648][ T7404] syzkaller0: entered promiscuous mode [ 1647.548192][ T7404] syzkaller0: entered allmulticast mode [ 1647.629359][ T7409] wg2: entered promiscuous mode [ 1647.634411][ T7409] wg2: entered allmulticast mode [ 1647.845537][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23734'. [ 1647.870963][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 1647.945645][ T7438] netlink: 87 bytes leftover after parsing attributes in process `syz.0.23744'. [ 1648.682717][ T7488] syzkaller0: entered promiscuous mode [ 1648.688339][ T7488] syzkaller0: entered allmulticast mode [ 1648.760976][ T7498] netlink: 52 bytes leftover after parsing attributes in process `syz.1.23767'. [ 1648.816711][ T7500] syzkaller0: entered promiscuous mode [ 1648.822257][ T7500] syzkaller0: entered allmulticast mode [ 1648.991308][ T7516] sit0: left promiscuous mode [ 1649.071383][ T7518] sit0: entered promiscuous mode [ 1649.156154][ T29] audit: type=1400 audit(1655.136:121871): avc: denied { create } for pid=7523 comm="syz.1.23777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1649.900187][ T7580] syzkaller0: entered promiscuous mode [ 1649.906054][ T7580] syzkaller0: entered allmulticast mode [ 1649.918217][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23803'. [ 1649.930277][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23803'. [ 1649.958696][ T7587] syzkaller0: entered promiscuous mode [ 1649.964277][ T7587] syzkaller0: entered allmulticast mode [ 1650.237589][ T7634] syzkaller0: entered promiscuous mode [ 1650.243203][ T7634] syzkaller0: entered allmulticast mode [ 1650.576922][ T7659] veth0_vlan: entered allmulticast mode [ 1650.725477][ T7671] syzkaller0: entered promiscuous mode [ 1650.731131][ T7671] syzkaller0: entered allmulticast mode [ 1650.890428][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23846'. [ 1650.899554][ T7684] netlink: 'syz.1.23846': attribute type 6 has an invalid length. [ 1651.064047][ T7697] wg2: entered promiscuous mode [ 1651.069726][ T7697] wg2: entered allmulticast mode [ 1651.191803][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23861'. [ 1651.208894][ T7708] syzkaller0: entered promiscuous mode [ 1651.214459][ T7708] syzkaller0: entered allmulticast mode [ 1651.267086][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23862'. [ 1651.278158][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23862'. [ 1651.525278][ T7727] futex_wake_op: syz.1.23864 tries to shift op by 144; fix this program [ 1651.603520][ T7735] pim6reg1: entered promiscuous mode [ 1651.608910][ T7735] pim6reg1: entered allmulticast mode [ 1651.703661][ T7742] veth0_vlan: entered allmulticast mode [ 1651.842186][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23872'. [ 1651.855093][ T7745] wg2: left promiscuous mode [ 1651.859804][ T7745] wg2: left allmulticast mode [ 1651.886342][ T7737] wg2: entered promiscuous mode [ 1651.891791][ T7737] wg2: entered allmulticast mode [ 1652.077048][ T7768] bridge: RTM_NEWNEIGH with invalid ether address [ 1652.604979][ T7782] syzkaller0: entered promiscuous mode [ 1652.610749][ T7782] syzkaller0: entered allmulticast mode [ 1652.913698][ T7799] syzkaller0: entered promiscuous mode [ 1652.919335][ T7799] syzkaller0: entered allmulticast mode [ 1652.962530][ T7805] bridge: RTM_NEWNEIGH with invalid ether address [ 1653.142194][ T7815] syzkaller0: entered promiscuous mode [ 1653.147752][ T7815] syzkaller0: entered allmulticast mode [ 1653.191680][ T7830] __nla_validate_parse: 1 callbacks suppressed [ 1653.191697][ T7830] netlink: 79 bytes leftover after parsing attributes in process `syz.3.23902'. [ 1653.210880][ T7832] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1653.234787][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23906'. [ 1653.243911][ T7834] netlink: 'syz.0.23906': attribute type 7 has an invalid length. [ 1653.251774][ T7834] netlink: 'syz.0.23906': attribute type 8 has an invalid length. [ 1653.259590][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23906'. [ 1653.325163][ T7824] syzkaller0: entered promiscuous mode [ 1653.331392][ T7824] syzkaller0: entered allmulticast mode [ 1653.466042][ T7839] syzkaller0: entered promiscuous mode [ 1653.471648][ T7839] syzkaller0: entered allmulticast mode [ 1653.640659][ T7845] veth0_vlan: left promiscuous mode [ 1653.647033][ T7845] veth0_vlan: entered promiscuous mode [ 1653.801198][ T7852] wg2: entered promiscuous mode [ 1653.806120][ T7852] wg2: entered allmulticast mode [ 1654.183566][ T7864] futex_wake_op: syz.0.23919 tries to shift op by 144; fix this program [ 1654.230709][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.256114][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.379745][ T7891] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1654.512133][ T7902] netlink: 79 bytes leftover after parsing attributes in process `syz.3.23932'. [ 1654.803830][ T7909] futex_wake_op: syz.0.23937 tries to shift op by 144; fix this program [ 1654.915434][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.924373][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.933125][ T7926] bridge0: entered allmulticast mode [ 1655.097280][ T7942] futex_wake_op: syz.6.23951 tries to shift op by 144; fix this program [ 1655.535057][ T7977] futex_wake_op: syz.6.23966 tries to shift op by 144; fix this program [ 1655.711621][ T7986] syzkaller0: entered promiscuous mode [ 1655.717367][ T7986] syzkaller0: entered allmulticast mode [ 1656.028323][ T29] audit: type=1400 audit(1662.006:121872): avc: denied { append } for pid=7999 comm="syz.3.23976" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1656.558956][ T8031] sit0: left promiscuous mode [ 1656.676519][ T8040] netlink: 27 bytes leftover after parsing attributes in process `syz.0.23992'. [ 1656.678643][ T8035] syzkaller0: entered promiscuous mode [ 1656.691159][ T8035] syzkaller0: entered allmulticast mode [ 1656.722563][ T29] audit: type=1400 audit(1662.706:121873): avc: denied { create } for pid=8026 comm="syz.3.23987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1656.730175][ T8031] sit0: entered promiscuous mode [ 1656.882956][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.891989][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.931958][ T8044] syzkaller0: entered promiscuous mode [ 1656.937511][ T8044] syzkaller0: entered allmulticast mode [ 1656.976462][ T8056] netlink: 108 bytes leftover after parsing attributes in process `syz.1.23999'. [ 1656.986971][ T8057] sit0: left promiscuous mode [ 1657.017382][ T8057] sit0: entered promiscuous mode [ 1657.257933][ T8069] wg2: entered promiscuous mode [ 1657.264831][ T8069] wg2: entered allmulticast mode [ 1657.703434][ T8093] veth0_vlan: left promiscuous mode [ 1657.710878][ T8093] veth0_vlan: entered promiscuous mode [ 1657.863008][ T8107] syzkaller0: entered promiscuous mode [ 1657.868789][ T8107] syzkaller0: entered allmulticast mode [ 1657.879578][ T8102] wg2: entered promiscuous mode [ 1657.884917][ T8102] wg2: entered allmulticast mode [ 1657.896523][ T8112] netlink: 27 bytes leftover after parsing attributes in process `syz.0.24020'. [ 1658.051911][ T8117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8117 comm=syz.1.24012 [ 1658.301946][ T8139] wg2: left promiscuous mode [ 1658.306825][ T8139] wg2: left allmulticast mode [ 1658.362107][ T8141] syzkaller0: entered promiscuous mode [ 1658.367682][ T8141] syzkaller0: entered allmulticast mode [ 1658.377284][ T8139] wg2: entered promiscuous mode [ 1658.383864][ T8139] wg2: entered allmulticast mode [ 1658.649810][ T8162] syzkaller0: entered promiscuous mode [ 1658.655431][ T8162] syzkaller0: entered allmulticast mode [ 1658.771181][ T29] audit: type=1400 audit(1664.756:121874): avc: denied { create } for pid=8183 comm="syz.6.24053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1659.040439][ T8207] netlink: 27 bytes leftover after parsing attributes in process `syz.1.24058'. [ 1659.088810][ T8210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8210 comm=syz.0.24052 [ 1659.156154][ T8194] futex_wake_op: syz.6.24056 tries to shift op by 144; fix this program [ 1659.792516][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.801078][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.815815][ T8250] futex_wake_op: syz.3.24077 tries to shift op by 144; fix this program [ 1659.993252][ T8262] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1660.133837][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24085'. [ 1660.143011][ T8274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.24085'. [ 1660.224680][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.233058][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.243197][ T8285] bridge0: entered allmulticast mode [ 1660.285035][ T8285] bridge_slave_1: left allmulticast mode [ 1660.291905][ T8285] bridge_slave_1: left promiscuous mode [ 1660.298500][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.312103][ T8285] bridge_slave_0: left allmulticast mode [ 1660.317929][ T8285] bridge_slave_0: left promiscuous mode [ 1660.324758][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.501753][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24099'. [ 1660.510950][ T8311] netlink: 52 bytes leftover after parsing attributes in process `syz.4.24099'. [ 1660.809559][ T8326] bridge0: port 3(macsec0) entered disabled state [ 1660.814500][ T8321] futex_wake_op: syz.0.24104 tries to shift op by 144; fix this program [ 1660.818920][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.837908][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.850209][ T8326] bridge0: entered allmulticast mode [ 1660.898238][ T8328] bridge0: port 3(macsec0) entered disabled state [ 1660.906161][ T8328] bridge_slave_1: left allmulticast mode [ 1660.911872][ T8328] bridge_slave_1: left promiscuous mode [ 1660.917564][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.927861][ T8328] bridge_slave_0: left allmulticast mode [ 1660.933541][ T8328] bridge_slave_0: left promiscuous mode [ 1660.939336][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.056983][ T8340] syzkaller0: entered promiscuous mode [ 1661.063180][ T8340] syzkaller0: entered allmulticast mode [ 1661.402492][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.0.24118 [ 1661.887236][ T8388] syzkaller0: entered promiscuous mode [ 1661.893326][ T8388] syzkaller0: entered allmulticast mode [ 1662.062307][ T8393] veth0_vlan: left promiscuous mode [ 1662.068239][ T8393] veth0_vlan: entered promiscuous mode [ 1662.289768][ T8414] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1662.364342][ T8423] veth0_vlan: left promiscuous mode [ 1662.380806][ T8423] veth0_vlan: entered promiscuous mode [ 1662.487153][ T8434] sit0: left promiscuous mode [ 1662.574278][ T8434] sit0: entered promiscuous mode [ 1662.715846][ T8447] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1663.923196][ T8506] syz2: rxe_newlink: already configured on batadv_slave_0 [ 1664.161858][ T8536] sit0: entered allmulticast mode [ 1664.199363][ T8536] sit0: entered promiscuous mode [ 1664.322985][ T8543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8543 comm=syz.4.24188 [ 1664.347787][ T8541] pim6reg1: entered promiscuous mode [ 1664.354390][ T8541] pim6reg1: entered allmulticast mode [ 1664.551985][ T8556] sit0: left promiscuous mode [ 1664.641248][ T8556] sit0: entered promiscuous mode [ 1664.796734][ T8559] veth0_vlan: left promiscuous mode [ 1664.802664][ T8559] veth0_vlan: entered promiscuous mode [ 1665.189606][ T8584] syzkaller0: entered promiscuous mode [ 1665.195327][ T8584] syzkaller0: entered allmulticast mode [ 1665.208463][ T8604] sit0: entered promiscuous mode [ 1665.213448][ T8604] sit0: entered allmulticast mode [ 1665.301319][ T8610] bridge_slave_1: left allmulticast mode [ 1665.307258][ T8610] bridge_slave_1: left promiscuous mode [ 1665.314408][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.341951][ T8610] bridge_slave_0: left allmulticast mode [ 1665.347841][ T8610] bridge_slave_0: left promiscuous mode [ 1665.354741][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.543339][ T8622] syzkaller0: entered promiscuous mode [ 1665.548932][ T8622] syzkaller0: entered allmulticast mode [ 1665.558392][ T8627] sit0: left promiscuous mode [ 1665.601685][ T8629] sit0: entered promiscuous mode [ 1666.065255][ T8670] sit0: entered promiscuous mode [ 1666.070270][ T8670] sit0: entered allmulticast mode [ 1666.283499][ T8676] syzkaller0: entered promiscuous mode [ 1666.289085][ T8676] syzkaller0: entered allmulticast mode [ 1666.602449][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.612045][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.738566][ T8696] sit0: left promiscuous mode [ 1666.792060][ T8696] sit0: entered promiscuous mode [ 1667.234310][ T8721] futex_wake_op: syz.4.24261 tries to shift op by 144; fix this program [ 1667.359189][ T8737] syzkaller0: entered promiscuous mode [ 1667.364698][ T8737] syzkaller0: entered allmulticast mode [ 1667.472349][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.482250][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.615628][ T8759] wg2: left promiscuous mode [ 1667.620816][ T8759] wg2: left allmulticast mode [ 1667.655568][ T8759] wg2: entered promiscuous mode [ 1667.660968][ T8759] wg2: entered allmulticast mode [ 1667.803404][ T8765] sit0: left promiscuous mode [ 1667.818443][ T8765] sit0: entered promiscuous mode [ 1667.828581][ T8757] futex_wake_op: syz.1.24276 tries to shift op by 144; fix this program [ 1667.879830][ T8764] ªªªªªª: renamed from vlan0 (while UP) [ 1668.138149][ T8792] syzkaller0: entered promiscuous mode [ 1668.143717][ T8792] syzkaller0: entered allmulticast mode [ 1668.208600][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.6.24287'. [ 1668.483433][ T8806] futex_wake_op: syz.4.24294 tries to shift op by 144; fix this program [ 1668.687162][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.696777][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.789929][ T8833] futex_wake_op: syz.4.24305 tries to shift op by 144; fix this program [ 1669.041169][ T8861] syzkaller0: entered promiscuous mode [ 1669.046926][ T8861] syzkaller0: entered allmulticast mode [ 1669.153552][ T8878] sit0: left promiscuous mode [ 1669.177106][ T8878] sit0: entered promiscuous mode [ 1669.336187][ T8887] sit0: left promiscuous mode [ 1669.403253][ T8896] veth0_vlan: left promiscuous mode [ 1669.409128][ T8896] veth0_vlan: entered promiscuous mode [ 1669.463701][ T8898] syzkaller0: entered promiscuous mode [ 1669.469407][ T8898] syzkaller0: entered allmulticast mode [ 1669.561582][ T8902] syzkaller0: entered promiscuous mode [ 1669.567106][ T8902] syzkaller0: entered allmulticast mode [ 1669.628370][ T8909] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1669.960622][ T8945] netlink: 112 bytes leftover after parsing attributes in process `syz.0.24352'. [ 1670.002546][ T8948] pim6reg1: entered promiscuous mode [ 1670.007891][ T8948] pim6reg1: entered allmulticast mode [ 1670.307959][ T8982] veth0_vlan: left promiscuous mode [ 1670.313870][ T8982] veth0_vlan: entered promiscuous mode [ 1670.647650][ T8995] syzkaller0: entered promiscuous mode [ 1670.653298][ T8995] syzkaller0: entered allmulticast mode [ 1670.744024][ T9006] netlink: 112 bytes leftover after parsing attributes in process `syz.1.24378'. [ 1670.843422][ T9015] syzkaller0: entered promiscuous mode [ 1670.848986][ T9015] syzkaller0: entered allmulticast mode [ 1670.998756][ T9037] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1671.036481][ T9040] syzkaller0: entered promiscuous mode [ 1671.042119][ T9040] syzkaller0: entered allmulticast mode [ 1671.174386][ T9057] sit0: left promiscuous mode [ 1671.227049][ T9057] sit0: entered promiscuous mode [ 1671.329941][ T9061] netlink: 112 bytes leftover after parsing attributes in process `syz.3.24402'. [ 1671.399047][ T9071] syzkaller0: entered promiscuous mode [ 1671.404548][ T9071] syzkaller0: entered allmulticast mode [ 1671.428220][ T9078] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1671.496430][ T9083] veth0_vlan: left promiscuous mode [ 1671.502240][ T9083] veth0_vlan: entered promiscuous mode [ 1671.614112][ T9094] sit0: left promiscuous mode [ 1671.643877][ T9094] sit0: entered promiscuous mode [ 1671.687729][ T9100] sit0: left promiscuous mode [ 1671.748712][ T9100] sit0: entered promiscuous mode [ 1672.143154][ T9136] sock: sock_set_timeout: `syz.3.24431' (pid 9136) tries to set negative timeout [ 1672.205831][ T9144] netlink: 112 bytes leftover after parsing attributes in process `syz.3.24434'. [ 1672.243158][ T9149] sit0: entered promiscuous mode [ 1672.318913][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24425'. [ 1672.520946][ T9170] syzkaller0: entered promiscuous mode [ 1672.526501][ T9170] syzkaller0: entered allmulticast mode [ 1672.635046][ T9174] syzkaller0: entered promiscuous mode [ 1672.641137][ T9174] syzkaller0: entered allmulticast mode [ 1672.733982][ T9182] syzkaller0: entered promiscuous mode [ 1672.739534][ T9182] syzkaller0: entered allmulticast mode [ 1673.067808][ T9210] ªªªªªª: renamed from vlan0 [ 1673.128064][ T9212] syzkaller0: entered promiscuous mode [ 1673.133590][ T9212] syzkaller0: entered allmulticast mode [ 1673.192940][ T9218] sit0: left promiscuous mode [ 1673.238764][ T9218] sit0: entered promiscuous mode [ 1673.349529][ T9238] veth0_vlan: left promiscuous mode [ 1673.356646][ T9238] veth0_vlan: entered promiscuous mode [ 1673.534087][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.543200][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.086223][ T9326] syzkaller0: entered promiscuous mode [ 1674.091995][ T9326] syzkaller0: entered allmulticast mode [ 1674.150511][ T9334] pim6reg1: entered promiscuous mode [ 1674.155858][ T9334] pim6reg1: entered allmulticast mode [ 1674.386900][ T9348] wg2: left promiscuous mode [ 1674.391638][ T9348] wg2: left allmulticast mode [ 1674.413791][ T9351] sit0: left promiscuous mode [ 1674.447949][ T9348] wg2: entered promiscuous mode [ 1674.452888][ T9348] wg2: entered allmulticast mode [ 1674.467024][ T9351] sit0: entered promiscuous mode [ 1674.800979][ T9383] syzkaller0: entered promiscuous mode [ 1674.806925][ T9383] syzkaller0: entered allmulticast mode [ 1674.837000][ T9400] wg2: left promiscuous mode [ 1674.841827][ T9400] wg2: left allmulticast mode [ 1674.853289][ T9400] wg2: entered promiscuous mode [ 1674.858228][ T9400] wg2: entered allmulticast mode [ 1674.934367][ T9411] pim6reg1: entered promiscuous mode [ 1674.939956][ T9411] pim6reg1: entered allmulticast mode [ 1675.109247][ T9424] pim6reg1: entered promiscuous mode [ 1675.114637][ T9424] pim6reg1: entered allmulticast mode [ 1675.175248][ T9430] wg2: left promiscuous mode [ 1675.180115][ T9430] wg2: left allmulticast mode [ 1675.191086][ T9430] wg2: entered promiscuous mode [ 1675.196050][ T9430] wg2: entered allmulticast mode [ 1675.300677][ T9447] syzkaller0: entered promiscuous mode [ 1675.306258][ T9447] syzkaller0: entered allmulticast mode [ 1676.377420][ T9542] pim6reg1: entered promiscuous mode [ 1676.382948][ T9542] pim6reg1: entered allmulticast mode [ 1676.627760][ T9572] syz2: rxe_newlink: already configured on batadv_slave_0 [ 1676.721677][ T9578] pim6reg1: entered promiscuous mode [ 1676.727080][ T9578] pim6reg1: entered allmulticast mode [ 1676.806684][ T9583] veth0_vlan: left promiscuous mode [ 1676.826199][ T9583] veth0_vlan: entered promiscuous mode [ 1676.843211][ T9588] wg2: left promiscuous mode [ 1676.847864][ T9588] wg2: left allmulticast mode [ 1676.861223][ T9595] wg2: entered promiscuous mode [ 1676.866106][ T9595] wg2: entered allmulticast mode [ 1677.085968][ T9594] futex_wake_op: syz.0.24621 tries to shift op by 144; fix this program [ 1677.335615][ T9619] veth0_vlan: left promiscuous mode [ 1677.347175][ T9619] veth0_vlan: entered promiscuous mode [ 1677.464852][ T9629] pim6reg1: entered promiscuous mode [ 1677.470328][ T9629] pim6reg1: entered allmulticast mode [ 1677.632441][ T9651] pim6reg1: entered promiscuous mode [ 1677.637904][ T9651] pim6reg1: entered allmulticast mode [ 1677.722139][ T9630] chnl_net:caif_netlink_parms(): no params data found [ 1677.732619][ T9659] wg2: left promiscuous mode [ 1677.737230][ T9659] wg2: left allmulticast mode [ 1677.773273][ T9659] wg2: entered promiscuous mode [ 1677.778302][ T9659] wg2: entered allmulticast mode [ 1677.819549][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.826699][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.861543][ T9630] bridge_slave_0: entered allmulticast mode [ 1677.886086][ T9630] bridge_slave_0: entered promiscuous mode [ 1677.914618][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.921865][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.946018][ T9630] bridge_slave_1: entered allmulticast mode [ 1677.954171][ T9630] bridge_slave_1: entered promiscuous mode [ 1677.980368][ T9630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.995293][ T9630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.021711][ T9630] team0: Port device team_slave_0 added [ 1678.037064][ T9630] team0: Port device team_slave_1 added [ 1678.064957][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.071969][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.097927][ T9630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.279036][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.286020][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.312019][ T9630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.362624][ T9630] hsr_slave_0: entered promiscuous mode [ 1678.368931][ T9630] hsr_slave_1: entered promiscuous mode [ 1678.374964][ T9630] debugfs: 'hsr0' already exists in 'hsr' [ 1678.380742][ T9630] Cannot create hsr debugfs directory [ 1678.590806][ T9712] sit0: left promiscuous mode [ 1678.597116][ T9714] sit0: entered promiscuous mode [ 1678.665483][ T9630] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.770662][ T9630] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.798089][ T9722] futex_wake_op: syz.4.24667 tries to shift op by 144; fix this program [ 1678.830824][ T9630] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.894260][ T9630] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.966979][ T9630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1678.975765][ T9630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1678.985089][ T9630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1678.997212][ T9630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1679.061786][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.077818][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.087226][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.094319][T18029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.140523][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.147690][T18029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.215595][ T9630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1679.226100][ T9630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1679.339991][ T9770] wg2: left promiscuous mode [ 1679.344631][ T9770] wg2: left allmulticast mode [ 1679.365265][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.384678][ T9770] wg2: entered promiscuous mode [ 1679.389942][ T9770] wg2: entered allmulticast mode [ 1679.410639][ T9771] pim6reg1: entered promiscuous mode [ 1679.416033][ T9771] pim6reg1: entered allmulticast mode [ 1679.619406][ T9630] veth0_vlan: entered promiscuous mode [ 1679.633759][ T9630] veth1_vlan: entered promiscuous mode [ 1679.655585][ T9630] veth0_macvtap: entered promiscuous mode [ 1679.663337][ T9630] veth1_macvtap: entered promiscuous mode [ 1679.675884][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.687962][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.710522][T18029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.720019][T18029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.730144][T18029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.762749][T18029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.037337][ T9820] bridge_slave_1: left allmulticast mode [ 1680.043707][ T9820] bridge_slave_1: left promiscuous mode [ 1680.052998][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.066427][ T9820] bridge_slave_0: left allmulticast mode [ 1680.072546][ T9820] bridge_slave_0: left promiscuous mode [ 1680.080924][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.568724][ T9841] futex_wake_op: syz.3.24707 tries to shift op by 144; fix this program [ 1680.867787][ T9867] syzkaller0: entered promiscuous mode [ 1680.873453][ T9867] syzkaller0: entered allmulticast mode [ 1681.673490][ T9911] ªªªªªª: renamed from vlan0 (while UP) [ 1681.782563][ T9913] syzkaller0: entered promiscuous mode [ 1681.788134][ T9913] syzkaller0: entered allmulticast mode [ 1681.814946][ T9921] syzkaller0: entered promiscuous mode [ 1681.820490][ T9921] syzkaller0: entered allmulticast mode [ 1682.171760][ T9948] wg2: left promiscuous mode [ 1682.176442][ T9948] wg2: left allmulticast mode [ 1682.199901][ T9948] wg2: entered promiscuous mode [ 1682.204819][ T9948] wg2: entered allmulticast mode [ 1682.880515][ T9988] sit0: left promiscuous mode [ 1682.923022][ T9990] wg2: entered promiscuous mode [ 1682.928009][ T9990] wg2: entered allmulticast mode [ 1682.984260][ T9988] sit0: entered promiscuous mode [ 1683.017127][ T9997] veth0_vlan: entered allmulticast mode [ 1683.067466][ T9995] syzkaller0: entered promiscuous mode [ 1683.073057][ T9995] syzkaller0: entered allmulticast mode [ 1683.315702][T10031] syzkaller0: entered promiscuous mode [ 1683.321322][T10031] syzkaller0: entered allmulticast mode [ 1683.346283][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24774'. [ 1683.355276][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24774'. [ 1683.401998][T10018] futex_wake_op: syz.6.24778 tries to shift op by 144; fix this program [ 1683.565830][T10054] veth0_vlan: left promiscuous mode [ 1683.571777][T10054] veth0_vlan: entered promiscuous mode [ 1683.824528][T10071] futex_wake_op: syz.0.24800 tries to shift op by 144; fix this program [ 1684.101599][T10090] pim6reg1: entered promiscuous mode [ 1684.106929][T10090] pim6reg1: entered allmulticast mode [ 1684.800216][T10180] syzkaller0: entered promiscuous mode [ 1684.805794][T10180] syzkaller0: entered allmulticast mode [ 1685.066675][T10194] syzkaller0: entered promiscuous mode [ 1685.072271][T10194] syzkaller0: entered allmulticast mode [ 1685.091518][T10205] wg2: left promiscuous mode [ 1685.096158][T10205] wg2: left allmulticast mode [ 1685.117817][T10205] wg2: entered promiscuous mode [ 1685.122841][T10205] wg2: entered allmulticast mode [ 1685.346432][T10242] wg2: left promiscuous mode [ 1685.351251][T10242] wg2: left allmulticast mode [ 1685.397466][T10249] wg2: entered promiscuous mode [ 1685.402538][T10249] wg2: entered allmulticast mode [ 1685.621116][T10277] pim6reg1: entered promiscuous mode [ 1685.626475][T10277] pim6reg1: entered allmulticast mode [ 1685.880438][T10294] syzkaller0: entered promiscuous mode [ 1685.885983][T10294] syzkaller0: entered allmulticast mode [ 1685.897120][T10300] wg2: left promiscuous mode [ 1685.901888][T10300] wg2: left allmulticast mode [ 1685.939317][T10300] wg2: entered promiscuous mode [ 1685.944199][T10300] wg2: entered allmulticast mode [ 1686.059464][T10307] ªªªªªª: renamed from vlan0 [ 1686.163055][T10309] pim6reg1: entered promiscuous mode [ 1686.168416][T10309] pim6reg1: entered allmulticast mode [ 1686.255218][T10326] wg2: left promiscuous mode [ 1686.259899][T10326] wg2: left allmulticast mode [ 1686.274350][T10326] wg2: entered promiscuous mode [ 1686.279388][T10326] wg2: entered allmulticast mode [ 1686.411404][T10348] pim6reg1: entered promiscuous mode [ 1686.416741][T10348] pim6reg1: entered allmulticast mode [ 1686.581192][T10371] ªªªªªª: renamed from vlan0 [ 1686.799544][T10402] ªªªªªª: renamed from vlan0 [ 1687.003915][T10426] syzkaller0: entered promiscuous mode [ 1687.009454][T10426] syzkaller0: entered allmulticast mode [ 1687.084736][T10442] wg2: left promiscuous mode [ 1687.089399][T10442] wg2: left allmulticast mode [ 1687.121920][T10442] wg2: entered promiscuous mode [ 1687.126824][T10442] wg2: entered allmulticast mode [ 1687.136514][T10445] sit0: left promiscuous mode [ 1687.212225][T10445] sit0: entered promiscuous mode [ 1687.609981][T10473] syzkaller0: entered promiscuous mode [ 1687.615503][T10473] syzkaller0: entered allmulticast mode [ 1687.712308][T10481] wg2: left promiscuous mode [ 1687.717009][T10481] wg2: left allmulticast mode [ 1687.745930][T10490] sit0: left promiscuous mode [ 1687.757606][T10490] sit0: entered promiscuous mode [ 1687.800191][T10498] sit0: entered promiscuous mode [ 1687.805179][T10498] sit0: entered allmulticast mode [ 1687.861867][T10509] wg2: entered promiscuous mode [ 1687.866861][T10509] wg2: entered allmulticast mode [ 1688.388098][T10585] syzkaller0: entered promiscuous mode [ 1688.393595][T10585] syzkaller0: entered allmulticast mode [ 1688.866702][T10599] pim6reg1: entered promiscuous mode [ 1688.872138][T10599] pim6reg1: entered allmulticast mode [ 1689.151929][T10624] syzkaller0: entered promiscuous mode [ 1689.157446][T10624] syzkaller0: entered allmulticast mode [ 1689.572283][T10676] syzkaller0: entered promiscuous mode [ 1689.577801][T10676] syzkaller0: entered allmulticast mode [ 1689.842523][T10682] syzkaller0: entered promiscuous mode [ 1689.848047][T10682] syzkaller0: entered allmulticast mode [ 1690.022302][T10691] ip6tnl0: entered allmulticast mode [ 1690.360623][T10715] syzkaller0: entered promiscuous mode [ 1690.366116][T10715] syzkaller0: entered allmulticast mode [ 1691.113545][T10771] pim6reg1: entered promiscuous mode [ 1691.118925][T10771] pim6reg1: entered allmulticast mode [ 1691.408837][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.417811][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.900944][ T29] audit: type=1400 audit(1697.886:121875): avc: denied { add_name } for pid=10817 comm="syz.6.25106" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1691.926237][ T29] audit: type=1400 audit(1697.886:121876): avc: denied { create } for pid=10817 comm="syz.6.25106" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1691.946277][ T29] audit: type=1400 audit(1697.886:121877): avc: denied { associate } for pid=10817 comm="syz.6.25106" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1691.970821][T10818] wg2: left promiscuous mode [ 1691.975595][T10818] wg2: left allmulticast mode [ 1692.136465][T10828] syzkaller0: entered promiscuous mode [ 1692.142023][T10828] syzkaller0: entered allmulticast mode [ 1692.501327][T10863] syzkaller0: entered promiscuous mode [ 1692.506821][T10863] syzkaller0: entered allmulticast mode [ 1692.791293][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.819115][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.686713][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.711004][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.233721][T10967] pim6reg1: entered promiscuous mode [ 1694.239162][T10967] pim6reg1: entered allmulticast mode [ 1694.636417][T11026] wg2: left promiscuous mode [ 1694.641146][T11026] wg2: left allmulticast mode [ 1694.767335][T11026] wg2: entered promiscuous mode [ 1694.772338][T11026] wg2: entered allmulticast mode [ 1695.633302][T11076] chnl_net:caif_netlink_parms(): no params data found [ 1695.690083][T11119] wg2: entered promiscuous mode [ 1695.695048][T11119] wg2: entered allmulticast mode [ 1695.727858][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.735072][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.754870][T11076] bridge_slave_0: entered allmulticast mode [ 1695.762851][T11076] bridge_slave_0: entered promiscuous mode [ 1695.769958][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.777005][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.784470][T11076] bridge_slave_1: entered allmulticast mode [ 1695.791046][T11076] bridge_slave_1: entered promiscuous mode [ 1695.815370][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.829534][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.868543][T11076] team0: Port device team_slave_0 added [ 1695.875367][T11076] team0: Port device team_slave_1 added [ 1695.903752][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.910882][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.936815][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.031151][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.038144][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.064110][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.120591][T11076] hsr_slave_0: entered promiscuous mode [ 1696.138756][T11076] hsr_slave_1: entered promiscuous mode [ 1696.144721][T11076] debugfs: 'hsr0' already exists in 'hsr' [ 1696.150500][T11076] Cannot create hsr debugfs directory [ 1696.309756][T11161] syzkaller0: entered promiscuous mode [ 1696.315274][T11161] syzkaller0: entered allmulticast mode [ 1696.735319][T11076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1696.772388][T11076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1696.792373][T11076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1696.814228][T11076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1696.955313][T11214] wg2: left promiscuous mode [ 1696.960081][T11214] wg2: left allmulticast mode [ 1697.006156][T11218] syzkaller0: entered promiscuous mode [ 1697.011688][T11218] syzkaller0: entered allmulticast mode [ 1697.020119][T11214] wg2: entered promiscuous mode [ 1697.025048][T11214] wg2: entered allmulticast mode [ 1697.043007][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.073419][T11076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.087439][T18026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.094642][T18026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.125090][T18026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.132226][T18026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.151929][T11231] veth0_vlan: left promiscuous mode [ 1697.157468][T11231] veth0_vlan: entered promiscuous mode [ 1697.304128][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.615427][T11076] veth0_vlan: entered promiscuous mode [ 1697.676600][T11076] veth1_vlan: entered promiscuous mode [ 1697.719704][T11076] veth0_macvtap: entered promiscuous mode [ 1697.735258][T11076] veth1_macvtap: entered promiscuous mode [ 1697.766026][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.788725][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.816760][T18049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.851429][T18049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.879377][T18049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.904166][T18049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.935965][T11268] wg2: left promiscuous mode [ 1697.940892][T11268] wg2: left allmulticast mode [ 1698.052450][T11296] syzkaller0: entered promiscuous mode [ 1698.057952][T11296] syzkaller0: entered allmulticast mode [ 1698.282653][T11330] wg2: left promiscuous mode [ 1698.287360][T11330] wg2: left allmulticast mode [ 1698.408799][T11345] syzkaller0: entered promiscuous mode [ 1698.414402][T11345] syzkaller0: entered allmulticast mode [ 1698.477828][ T3885] syz_tun (unregistering): left allmulticast mode [ 1698.919973][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25309'. [ 1698.963555][T11388] wg2: entered promiscuous mode [ 1698.968497][T11388] wg2: entered allmulticast mode [ 1698.986295][T11351] chnl_net:caif_netlink_parms(): no params data found [ 1699.107886][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.115129][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.142359][T11351] bridge_slave_0: entered allmulticast mode [ 1699.149460][T11351] bridge_slave_0: entered promiscuous mode [ 1699.162248][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.169334][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.176513][T11351] bridge_slave_1: entered allmulticast mode [ 1699.183228][T11351] bridge_slave_1: entered promiscuous mode [ 1699.205629][T11403] syzkaller0: entered promiscuous mode [ 1699.211176][T11403] syzkaller0: entered allmulticast mode [ 1699.273828][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.286574][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.314984][T11351] team0: Port device team_slave_0 added [ 1699.328687][T11351] team0: Port device team_slave_1 added [ 1699.407799][T11351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.414922][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.440979][T11351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.538013][T11351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.544999][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.570989][T11351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.653463][T11351] hsr_slave_0: entered promiscuous mode [ 1699.665831][T11351] hsr_slave_1: entered promiscuous mode [ 1699.734470][T11351] debugfs: 'hsr0' already exists in 'hsr' [ 1699.740368][T11351] Cannot create hsr debugfs directory [ 1700.150462][T11351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.251900][T11351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.371359][T11351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.451625][T11351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.574345][T11471] syzkaller0: entered promiscuous mode [ 1700.580292][T11471] syzkaller0: entered allmulticast mode [ 1700.684492][T11479] syzkaller0: entered promiscuous mode [ 1700.690093][T11479] syzkaller0: entered allmulticast mode [ 1700.707292][T11351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1700.728782][T11351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1700.749865][T11351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1700.759189][T11490] pim6reg1: entered promiscuous mode [ 1700.764527][T11490] pim6reg1: entered allmulticast mode [ 1700.774025][T11351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1700.833500][T11351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.848994][T11351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.867351][T11351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1700.877865][T11351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1700.934606][T18039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.941801][T18039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.950682][T18039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.957742][T18039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.981122][T11506] wg2: entered promiscuous mode [ 1700.986044][T11506] wg2: entered allmulticast mode [ 1701.008912][T11351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1701.051182][T11524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.060998][T11524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.175289][T11351] veth0_vlan: entered promiscuous mode [ 1701.185061][T11351] veth1_vlan: entered promiscuous mode [ 1701.216206][T11351] veth0_macvtap: entered promiscuous mode [ 1701.229650][T11351] veth1_macvtap: entered promiscuous mode [ 1701.275713][T11351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.291737][T11351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.303909][T18026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.315106][T18026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.324982][T18026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.336145][T18026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.698403][T11558] veth0_vlan: left promiscuous mode [ 1701.704276][T11558] veth0_vlan: entered promiscuous mode [ 1702.105762][T11598] syzkaller0: entered promiscuous mode [ 1702.111395][T11598] syzkaller0: entered allmulticast mode [ 1702.217817][T11615] veth0_vlan: entered allmulticast mode [ 1702.247317][T11619] pim6reg1: entered promiscuous mode [ 1702.252682][T11619] pim6reg1: entered allmulticast mode [ 1702.644691][T11663] ip6tnl0: entered allmulticast mode [ 1702.816205][T11677] ip6tnl0: entered allmulticast mode [ 1702.933107][T11688] veth0_vlan: left promiscuous mode [ 1702.949397][T11688] veth0_vlan: entered promiscuous mode [ 1702.993097][T11691] wg2: entered promiscuous mode [ 1703.000702][T11691] wg2: entered allmulticast mode [ 1703.193469][T11707] pim6reg1: entered promiscuous mode [ 1703.198872][T11707] pim6reg1: entered allmulticast mode [ 1704.100178][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.118351][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.426658][T11778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=11778 comm=syz.4.25453 [ 1705.323942][T11799] wg2: entered promiscuous mode [ 1705.328880][T11799] wg2: entered allmulticast mode [ 1705.690004][T11831] veth0_vlan: entered allmulticast mode [ 1707.560265][T11962] wg2: left promiscuous mode [ 1707.564918][T11962] wg2: left allmulticast mode [ 1707.617925][T11962] wg2: entered promiscuous mode [ 1707.622909][T11962] wg2: entered allmulticast mode [ 1707.706609][T11972] pim6reg1: entered promiscuous mode [ 1707.711976][T11972] pim6reg1: entered allmulticast mode [ 1707.739486][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.747966][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.899753][T12019] syzkaller0: entered promiscuous mode [ 1708.905255][T12019] syzkaller0: entered allmulticast mode [ 1709.532185][T12066] sit0: entered allmulticast mode [ 1709.556251][T12066] sit0: entered promiscuous mode [ 1709.821639][T12081] ªªªªªª: renamed from vlan0 (while UP) [ 1709.862216][T12083] pim6reg1: entered promiscuous mode [ 1709.867604][T12083] pim6reg1: entered allmulticast mode [ 1709.933897][T12085] wg2: left promiscuous mode [ 1709.939636][T12085] wg2: left allmulticast mode [ 1710.093596][T12096] syzkaller0: entered promiscuous mode [ 1710.099162][T12096] syzkaller0: entered allmulticast mode [ 1710.311794][T12128] wg2: entered promiscuous mode [ 1710.316693][T12128] wg2: entered allmulticast mode [ 1712.099873][T12238] sit0: left promiscuous mode [ 1712.146229][T12236] wg2: left promiscuous mode [ 1712.151888][T12236] wg2: left allmulticast mode [ 1712.168880][T12238] sit0: entered promiscuous mode [ 1712.203163][T12240] ip6tnl0: entered allmulticast mode [ 1712.292955][T12253] veth0_vlan: left promiscuous mode [ 1712.305163][T12253] veth0_vlan: entered promiscuous mode [ 1712.515483][T12272] sit0: left promiscuous mode [ 1712.539801][T12272] sit0: entered promiscuous mode [ 1712.636407][T12286] veth0_vlan: left promiscuous mode [ 1712.646470][T12286] veth0_vlan: entered promiscuous mode [ 1712.806076][T12306] sit0: left promiscuous mode [ 1712.856522][T12306] sit0: entered promiscuous mode [ 1713.181628][T12349] wg2: entered promiscuous mode [ 1713.186548][T12349] wg2: entered allmulticast mode [ 1713.299746][T12367] syzkaller0: entered promiscuous mode [ 1713.305276][T12367] syzkaller0: entered allmulticast mode [ 1713.323061][ T29] audit: type=1400 audit(1719.306:121878): avc: denied { name_bind } for pid=12369 comm="syz.0.25715" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1713.350104][ T29] audit: type=1400 audit(1719.306:121879): avc: denied { name_connect } for pid=12369 comm="syz.0.25715" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1713.567983][T12392] wg2: left promiscuous mode [ 1713.574921][T12392] wg2: left allmulticast mode [ 1713.922093][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.930737][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.446970][T12442] netlink: 'syz.3.25745': attribute type 10 has an invalid length. [ 1714.469175][T12442] macvlan1: entered promiscuous mode [ 1714.474512][T12442] macvlan1: entered allmulticast mode [ 1714.485103][T12442] veth1_vlan: entered allmulticast mode [ 1714.492710][T12442] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1714.590885][T12448] netlink: 'syz.3.25748': attribute type 10 has an invalid length. [ 1714.598909][T12448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25748'. [ 1714.619145][T12448] team0: Port device geneve1 added [ 1714.999866][T12475] sit0: entered allmulticast mode [ 1715.015358][T12477] sit0: entered promiscuous mode [ 1715.175247][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.279060][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.830127][T12519] sit0: left promiscuous mode [ 1715.863667][T12519] sit0: entered promiscuous mode [ 1716.027978][T12534] bridge0: port 3(bond0) entered blocking state [ 1716.050285][T12534] bridge0: port 3(bond0) entered disabled state [ 1716.061189][T12534] bond0: entered allmulticast mode [ 1716.066578][T12534] bond_slave_0: entered allmulticast mode [ 1716.072616][T12534] bond_slave_1: entered allmulticast mode [ 1716.086787][T12534] bond0: entered promiscuous mode [ 1716.092675][T12534] bond_slave_0: entered promiscuous mode [ 1716.100178][T12534] bond_slave_1: entered promiscuous mode [ 1716.123258][T12534] bridge0: port 3(bond0) entered blocking state [ 1716.129925][T12534] bridge0: port 3(bond0) entered forwarding state [ 1716.138493][T12543] bond0: left allmulticast mode [ 1716.143454][T12543] bond_slave_0: left allmulticast mode [ 1716.149048][T12543] bond_slave_1: left allmulticast mode [ 1716.154575][T12543] bond0: left promiscuous mode [ 1716.159376][T12543] bond_slave_0: left promiscuous mode [ 1716.164832][T12543] bond_slave_1: left promiscuous mode [ 1716.170625][T12543] bridge0: port 3(bond0) entered disabled state [ 1716.475347][T12567] syzkaller0: entered promiscuous mode [ 1716.481027][T12567] syzkaller0: entered allmulticast mode [ 1716.646888][T12582] veth0_vlan: left promiscuous mode [ 1716.668627][T12582] veth0_vlan: entered promiscuous mode [ 1716.696109][T12584] wg2: entered promiscuous mode [ 1716.701047][T12584] wg2: entered allmulticast mode [ 1716.807052][T12594] sit0: left promiscuous mode [ 1716.854373][T12599] sit0: entered promiscuous mode [ 1717.135679][T12637] netlink: 'syz.1.25822': attribute type 4 has an invalid length. [ 1717.601845][T12660] syzkaller0: entered promiscuous mode [ 1717.607375][T12660] syzkaller0: entered allmulticast mode [ 1717.689893][T12666] syzkaller0: entered promiscuous mode [ 1717.695416][T12666] syzkaller0: entered allmulticast mode [ 1717.772987][T12672] syzkaller0: entered promiscuous mode [ 1717.778620][T12672] syzkaller0: entered allmulticast mode [ 1717.968232][T12709] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.25849'. [ 1718.007944][T12705] wg2: left promiscuous mode [ 1718.012630][T12705] wg2: left allmulticast mode [ 1718.040612][T12705] wg2: entered promiscuous mode [ 1718.045521][T12705] wg2: entered allmulticast mode [ 1718.085597][T12717] pim6reg1: entered promiscuous mode [ 1718.091036][T12717] pim6reg1: entered allmulticast mode [ 1718.531822][T12760] syzkaller0: entered promiscuous mode [ 1718.537345][T12760] syzkaller0: entered allmulticast mode [ 1718.570868][ T29] audit: type=1400 audit(1724.556:121880): avc: denied { create } for pid=12756 comm="syz.3.25871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1718.595961][T12756] delete_channel: no stack [ 1718.598276][ T29] audit: type=1400 audit(1724.556:121881): avc: denied { write } for pid=12756 comm="syz.3.25871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1718.600655][T12756] delete_channel: no stack [ 1718.631068][T12764] wg2: left promiscuous mode [ 1718.700109][T12772] veth1_macvtap: left promiscuous mode [ 1718.705808][T12772] macsec0: entered allmulticast mode [ 1718.720604][T12772] veth1_macvtap: entered promiscuous mode [ 1718.726401][T12772] veth1_macvtap: entered allmulticast mode [ 1718.734152][T12772] macsec0: entered promiscuous mode [ 1718.765691][T12781] ip6tnl0: entered allmulticast mode [ 1718.855924][T12792] pim6reg1: entered promiscuous mode [ 1718.861407][T12792] pim6reg1: entered allmulticast mode [ 1718.894771][T12797] delete_channel: no stack [ 1718.899608][T12797] delete_channel: no stack [ 1718.933800][T12801] syzkaller0: entered promiscuous mode [ 1718.939469][T12801] syzkaller0: entered allmulticast mode [ 1719.084256][T12812] wg2: left promiscuous mode [ 1719.088952][T12812] wg2: left allmulticast mode [ 1719.287040][T12833] ªªªªªª: renamed from vlan0 (while UP) [ 1719.498285][T12867] netlink: 'syz.1.25916': attribute type 10 has an invalid length. [ 1719.506227][T12867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25916'. [ 1719.553555][T12867] batadv0: entered promiscuous mode [ 1719.558850][T12867] batadv0: entered allmulticast mode [ 1719.580153][T12867] bridge0: port 1(batadv0) entered blocking state [ 1719.586624][T12867] bridge0: port 1(batadv0) entered disabled state [ 1719.607301][T12867] bridge0: port 1(batadv0) entered blocking state [ 1719.609841][T12878] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.25916'. [ 1719.613823][T12867] bridge0: port 1(batadv0) entered forwarding state [ 1719.678288][T12877] veth0_vlan: left promiscuous mode [ 1719.684268][T12877] veth0_vlan: entered promiscuous mode [ 1719.789842][T18039] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1719.799207][T18039] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1719.855766][T12899] sit0: left promiscuous mode [ 1719.919665][T12899] sit0: entered promiscuous mode [ 1720.399660][T12920] chnl_net:caif_netlink_parms(): no params data found [ 1720.478052][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.485143][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.492524][T12920] bridge_slave_0: entered allmulticast mode [ 1720.499057][T12920] bridge_slave_0: entered promiscuous mode [ 1720.506049][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.513269][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.522854][T12920] bridge_slave_1: entered allmulticast mode [ 1720.529426][T12920] bridge_slave_1: entered promiscuous mode [ 1720.560109][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.581293][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.615892][T12920] team0: Port device team_slave_0 added [ 1720.622720][T12920] team0: Port device team_slave_1 added [ 1720.639990][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.646964][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.672972][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.699496][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.706449][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.732370][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.794495][T12975] pim6reg1: entered promiscuous mode [ 1720.799880][T12975] pim6reg1: entered allmulticast mode [ 1720.811762][T12920] hsr_slave_0: entered promiscuous mode [ 1720.817874][T12920] hsr_slave_1: entered promiscuous mode [ 1720.823834][T12920] debugfs: 'hsr0' already exists in 'hsr' [ 1720.829633][T12920] Cannot create hsr debugfs directory [ 1720.903304][T12984] veth0_vlan: left promiscuous mode [ 1720.921424][T12984] veth0_vlan: entered promiscuous mode [ 1720.963401][T12920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.973849][T12920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.024519][T12920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.034888][T12920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.084859][T12920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.095323][T12920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.155083][T13002] veth1_macvtap: left promiscuous mode [ 1721.160851][T13002] macsec0: entered allmulticast mode [ 1721.234766][T12920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.245180][T12920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.319234][T12920] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1721.328197][T12920] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1721.337086][T12920] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1721.358130][T12920] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1721.479406][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.501713][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.512479][T18039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.519590][T18039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.542752][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.550277][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.602436][T12920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1721.693197][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.810131][T12920] veth0_vlan: entered promiscuous mode [ 1721.822482][T12920] veth1_vlan: entered promiscuous mode [ 1721.848864][T12920] veth0_macvtap: entered promiscuous mode [ 1721.859240][T12920] veth1_macvtap: entered promiscuous mode [ 1721.880365][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.906035][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.919804][T18026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.929987][T18026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.959353][ T7449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.988378][ T7449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.024182][T13090] ip6tnl0: entered allmulticast mode [ 1722.060295][T13092] macsec0: entered promiscuous mode [ 1722.065846][T13092] macsec0: entered allmulticast mode [ 1722.071449][T13092] veth1_macvtap: entered allmulticast mode [ 1722.450865][T13134] macsec0: entered promiscuous mode [ 1722.456678][T13134] macsec0: entered allmulticast mode [ 1722.462095][T13134] veth1_macvtap: entered allmulticast mode [ 1722.533589][T13105] chnl_net:caif_netlink_parms(): no params data found [ 1722.620574][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.627655][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.641050][T13105] bridge_slave_0: entered allmulticast mode [ 1722.657475][T13105] bridge_slave_0: entered promiscuous mode [ 1722.679321][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.686415][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.704035][T13165] delete_channel: no stack [ 1722.718473][T13105] bridge_slave_1: entered allmulticast mode [ 1722.725028][T13105] bridge_slave_1: entered promiscuous mode [ 1722.756405][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.770307][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.816911][T13105] team0: Port device team_slave_0 added [ 1722.830801][T13105] team0: Port device team_slave_1 added [ 1722.844514][T13176] wg2: left promiscuous mode [ 1722.849186][T13176] wg2: left allmulticast mode [ 1722.881518][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.888573][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.914493][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.925915][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.932891][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.958895][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.986701][T13178] syzkaller0: entered promiscuous mode [ 1722.992318][T13178] syzkaller0: entered allmulticast mode [ 1723.029837][T13105] hsr_slave_0: entered promiscuous mode [ 1723.035981][T13105] hsr_slave_1: entered promiscuous mode [ 1723.042002][T13105] debugfs: 'hsr0' already exists in 'hsr' [ 1723.047721][T13105] Cannot create hsr debugfs directory [ 1723.156265][T13105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.230314][T13105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.294423][T13105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.375594][T13105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.497651][T13206] syzkaller0: entered promiscuous mode [ 1723.503204][T13206] syzkaller0: entered allmulticast mode [ 1723.553839][T13105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1723.576913][T13105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1723.592898][T13105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1723.620667][T13105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1723.676758][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.691809][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.701289][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.708399][T18031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.723018][T18049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.730161][T18049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1723.834335][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.844618][T13244] wg2: entered promiscuous mode [ 1723.849669][T13244] wg2: entered allmulticast mode [ 1723.901408][T13255] wg2: left allmulticast mode [ 1723.926274][ T29] audit: type=1400 audit(1729.896:121882): avc: denied { create } for pid=13257 comm="syz.1.26055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1724.021542][T13105] veth0_vlan: entered promiscuous mode [ 1724.029688][T13105] veth1_vlan: entered promiscuous mode [ 1724.057831][T13105] veth0_macvtap: entered promiscuous mode [ 1724.071634][T13105] veth1_macvtap: entered promiscuous mode [ 1724.090117][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.107506][T13288] wg2: left promiscuous mode [ 1724.112297][T13288] wg2: left allmulticast mode [ 1724.120154][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.160127][T18049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.215289][T18049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.234108][T18049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.274733][T18049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.312449][ T29] audit: type=1400 audit(1730.296:121883): avc: denied { write } for pid=13311 comm="syz.0.26079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1724.406921][T13322] netlink: 'syz.0.26082': attribute type 19 has an invalid length. [ 1724.415012][T13322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26082'. [ 1724.751855][T13358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26096'. [ 1724.779428][T13359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26088'. [ 1724.895733][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26100'. [ 1724.927947][T13372] veth1_macvtap: left allmulticast mode [ 1724.930400][T13366] netlink: 'syz.1.26100': attribute type 21 has an invalid length. [ 1724.934008][T13372] veth1_macvtap: left promiscuous mode [ 1724.952958][T13372] macsec0: left promiscuous mode [ 1724.990989][T13376] veth1_macvtap: entered promiscuous mode [ 1724.996765][T13376] veth1_macvtap: entered allmulticast mode [ 1725.002960][T13376] macsec0: entered promiscuous mode [ 1725.040677][T13383] pim6reg1: entered promiscuous mode [ 1725.046012][T13383] pim6reg1: entered allmulticast mode [ 1725.187205][T13387] wg2: entered promiscuous mode [ 1725.192196][T13387] wg2: entered allmulticast mode [ 1725.316723][T13395] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1725.323206][T13395] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1725.568174][T13404] wg2: entered promiscuous mode [ 1725.573078][T13404] wg2: entered allmulticast mode [ 1725.770870][T13416] netlink: 'syz.0.26121': attribute type 10 has an invalid length. [ 1725.814170][T13416] veth1_macvtap (unregistering): left allmulticast mode [ 1725.930037][T13431] sit0: left promiscuous mode [ 1725.978263][T13435] wg2: left promiscuous mode [ 1725.982905][T13435] wg2: left allmulticast mode [ 1725.993445][T13431] sit0: entered promiscuous mode [ 1726.038398][T13435] wg2: entered promiscuous mode [ 1726.043350][T13435] wg2: entered allmulticast mode [ 1726.249872][T13467] sit0: entered allmulticast mode [ 1726.263445][T13467] sit0: entered promiscuous mode [ 1726.410343][T13495] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.26156'. [ 1726.419924][T13495] netlink: zone id is out of range [ 1726.425672][T13495] netlink: del zone limit has 8 unknown bytes [ 1726.488426][T13505] ip6tnl0: entered allmulticast mode [ 1726.619164][T13523] veth1_macvtap: left promiscuous mode [ 1726.624805][T13523] macsec0: entered allmulticast mode [ 1726.633986][T13523] veth1_macvtap: entered promiscuous mode [ 1726.639848][T13523] veth1_macvtap: entered allmulticast mode [ 1726.647474][T13523] macsec0: entered promiscuous mode [ 1726.658821][T13527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26168'. [ 1726.805784][T13546] syzkaller0: entered promiscuous mode [ 1726.811358][T13546] syzkaller0: entered allmulticast mode [ 1726.895956][T13557] syzkaller0: entered promiscuous mode [ 1726.901569][T13557] syzkaller0: entered allmulticast mode [ 1727.031612][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26179'. [ 1727.602247][T13580] pim6reg1: entered promiscuous mode [ 1727.607632][T13580] pim6reg1: entered allmulticast mode [ 1728.460131][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26204'. [ 1728.559413][T13626] wg2: entered promiscuous mode [ 1728.564311][T13626] wg2: entered allmulticast mode [ 1729.214350][T13650] syzkaller0: entered promiscuous mode [ 1729.219942][T13650] syzkaller0: entered allmulticast mode [ 1729.225810][T13653] delete_channel: no stack [ 1729.231173][T13653] delete_channel: no stack [ 1729.339939][T13658] sit0: left promiscuous mode [ 1729.403860][T13663] sit0: entered promiscuous mode [ 1729.560963][T13670] pim6reg1: entered promiscuous mode [ 1729.566290][T13670] pim6reg1: entered allmulticast mode [ 1729.638763][T13676] pim6reg1: entered promiscuous mode [ 1729.644145][T13676] pim6reg1: entered allmulticast mode [ 1729.709418][T13683] veth1_macvtap: left allmulticast mode [ 1729.715114][T13683] veth1_macvtap: left promiscuous mode [ 1729.720952][T13683] macsec0: left promiscuous mode [ 1729.732530][T13683] veth1_macvtap: entered promiscuous mode [ 1729.738387][T13683] veth1_macvtap: entered allmulticast mode [ 1729.764906][T13683] macsec0: entered promiscuous mode [ 1729.813324][T13688] syzkaller0: entered promiscuous mode [ 1729.818980][T13688] syzkaller0: entered allmulticast mode [ 1729.828969][T13690] wg2: left promiscuous mode [ 1729.833626][T13690] wg2: left allmulticast mode [ 1729.912292][T13700] sit0: entered allmulticast mode [ 1729.923384][T13700] sit0: entered promiscuous mode [ 1730.020896][T13715] veth1_macvtap: left promiscuous mode [ 1730.026434][T13715] macsec0: entered allmulticast mode [ 1730.036924][T13715] veth1_macvtap: entered promiscuous mode [ 1730.042833][T13715] veth1_macvtap: entered allmulticast mode [ 1730.050407][T13715] macsec0: entered promiscuous mode [ 1730.256244][T13740] sit0: left promiscuous mode [ 1730.295959][T13740] sit0: entered promiscuous mode [ 1730.331881][T13738] pim6reg1: entered promiscuous mode [ 1730.337229][T13738] pim6reg1: entered allmulticast mode [ 1730.630976][T13768] wg2: entered promiscuous mode [ 1730.635866][T13768] wg2: entered allmulticast mode [ 1731.219905][T13813] syzkaller0: entered promiscuous mode [ 1731.225476][T13813] syzkaller0: entered allmulticast mode [ 1731.593795][T13849] veth0_vlan: entered allmulticast mode [ 1731.600298][T13855] delete_channel: no stack [ 1731.604930][T13855] delete_channel: no stack [ 1731.966534][T13896] wg2: entered promiscuous mode [ 1731.971562][T13896] wg2: entered allmulticast mode [ 1732.084782][T13904] delete_channel: no stack [ 1732.122144][T13904] delete_channel: no stack [ 1732.413269][T13936] wg2: left promiscuous mode [ 1732.417905][T13936] wg2: left allmulticast mode [ 1732.426373][T13937] delete_channel: no stack [ 1732.442138][T13937] delete_channel: no stack [ 1732.683219][T13960] syzkaller: port 1(erspan0) entered blocking state [ 1732.689888][T13960] syzkaller: port 1(erspan0) entered disabled state [ 1732.697505][T13960] erspan0: entered allmulticast mode [ 1732.705901][T13960] erspan0: entered promiscuous mode [ 1732.713745][T13960] syzkaller: port 1(erspan0) entered blocking state [ 1732.720462][T13960] syzkaller: port 1(erspan0) entered forwarding state [ 1732.929278][T13986] pim6reg1: entered promiscuous mode [ 1732.934606][T13986] pim6reg1: entered allmulticast mode [ 1732.957814][T13990] wg2: left promiscuous mode [ 1732.962511][T13990] wg2: left allmulticast mode [ 1732.985452][T13990] wg2: entered promiscuous mode [ 1732.990449][T13990] wg2: entered allmulticast mode [ 1733.712560][T14051] wg2: left promiscuous mode [ 1733.717212][T14051] wg2: left allmulticast mode [ 1733.940373][T14067] delete_channel: no stack [ 1734.568132][T14103] delete_channel: no stack [ 1734.817369][T14125] sit0: left promiscuous mode [ 1734.878645][T14133] wg2: entered promiscuous mode [ 1734.883620][T14133] wg2: entered allmulticast mode [ 1734.949125][T14136] sit0: entered promiscuous mode [ 1735.155857][T14147] pim6reg1: entered promiscuous mode [ 1735.161264][T14147] pim6reg1: entered allmulticast mode [ 1735.178771][T14153] wg2: left promiscuous mode [ 1735.183397][T14153] wg2: left allmulticast mode [ 1735.391132][T14156] wg2: left promiscuous mode [ 1735.395884][T14156] wg2: left allmulticast mode [ 1735.497719][T14156] wg2: entered promiscuous mode [ 1735.502683][T14156] wg2: entered allmulticast mode [ 1736.016927][T14190] syzkaller0: entered promiscuous mode [ 1736.023115][T14190] syzkaller0: entered allmulticast mode [ 1736.352323][T14221] pim6reg1: entered promiscuous mode [ 1736.357643][T14221] pim6reg1: entered allmulticast mode [ 1736.495428][T14235] pim6reg1: entered promiscuous mode [ 1736.500981][T14235] pim6reg1: entered allmulticast mode [ 1736.978838][T14262] pim6reg1: entered promiscuous mode [ 1736.984189][T14262] pim6reg1: entered allmulticast mode [ 1737.015150][T14266] netlink: 'syz.6.26474': attribute type 4 has an invalid length. [ 1737.188060][T14278] sit0: left promiscuous mode [ 1737.234094][T14278] sit0: entered promiscuous mode [ 1737.421462][T14297] pim6reg1: entered promiscuous mode [ 1737.426805][T14297] pim6reg1: entered allmulticast mode [ 1737.679147][T14324] wg2: left promiscuous mode [ 1737.683770][T14324] wg2: left allmulticast mode [ 1737.737819][T14324] wg2: entered promiscuous mode [ 1737.742878][T14324] wg2: entered allmulticast mode [ 1737.982729][T14354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.992148][T14354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.994881][T14343] syzkaller0: entered promiscuous mode [ 1738.008199][T14343] syzkaller0: entered allmulticast mode [ 1738.046730][T14356] wg2: left promiscuous mode [ 1738.051471][T14356] wg2: left allmulticast mode [ 1738.466243][T14388] sit0: left promiscuous mode [ 1738.492397][T14390] wg2: left promiscuous mode [ 1738.497028][T14390] wg2: left allmulticast mode [ 1738.505981][T14388] sit0: entered promiscuous mode [ 1738.550870][T14390] wg2: entered promiscuous mode [ 1738.555756][T14390] wg2: entered allmulticast mode [ 1738.740858][T14425] sit0: left promiscuous mode [ 1738.773607][T14425] sit0: entered promiscuous mode [ 1738.831527][T14428] wg2: left promiscuous mode [ 1738.836197][T14428] wg2: left allmulticast mode [ 1738.861977][T14434] wg2: entered promiscuous mode [ 1738.866917][T14434] wg2: entered allmulticast mode [ 1739.485216][T14510] pim6reg1: entered promiscuous mode [ 1739.490656][T14510] pim6reg1: entered allmulticast mode [ 1739.508885][T14511] veth0_vlan: entered allmulticast mode [ 1740.002446][T14552] wg2: entered promiscuous mode [ 1740.007389][T14552] wg2: entered allmulticast mode [ 1740.159955][T14561] bridge0: port 3(hsr_slave_1) entered blocking state [ 1740.166797][T14561] bridge0: port 3(hsr_slave_1) entered disabled state [ 1740.217385][T14561] hsr_slave_1: entered allmulticast mode [ 1740.243544][T14561] hsr_slave_1: left allmulticast mode [ 1740.603597][T14582] syzkaller0: entered promiscuous mode [ 1740.609636][T14582] syzkaller0: entered allmulticast mode [ 1741.173221][ T29] audit: type=1400 audit(1747.156:121884): avc: denied { mount } for pid=14655 comm="syz.1.26643" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1741.209292][ T29] audit: type=1400 audit(1747.156:121885): avc: denied { mounton } for pid=14655 comm="syz.1.26643" path="/133/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1741.234335][ T29] audit: type=1400 audit(1747.216:121886): avc: denied { unmount } for pid=12920 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1741.311411][T14669] syzkaller0: entered promiscuous mode [ 1741.317050][T14669] syzkaller0: entered allmulticast mode [ 1741.392948][ T29] audit: type=1400 audit(1747.376:121887): avc: denied { watch watch_reads } for pid=14678 comm="syz.0.26653" path="/267" dev="tmpfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1741.516127][ T29] audit: type=1400 audit(1747.496:121888): avc: denied { mounton } for pid=14689 comm="syz.0.26658" path="/270/bus" dev="tmpfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1741.625939][T14698] delete_channel: no stack [ 1741.630654][T14698] delete_channel: no stack [ 1741.732658][T14707] syzkaller0: entered promiscuous mode [ 1741.738263][T14707] syzkaller0: entered allmulticast mode [ 1741.777838][T14714] sit0: left promiscuous mode [ 1741.815728][T14714] sit0: entered promiscuous mode [ 1741.929960][T14725] wg2: entered promiscuous mode [ 1741.934909][T14725] wg2: entered allmulticast mode [ 1742.066235][ T29] audit: type=1400 audit(1748.046:121889): avc: denied { mount } for pid=14747 comm="syz.1.26684" name="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1742.088916][ T29] audit: type=1400 audit(1748.046:121890): avc: denied { search } for pid=14747 comm="syz.1.26684" name="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.111105][ T29] audit: type=1400 audit(1748.046:121891): avc: denied { search } for pid=14747 comm="syz.1.26684" name="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.133124][ T29] audit: type=1400 audit(1748.046:121892): avc: denied { read open } for pid=14747 comm="syz.1.26684" path="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1742.232912][T14754] wg2: left promiscuous mode [ 1742.237551][T14754] wg2: left allmulticast mode [ 1742.281173][T14754] wg2: entered promiscuous mode [ 1742.286111][T14754] wg2: entered allmulticast mode [ 1742.489303][T14772] syzkaller0: entered promiscuous mode [ 1742.495032][T14772] syzkaller0: entered allmulticast mode [ 1742.837292][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.859895][T14832] wg2: left promiscuous mode [ 1742.864522][T14832] wg2: left allmulticast mode [ 1742.871249][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.895450][T14842] pim6reg1: entered promiscuous mode [ 1742.900846][T14842] pim6reg1: entered allmulticast mode [ 1742.961803][T14832] wg2: entered promiscuous mode [ 1742.966708][T14832] wg2: entered allmulticast mode [ 1743.100799][T14877] pim6reg1: entered promiscuous mode [ 1743.106270][T14877] pim6reg1: entered allmulticast mode [ 1743.692348][T14914] pim6reg1: entered promiscuous mode [ 1743.697695][T14914] pim6reg1: entered allmulticast mode [ 1743.897989][T14949] syzkaller0: entered promiscuous mode [ 1743.903629][T14949] syzkaller0: entered allmulticast mode [ 1744.230359][T14990] syzkaller0: entered promiscuous mode [ 1744.235926][T14990] syzkaller0: entered allmulticast mode [ 1744.346220][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.357527][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.460595][T15004] syzkaller0: entered promiscuous mode [ 1744.466432][T15004] syzkaller0: entered allmulticast mode [ 1744.528612][T15012] syzkaller0: entered promiscuous mode [ 1744.534168][T15012] syzkaller0: entered allmulticast mode [ 1744.752521][T15036] netlink: 'syz.6.26812': attribute type 4 has an invalid length. [ 1744.839198][T15045] delete_channel: no stack [ 1744.846052][T15045] delete_channel: no stack [ 1744.960685][T15051] syzkaller0: entered promiscuous mode [ 1744.966325][T15051] syzkaller0: entered allmulticast mode [ 1745.352076][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.592236][T15080] delete_channel: no stack [ 1745.602246][T15080] delete_channel: no stack [ 1745.946267][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.955160][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.288040][ T29] audit: type=1400 audit(1752.266:121893): avc: denied { watch } for pid=15137 comm="syz.6.26856" path="/479/file0" dev="tmpfs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1746.443616][T15155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.461029][T15155] bridge0: entered allmulticast mode [ 1746.567543][T15167] delete_channel: no stack [ 1746.582691][T15167] delete_channel: no stack [ 1746.597104][T15144] bridge_slave_1: left allmulticast mode [ 1746.602837][T15144] bridge_slave_1: left promiscuous mode [ 1746.608599][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.627108][T15144] bridge_slave_0: left promiscuous mode [ 1746.632878][T15144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.989610][T15198] netlink: 132 bytes leftover after parsing attributes in process `syz.6.26878'. [ 1747.325693][T15210] delete_channel: no stack [ 1747.342376][T15210] delete_channel: no stack [ 1747.444467][T15220] syzkaller0: entered promiscuous mode [ 1747.450080][T15220] syzkaller0: entered allmulticast mode [ 1747.858695][T15250] delete_channel: no stack [ 1747.863271][T15250] delete_channel: no stack [ 1748.169175][T15298] delete_channel: no stack [ 1748.173813][T15298] delete_channel: no stack [ 1749.074093][ T29] audit: type=1400 audit(1754.826:121894): avc: denied { create } for pid=15341 comm="syz.0.26938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1749.093690][ T29] audit: type=1400 audit(1754.956:121895): avc: denied { recv } for pid=15357 comm="syz.6.26944" saddr=10.128.0.163 src=30036 daddr=10.128.1.116 dest=60752 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1749.119044][ T29] audit: type=1400 audit(1755.046:121896): avc: denied { map_create } for pid=15357 comm="syz.6.26944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1749.137983][ T29] audit: type=1400 audit(1755.056:121897): avc: denied { bpf } for pid=15357 comm="syz.6.26944" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1749.158493][ T29] audit: type=1400 audit(1755.056:121898): avc: denied { map_read map_write } for pid=15357 comm="syz.6.26944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1749.178278][ T29] audit: type=1400 audit(1755.056:121899): avc: denied { prog_load } for pid=15357 comm="syz.6.26944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1749.197141][ T29] audit: type=1400 audit(1755.056:121900): avc: denied { perfmon } for pid=15357 comm="syz.6.26944" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1749.218017][ T29] audit: type=1400 audit(1755.056:121901): avc: denied { prog_run } for pid=15357 comm="syz.6.26944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1749.236819][ T29] audit: type=1400 audit(1755.056:121902): avc: denied { write } for pid=15357 comm="syz.6.26944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1749.383740][T15341] delete_channel: no stack [ 1749.397808][T15341] delete_channel: no stack [ 1749.811882][T15406] netlink: 'syz.6.26960': attribute type 4 has an invalid length. [ 1750.956105][T15447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.503539][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1751.503557][ T29] audit: type=1400 audit(1757.166:121946): avc: denied { create } for pid=15448 comm="syz.6.26981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1751.529373][ T29] audit: type=1400 audit(1757.166:121947): avc: denied { connect } for pid=15448 comm="syz.6.26981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1751.548856][ T29] audit: type=1400 audit(1757.166:121948): avc: denied { shutdown } for pid=15448 comm="syz.6.26981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1751.648449][ T29] audit: type=1400 audit(1757.556:121949): avc: denied { connect } for pid=15454 comm="syz.4.26984" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1751.691017][ T29] audit: type=1400 audit(1757.676:121950): avc: denied { create } for pid=15461 comm="syz.0.26985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1751.812386][T15460] sit0: left promiscuous mode [ 1751.817088][T15460] sit0: left allmulticast mode [ 1751.834394][T15460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1752.100342][ T29] audit: type=1400 audit(1758.076:121951): avc: denied { create } for pid=15470 comm="syz.3.26989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1752.157365][ T29] audit: type=1400 audit(1758.136:121952): avc: denied { create } for pid=15470 comm="syz.3.26989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1752.204065][T15470] delete_channel: no stack [ 1752.219574][T15470] delete_channel: no stack [ 1752.258140][ T29] audit: type=1400 audit(1758.236:121953): avc: denied { create } for pid=15461 comm="syz.0.26985" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1752.354466][ T29] audit: type=1400 audit(1758.336:121954): avc: denied { relabelfrom } for pid=15477 comm="syz.3.26992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1752.374179][ T29] audit: type=1400 audit(1758.336:121955): avc: denied { relabelto } for pid=15477 comm="syz.3.26992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1752.460212][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.484117][T15469] bridge0: entered allmulticast mode [ 1755.698407][T15580] SELinux: policydb magic number 0xa does not match expected magic number 0xf97cff8c [ 1755.724409][T15577] delete_channel: no stack [ 1755.725760][T15580] SELinux: failed to load policy [ 1755.737157][T15577] delete_channel: no stack [ 1756.452534][T15619] delete_channel: no stack [ 1756.457128][T15619] delete_channel: no stack [ 1756.653825][T15631] netlink: 'syz.3.27050': attribute type 29 has an invalid length. [ 1756.762831][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1756.762848][ T29] audit: type=1400 audit(1762.736:121973): avc: denied { create } for pid=15625 comm="syz.6.27049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1756.788155][ T29] audit: type=1400 audit(1762.736:121974): avc: denied { bind } for pid=15625 comm="syz.6.27049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1756.807205][ T29] audit: type=1400 audit(1762.736:121975): avc: denied { setopt } for pid=15625 comm="syz.6.27049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1757.067767][ T29] audit: type=1400 audit(1762.816:121976): avc: denied { create } for pid=15634 comm="syz.3.27052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1757.087345][ T29] audit: type=1400 audit(1762.826:121977): avc: denied { create } for pid=15632 comm="syz.4.27051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1757.723270][T15655] delete_channel: no stack [ 1757.727945][T15655] delete_channel: no stack [ 1757.820326][T15666] wg2: left promiscuous mode [ 1757.824963][T15666] wg2: left allmulticast mode [ 1757.843304][T15666] wg2: entered promiscuous mode [ 1757.848250][T15666] wg2: entered allmulticast mode [ 1757.955623][T15673] syzkaller0: entered promiscuous mode [ 1757.961251][T15673] syzkaller0: entered allmulticast mode [ 1758.814986][T15695] delete_channel: no stack [ 1758.836141][T15695] delete_channel: no stack [ 1758.891814][T15705] sch_fq: defrate 4294967295 ignored. [ 1759.187864][ T29] audit: type=1400 audit(1765.096:121978): avc: denied { write } for pid=15714 comm="syz.4.27081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1759.207290][ T29] audit: type=1400 audit(1765.096:121979): avc: denied { read write } for pid=15714 comm="syz.4.27081" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1759.231687][ T29] audit: type=1400 audit(1765.096:121980): avc: denied { open } for pid=15714 comm="syz.4.27081" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1759.916704][T15742] delete_channel: no stack [ 1759.925479][T15742] delete_channel: no stack [ 1759.964099][T15751] syzkaller0: entered promiscuous mode [ 1759.969813][T15751] syzkaller0: entered allmulticast mode [ 1760.278472][ T29] audit: type=1400 audit(1766.196:121981): avc: denied { watch } for pid=15763 comm="syz.0.27100" path="/358/control" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1760.621415][T15787] syzkaller0: entered promiscuous mode [ 1760.626933][T15787] syzkaller0: entered allmulticast mode [ 1760.781902][ T29] audit: type=1400 audit(1766.766:121982): avc: denied { search } for pid=15807 comm="syz.6.27118" name="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1761.000339][T15820] syzkaller0: entered promiscuous mode [ 1761.005900][T15820] syzkaller0: entered allmulticast mode [ 1761.852767][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1761.852782][ T29] audit: type=1400 audit(1767.836:121992): avc: denied { write } for pid=15861 comm="syz.1.27139" path="socket:[328113]" dev="sockfs" ino=328113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1762.138774][T15883] pim6reg1: entered promiscuous mode [ 1762.144170][T15883] pim6reg1: entered allmulticast mode [ 1762.382977][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.488770][T15900] netlink: 'syz.0.27156': attribute type 4 has an invalid length. [ 1762.627477][ T29] audit: type=1326 audit(1768.576:121993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.27161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961ee0eba9 code=0x7ffc0000 [ 1762.650839][ T29] audit: type=1326 audit(1768.576:121994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.27161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f961ee0eba9 code=0x7ffc0000 [ 1762.674072][ T29] audit: type=1326 audit(1768.576:121995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.27161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961ee0eba9 code=0x7ffc0000 [ 1762.697360][ T29] audit: type=1326 audit(1768.576:121996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.27161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f961ee0eba9 code=0x7ffc0000 [ 1762.720564][ T29] audit: type=1326 audit(1768.576:121997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.27161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961ee0eba9 code=0x7ffc0000 [ 1762.743758][ T29] audit: type=1326 audit(1768.576:121998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.27161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961ee0eba9 code=0x7ffc0000 [ 1762.968422][T15910] syzkaller0: entered promiscuous mode [ 1762.973968][T15910] syzkaller0: entered allmulticast mode [ 1763.028357][ T29] audit: type=1400 audit(1769.016:121999): avc: denied { bind } for pid=15920 comm="syz.3.27165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1763.130446][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.138262][T15930] delete_channel: no stack [ 1763.143110][T15930] delete_channel: no stack [ 1763.184355][T15937] pim6reg1: entered promiscuous mode [ 1763.189752][T15937] pim6reg1: entered allmulticast mode [ 1763.224460][T15943] ip6tnl0: entered allmulticast mode [ 1764.137845][T15975] pim6reg1: entered promiscuous mode [ 1764.143261][T15975] pim6reg1: entered allmulticast mode [ 1764.226932][T15970] delete_channel: no stack [ 1764.266221][T15970] delete_channel: no stack [ 1764.273852][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.300470][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.465873][ T29] audit: type=1400 audit(1770.256:122000): avc: denied { read write } for pid=15983 comm="syz.6.27192" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1764.489884][ T29] audit: type=1400 audit(1770.256:122001): avc: denied { open } for pid=15983 comm="syz.6.27192" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1765.176427][T16008] wg2: left promiscuous mode [ 1765.181156][T16008] wg2: left allmulticast mode [ 1765.296236][T16008] wg2: entered promiscuous mode [ 1765.301214][T16008] wg2: entered allmulticast mode [ 1765.395717][T16021] netlink: 'syz.4.27206': attribute type 4 has an invalid length. [ 1765.463430][T16023] syzkaller0: entered promiscuous mode [ 1765.468949][T16023] syzkaller0: entered allmulticast mode [ 1765.504115][T16026] delete_channel: no stack [ 1765.512129][T16026] delete_channel: no stack [ 1765.638714][T16039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.690958][T16039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.632534][T16074] pim6reg1: entered promiscuous mode [ 1766.637875][T16074] pim6reg1: entered allmulticast mode [ 1767.440052][T16117] pim6reg1: entered promiscuous mode [ 1767.445425][T16117] pim6reg1: entered allmulticast mode [ 1769.068147][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1769.068164][ T29] audit: type=1400 audit(1775.016:122009): avc: denied { connect } for pid=16159 comm="syz.1.27263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1769.184701][T16143] bridge_slave_1: left allmulticast mode [ 1769.190490][T16143] bridge_slave_1: left promiscuous mode [ 1769.196163][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.205584][T16143] bridge_slave_0: left promiscuous mode [ 1769.211513][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.242720][ T29] audit: type=1400 audit(1775.226:122010): avc: denied { ioctl } for pid=16177 comm="syz.3.27269" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1769.337446][ T29] audit: type=1400 audit(1775.316:122011): avc: denied { create } for pid=16183 comm="syz.1.27273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1770.473472][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.480700][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.610493][T16213] bridge0: entered allmulticast mode [ 1770.675482][T16225] bridge_slave_1: left allmulticast mode [ 1770.681194][T16225] bridge_slave_1: left promiscuous mode [ 1770.686857][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.778030][ T29] audit: type=1400 audit(1776.756:122012): avc: denied { read } for pid=16230 comm="syz.6.27291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1770.962481][T16225] bridge_slave_0: left allmulticast mode [ 1770.968181][T16225] bridge_slave_0: left promiscuous mode [ 1770.973865][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.648068][ T29] audit: type=1400 audit(1777.006:122013): avc: denied { write } for pid=16232 comm="syz.1.27292" path="socket:[328832]" dev="sockfs" ino=328832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1771.999870][T16251] wg2: left promiscuous mode [ 1772.004652][T16251] wg2: left allmulticast mode [ 1772.024146][T16251] wg2: entered promiscuous mode [ 1772.029107][T16251] wg2: entered allmulticast mode [ 1772.143927][ T29] audit: type=1400 audit(1778.126:122014): avc: denied { cpu } for pid=16264 comm="syz.6.27305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1772.640745][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.650055][T16276] bridge0: entered allmulticast mode [ 1772.659261][T16276] bridge_slave_1: left allmulticast mode [ 1772.664933][T16276] bridge_slave_1: left promiscuous mode [ 1772.670730][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.712316][T16276] bridge_slave_0: left promiscuous mode [ 1772.718136][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.603349][ T29] audit: type=1400 audit(1779.576:122015): avc: denied { map_create } for pid=16324 comm="syz.3.27327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1773.622347][ T29] audit: type=1400 audit(1779.586:122016): avc: denied { map_read map_write } for pid=16324 comm="syz.3.27327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1773.642105][ T29] audit: type=1400 audit(1779.586:122017): avc: denied { prog_load } for pid=16324 comm="syz.3.27327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1773.661068][ T29] audit: type=1400 audit(1779.586:122018): avc: denied { bpf } for pid=16324 comm="syz.3.27327" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1774.055636][T16354] netlink: 'syz.4.27337': attribute type 4 has an invalid length. [ 1774.063611][T16354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27337'. [ 1774.077941][T16356] bridge_slave_0: entered allmulticast mode [ 1774.107819][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1774.107832][ T29] audit: type=1400 audit(1780.086:122040): avc: denied { read write } for pid=16353 comm="syz.4.27337" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1774.109338][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.117255][ T29] audit: type=1400 audit(1780.086:122041): avc: denied { open } for pid=16353 comm="syz.4.27337" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1774.168964][ T29] audit: type=1400 audit(1780.086:122042): avc: denied { ioctl } for pid=16353 comm="syz.4.27337" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1774.193746][ T29] audit: type=1400 audit(1780.096:122043): avc: denied { cpu } for pid=16359 comm="syz.0.27339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1774.272375][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.435023][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.443523][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.455192][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.470146][ T29] audit: type=1400 audit(1780.456:122044): avc: denied { create } for pid=16375 comm="syz.3.27345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1774.488103][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.540680][ T29] audit: type=1400 audit(1780.476:122045): avc: denied { read } for pid=16375 comm="syz.3.27345" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1774.563345][ T29] audit: type=1400 audit(1780.476:122046): avc: denied { open } for pid=16375 comm="syz.3.27345" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1774.586739][ T29] audit: type=1400 audit(1780.496:122047): avc: denied { create } for pid=16377 comm="syz.0.27346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1774.606089][ T29] audit: type=1400 audit(1780.496:122048): avc: denied { execmem } for pid=16377 comm="syz.0.27346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1774.625240][ T29] audit: type=1400 audit(1780.516:122049): avc: denied { allowed } for pid=16375 comm="syz.3.27345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1774.678466][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.694633][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.819164][T16385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.845819][T16385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.958604][T18026] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.035848][T16438] pim6reg1: entered promiscuous mode [ 1776.041255][T16438] pim6reg1: entered allmulticast mode [ 1776.067331][T18026] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.106916][T16443] wg2: left promiscuous mode [ 1776.111640][T16443] wg2: left allmulticast mode [ 1776.121471][T16443] wg2: entered promiscuous mode [ 1776.126499][T16443] wg2: entered allmulticast mode [ 1776.146674][T18026] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.291266][T18026] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.574187][T16418] chnl_net:caif_netlink_parms(): no params data found [ 1776.758232][T18026] bridge_slave_1: left allmulticast mode [ 1776.763882][T18026] bridge_slave_1: left promiscuous mode [ 1776.769538][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.796640][T18026] bridge_slave_0: left promiscuous mode [ 1776.802402][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.323778][T18026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.336448][T18026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1777.348979][T18026] bond0 (unregistering): Released all slaves [ 1777.373145][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.380297][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.387951][T16418] bridge_slave_0: entered allmulticast mode [ 1777.397655][T16418] bridge_slave_0: entered promiscuous mode [ 1777.411869][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.419025][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.426547][T16418] bridge_slave_1: entered allmulticast mode [ 1777.467475][T16418] bridge_slave_1: entered promiscuous mode [ 1777.547723][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.560760][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.579733][T18026] hsr_slave_0: left promiscuous mode [ 1777.590652][T18026] hsr_slave_1: left promiscuous mode [ 1777.596255][T18026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.603723][T18026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.615393][T18026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.622909][T18026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.635774][T18026] veth0_macvtap: left promiscuous mode [ 1777.641443][T18026] veth1_vlan: left promiscuous mode [ 1777.697881][T18026] team0 (unregistering): Port device team_slave_1 removed [ 1777.707545][T18026] team0 (unregistering): Port device team_slave_0 removed [ 1777.741643][T16418] team0: Port device team_slave_0 added [ 1777.748688][T16418] team0: Port device team_slave_1 added [ 1777.754691][T16483] pim6reg1: entered promiscuous mode [ 1777.760205][T16483] pim6reg1: entered allmulticast mode [ 1777.815847][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.822856][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.848913][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.860837][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.867784][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.893711][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.943730][T16418] hsr_slave_0: entered promiscuous mode [ 1777.955004][T16418] hsr_slave_1: entered promiscuous mode [ 1777.963688][T16418] debugfs: 'hsr0' already exists in 'hsr' [ 1777.969480][T16418] Cannot create hsr debugfs directory [ 1779.005346][T16418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1779.035078][T16418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1779.045250][T16418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1779.056948][T16418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1779.182770][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 1779.182783][ T29] audit: type=1400 audit(1785.166:122125): avc: denied { setopt } for pid=16539 comm="syz.0.27399" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1779.228021][ T29] audit: type=1400 audit(1785.206:122126): avc: denied { cpu } for pid=16542 comm="syz.0.27401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1779.251672][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.262435][ T29] audit: type=1400 audit(1785.216:122127): avc: denied { relabelfrom } for pid=16538 comm="syz.4.27400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1779.282212][ T29] audit: type=1400 audit(1785.216:122128): avc: denied { relabelto } for pid=16538 comm="syz.4.27400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1779.357854][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.364195][ T29] audit: type=1400 audit(1785.336:122129): avc: denied { create } for pid=16550 comm="syz.0.27404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1779.377405][T18044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.390820][T18044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1779.398066][ T29] audit: type=1400 audit(1785.356:122130): avc: denied { write } for pid=16550 comm="syz.0.27404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1779.398176][T18044] ================================================================== [ 1779.425339][T18044] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1779.432367][T18044] [ 1779.434714][T18044] write to 0xffffffff86946d48 of 88 bytes by task 29 on cpu 1: [ 1779.442239][T18044] prb_reserve+0x696/0xaf0 [ 1779.446663][T18044] vprintk_store+0x56d/0x860 [ 1779.451237][T18044] vprintk_emit+0x178/0x650 [ 1779.455724][T18044] vprintk_default+0x26/0x30 [ 1779.460304][T18044] vprintk+0x1d/0x30 [ 1779.464186][T18044] _printk+0x79/0xa0 [ 1779.468068][T18044] kauditd_hold_skb+0x1b1/0x1c0 [ 1779.472901][T18044] kauditd_send_queue+0x273/0x2c0 [ 1779.477915][T18044] kauditd_thread+0x421/0x630 [ 1779.482593][T18044] kthread+0x489/0x510 [ 1779.486649][T18044] ret_from_fork+0x11f/0x1b0 [ 1779.491224][T18044] ret_from_fork_asm+0x1a/0x30 [ 1779.495981][T18044] [ 1779.498287][T18044] read to 0xffffffff86946d48 of 8 bytes by task 18044 on cpu 0: [ 1779.505900][T18044] _prb_read_valid+0x383/0x920 [ 1779.510665][T18044] prb_read_valid+0x3c/0x60 [ 1779.515159][T18044] console_unlock+0x164/0x330 [ 1779.519816][T18044] vprintk_emit+0x388/0x650 [ 1779.524304][T18044] vprintk_default+0x26/0x30 [ 1779.528878][T18044] vprintk+0x1d/0x30 [ 1779.532761][T18044] _printk+0x79/0xa0 [ 1779.536644][T18044] br_set_state+0x28c/0x390 [ 1779.541137][T18044] br_make_forwarding+0xbc/0x150 [ 1779.546064][T18044] br_port_state_selection+0x113/0x330 [ 1779.551520][T18044] br_stp_enable_port+0xd4/0x110 [ 1779.556441][T18044] br_port_carrier_check+0x200/0x230 [ 1779.561709][T18044] br_device_event+0x3ce/0x5f0 [ 1779.566498][T18044] raw_notifier_call_chain+0x6f/0x1b0 [ 1779.571852][T18044] call_netdevice_notifiers_info+0xae/0x100 [ 1779.577735][T18044] netif_state_change+0x16d/0x1f0 [ 1779.582749][T18044] linkwatch_do_dev+0xb9/0xf0 [ 1779.587409][T18044] __linkwatch_run_queue+0x582/0x850 [ 1779.592678][T18044] linkwatch_event+0x40/0x50 [ 1779.597253][T18044] process_scheduled_works+0x4cb/0x9d0 [ 1779.602703][T18044] worker_thread+0x582/0x770 [ 1779.607281][T18044] kthread+0x489/0x510 [ 1779.611355][T18044] ret_from_fork+0x11f/0x1b0 [ 1779.615931][T18044] ret_from_fork_asm+0x1a/0x30 [ 1779.620680][T18044] [ 1779.622982][T18044] value changed: 0x0000000000003fd1 -> 0x0000000000005fd1 [ 1779.630063][T18044] [ 1779.632378][T18044] Reported by Kernel Concurrency Sanitizer on: [ 1779.638517][T18044] CPU: 0 UID: 0 PID: 18044 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1779.650132][T18044] Tainted: [W]=WARN [ 1779.653918][T18044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1779.663956][T18044] Workqueue: events_unbound linkwatch_event [ 1779.669840][T18044] ================================================================== [ 1779.690057][T16418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1779.700419][T16418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1779.768515][T18044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.775589][T18044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1779.789600][ T29] audit: type=1400 audit(1785.776:122131): avc: denied { egress } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1779.811625][ T29] audit: type=1400 audit(1785.776:122132): avc: denied { sendto } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1779.843043][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.963370][ T29] audit: type=1400 audit(1785.926:122133): avc: denied { create } for pid=16552 comm="syz.3.27405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1779.982901][ T29] audit: type=1400 audit(1785.926:122134): avc: denied { bind } for pid=16552 comm="syz.3.27405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1780.116729][T16418] veth0_vlan: entered promiscuous mode [ 1780.131284][T16418] veth1_vlan: entered promiscuous mode [ 1780.154094][T16418] veth0_macvtap: entered promiscuous mode [ 1780.164826][T16418] veth1_macvtap: entered promiscuous mode [ 1780.177866][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1780.193898][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1780.232410][T18027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.241607][T18027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.262160][T18044] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.275260][T18044] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0