last executing test programs: 6m31.352901788s ago: executing program 1 (id=2326): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000015"], 0xa8}}, 0x40000) 6m31.284287344s ago: executing program 1 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 6m31.283628603s ago: executing program 1 (id=2331): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1a1642, 0x148) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pwrite64(r0, 0x0, 0x0, 0xfecc) 6m31.228184438s ago: executing program 1 (id=2334): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x221) 6m31.227743108s ago: executing program 1 (id=2335): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 6m31.166463303s ago: executing program 1 (id=2339): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x2}, 0x18) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 6m31.158418804s ago: executing program 32 (id=2339): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x2}, 0x18) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 6m29.199658262s ago: executing program 3 (id=2392): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x1, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="09007468e300000018000280"], 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="010300000000fcdbdf250500000008000300", @ANYRES32=r4, @ANYBLOB="f56a1275a82bc12f3d1fdacbddf9932f4b9d7d849ca8c8f912369841f3d2b05b85e7c5271a7e05993d26cf0f8b85bfac2d5468f00665c100c1c3119b1bd485614350a613beb58cb24347df16c8405da39b24c49d6e3e24da928efb3e4867aa84111dfc718057325eaa4feda7bd8cbc9f20714ff57b42dc1645a7e7dd7061d92f00"/138], 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0x2, 0x300) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=r8, @ANYBLOB="0000000f15943000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3b5000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x200000000000006}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m28.927798474s ago: executing program 3 (id=2395): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 6m28.844399681s ago: executing program 3 (id=2400): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$char_usb(r0, 0x0, 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x2) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000080)='./cgroup\x00') unshare(0x2c060000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'dvmrp1\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000800)=0x6, 0x4) getsockopt$netlink(r5, 0x10e, 0x5, &(0x7f0000000d00)=""/4096, &(0x7f00000001c0)=0x1000) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f00000002c0)={0x1, 0x2}, 0x8) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$inet6(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0xa, 0x4e22, 0xfffff000, @mcast1, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000740)="a146c73f5336781325f35782ad50709ac90f8425d9f8dc00835725b9752883c8b5c04d6087221ac6f2ada3a0d62a8504a5f445247e13a79f48", 0x39}], 0x1}, 0x0) 6m28.697651103s ago: executing program 3 (id=2405): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 6m28.37066798s ago: executing program 3 (id=2412): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 6m27.910965077s ago: executing program 3 (id=2425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 6m27.910585567s ago: executing program 33 (id=2425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 4m39.406206181s ago: executing program 4 (id=6227): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0xa280024) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0x8, 0x49d) 4m39.310620418s ago: executing program 4 (id=6232): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4m39.205414807s ago: executing program 4 (id=6233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0, 0x0, 0x8000000000000}, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 4m39.181738129s ago: executing program 4 (id=6235): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 4m39.16527902s ago: executing program 4 (id=6237): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 4m39.022941672s ago: executing program 4 (id=6241): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\x00!G', 0x3}], 0x1, 0x73a, 0x1) 4m39.022825822s ago: executing program 34 (id=6241): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\x00!G', 0x3}], 0x1, 0x73a, 0x1) 1.228406481s ago: executing program 6 (id=13254): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xa}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000800)='./file0\x00', 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 1.206461862s ago: executing program 6 (id=13255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b8b28225cc772f31e7e8c7c98100", 0xe}], 0x1}, 0x44000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x8, {0x2f, 0x5, 0x10, 0x1c, 0x9, 0x1000, 0x4, 0x8a, 0xffffffffffffffff}}) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.186717164s ago: executing program 0 (id=13256): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 1.098864441s ago: executing program 5 (id=13257): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004a010}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect_ath9k(0x3, 0xfeab, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) 1.040388056s ago: executing program 6 (id=13259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b8b28225cc772f31e7e8c7c98100", 0xe}], 0x1}, 0x44000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x8, {0x2f, 0x5, 0x10, 0x1c, 0x9, 0x1000, 0x4, 0x8a, 0xffffffffffffffff}}) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 888.258988ms ago: executing program 0 (id=13262): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 810.673564ms ago: executing program 0 (id=13273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 747.914069ms ago: executing program 6 (id=13264): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004a010}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect_ath9k(0x3, 0xfeab, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) 604.432711ms ago: executing program 2 (id=13266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="9b44875f9fb70f086ecd22d16d2008f8c5cc82ca01c16315e070e3a8ed91aa1cd6274d9b440bf979f0264ed04834b309c377ade4afa74bee93ac62972fd8cb3215ab519fb1b846984b6bbd61360dd91245b42cc8ee9033c02833cc452807b5f7bf11450679b9cbcbef84c55313f49d93d92cbbe7af0237870ff77741c7e6aa"], 0x1c}}, 0x4000054) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x110, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x4044001}, 0x40004) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x114, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) fchmod(r2, 0x2) 552.154476ms ago: executing program 2 (id=13267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 525.914318ms ago: executing program 5 (id=13268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 509.055639ms ago: executing program 7 (id=13269): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="9b44875f9fb70f086ecd22d16d2008f8c5cc82ca01c16315e070e3a8ed91aa1cd6274d9b440bf979f0264ed04834b309c377ade4afa74bee93ac62972fd8cb3215ab519fb1b846984b6bbd61360dd91245b42cc8ee9033c02833cc452807b5f7bf11450679b9cbcbef84c55313f49d93d92cbbe7af0237870ff77741c7e6aa"], 0x1c}}, 0x4000054) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x110, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x4044001}, 0x40004) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x114, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) fchmod(r1, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 508.816289ms ago: executing program 0 (id=13279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265746170000000", @ANYRES32=r5], 0x54}}, 0x0) 416.902806ms ago: executing program 7 (id=13270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b8b28225cc772f", 0x7}], 0x1}, 0x44000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x8, {0x2f, 0x5, 0x10, 0x1c, 0x9, 0x1000, 0x4, 0x8a, 0xffffffffffffffff}}) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 364.321171ms ago: executing program 2 (id=13271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="9b44875f9fb70f086ecd22d16d2008f8c5cc82ca01c16315e070e3a8ed91aa1cd6274d9b440bf979f0264ed04834b309c377ade4afa74bee93ac62972fd8cb3215ab519fb1b846984b6bbd61360dd91245b42cc8ee9033c02833cc452807b5f7bf11450679b9cbcbef84c55313f49d93d92cbbe7af0237870ff77741c7e6aa"], 0x1c}}, 0x4000054) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x110, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x4044001}, 0x40004) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x114, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) fchmod(r2, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 353.584812ms ago: executing program 0 (id=13272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 264.162029ms ago: executing program 7 (id=13274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)={0x0, 0xd800, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18000040}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xfff1}, {0x1}}}, 0x24}}, 0x0) 263.315289ms ago: executing program 5 (id=13285): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x18) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x200000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x16, 0x0, &(0x7f0000000380)="259a53f271a76d3f94e49820a749728f08064d6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) ioctl$SG_IO(r9, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x5, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="958393c3ab", 0xfffffffffffffffd, 0x0, 0x10030, 0x3, 0x0}) fcntl$setlease(r0, 0x400, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 261.321489ms ago: executing program 2 (id=13286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 221.762442ms ago: executing program 5 (id=13275): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x4c28, &(0x7f0000000100)={0x0, 0x144f, 0x80, 0x0, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 221.037702ms ago: executing program 6 (id=13276): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x4c28, &(0x7f0000000100)={0x0, 0x144f, 0x80, 0x0, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 218.762012ms ago: executing program 5 (id=13277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="9b44875f9fb70f086ecd22d16d2008f8c5cc82ca01c16315e070e3a8ed91aa1cd6274d9b440bf979f0264ed04834b309c377ade4afa74bee93ac62972fd8cb3215ab519fb1b846984b6bbd61360dd91245b42cc8ee9033c02833cc452807b5f7bf11450679b9cbcbef84c55313f49d93d92cbbe7af0237870ff77741c7e6aa"], 0x1c}}, 0x4000054) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x110, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x4044001}, 0x40004) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x114, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) fchmod(r2, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x110) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 196.503534ms ago: executing program 6 (id=13278): eventfd2(0x8007, 0x801) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x6c, 0x7f, 0x7ffc0002}]}) getuid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000840), 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") fcntl$addseals(r7, 0x409, 0xb) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) 193.936484ms ago: executing program 7 (id=13280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 163.719127ms ago: executing program 0 (id=13281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 141.106069ms ago: executing program 5 (id=13282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b8b28225cc772f31e7e8c7c98100", 0xe}], 0x1}, 0x44000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20c00, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x8, {0x2f, 0x5, 0x10, 0x1c, 0x9, 0x1000, 0x4, 0x8a, 0xffffffffffffffff}}) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 97.160822ms ago: executing program 7 (id=13283): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000019c0)='./file0\x00', 0xb3) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000005c0)=""/3, &(0x7f0000000600)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) lsm_get_self_attr(0x66, &(0x7f00000007c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000001940), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100040, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x10, 0x3}, {0xe, 0x5}, {0x2, 0x1}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x4}]}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @const={0xb, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x5f, 0x1e]}}, 0x0, 0x84, 0x0, 0x0, 0xffff, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x134, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x108, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xb4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x0, 0x2, 0x1}]}}]}}]}, 0x134}}, 0x24040084) 43.726407ms ago: executing program 2 (id=13284): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e000100697036677265746170000000", @ANYRES32=r5], 0x54}}, 0x0) 34.713497ms ago: executing program 7 (id=13287): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=13288): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) kernel console output (not intermixed with test programs): 9): avc: denied { execmem } for pid=9857 comm="syz.2.11800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 390.286515][ T29] audit: type=1400 audit(1170.374:38850): avc: denied { prog_load } for pid=9857 comm="syz.2.11800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 390.305362][ T29] audit: type=1400 audit(1170.374:38851): avc: denied { write } for pid=9857 comm="syz.2.11800" name="tcp" dev="proc" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 390.336644][ T29] audit: type=1400 audit(1170.542:38852): avc: denied { open } for pid=9859 comm="syz.2.11801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 390.355587][ T29] audit: type=1400 audit(1170.542:38853): avc: denied { prog_load } for pid=9859 comm="syz.2.11801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 390.692671][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11804'. [ 390.935219][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11808'. [ 390.944326][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11808'. [ 390.953363][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11808'. [ 390.991524][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11808'. [ 391.000585][ T9886] netlink: 'syz.6.11808': attribute type 6 has an invalid length. [ 391.197675][ T9889] lo speed is unknown, defaulting to 1000 [ 391.291480][ T9889] lo speed is unknown, defaulting to 1000 [ 391.403151][ T9924] lo speed is unknown, defaulting to 1000 [ 391.434692][ T9933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9933 comm=syz.7.11817 [ 391.478691][ T9924] lo speed is unknown, defaulting to 1000 [ 391.527433][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11820'. [ 391.536551][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11820'. [ 391.545626][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11820'. [ 391.556061][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11820'. [ 391.565195][ T9943] netlink: 'syz.5.11820': attribute type 6 has an invalid length. [ 391.897609][ T9974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=886 sclass=netlink_route_socket pid=9974 comm=syz.5.11824 [ 392.388707][T10001] netlink: 'syz.5.11832': attribute type 6 has an invalid length. [ 392.579439][T10007] lo speed is unknown, defaulting to 1000 [ 392.608364][T10007] lo speed is unknown, defaulting to 1000 [ 392.982902][T10072] netlink: 'syz.0.11846': attribute type 6 has an invalid length. [ 393.481162][T10088] netlink: 'syz.2.11853': attribute type 13 has an invalid length. [ 393.623320][T10096] __nla_validate_parse: 10 callbacks suppressed [ 393.623377][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11856'. [ 393.662520][T10099] lo: left promiscuous mode [ 393.697697][T10099] tunl0: left promiscuous mode [ 393.703250][T10099] gre0: left promiscuous mode [ 393.735960][T10099] 1ªî{X¹¦: left promiscuous mode [ 393.736598][T10099] erspan0: left promiscuous mode [ 393.737179][T10099] ip_vti0: left promiscuous mode [ 393.737670][T10099] ip6_vti0: left promiscuous mode [ 393.738314][T10099] sit0: left promiscuous mode [ 393.739678][T10099] ip6tnl0: left promiscuous mode [ 393.740667][T10099] ip6gre0: left promiscuous mode [ 393.743354][T10099] bridge0: left promiscuous mode [ 393.743916][T10099] : left promiscuous mode [ 393.744219][T10099] 8021q: adding VLAN 0 to HW filter on device  [ 393.762817][T10099] team0: left promiscuous mode [ 393.763143][T10099] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.772295][T10099] nlmon0: left promiscuous mode [ 393.783847][T10099] caif0: left promiscuous mode [ 393.783862][T10099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.783899][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11857'. [ 393.783971][T10103] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11857'. [ 393.819779][T10114] netlink: 'syz.2.11861': attribute type 4 has an invalid length. [ 393.830869][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11857'. [ 393.890704][T10103] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11857'. [ 393.899851][T10103] netlink: 84 bytes leftover after parsing attributes in process `syz.6.11857'. [ 393.909314][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11858'. [ 393.918573][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11858'. [ 393.918591][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11858'. [ 393.918840][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11858'. [ 393.918935][T10102] netlink: 'syz.0.11858': attribute type 6 has an invalid length. [ 394.793662][T10159] netlink: 'syz.7.11878': attribute type 6 has an invalid length. [ 394.878581][ T29] kauditd_printk_skb: 1958 callbacks suppressed [ 394.878596][ T29] audit: type=1400 audit(1175.319:40812): avc: denied { execmem } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 394.905508][ T29] audit: type=1400 audit(1175.319:40813): avc: denied { create } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 394.925971][ T29] audit: type=1400 audit(1175.319:40814): avc: denied { map_create } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.945106][ T29] audit: type=1400 audit(1175.319:40815): avc: denied { prog_load } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.963929][ T29] audit: type=1400 audit(1175.319:40816): avc: denied { prog_load } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.982795][ T29] audit: type=1400 audit(1175.319:40817): avc: denied { create } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 395.002933][ T29] audit: type=1400 audit(1175.319:40818): avc: denied { prog_load } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 395.021694][ T29] audit: type=1400 audit(1175.319:40819): avc: denied { map_create } for pid=10163 comm="syz.7.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 395.040731][ T29] audit: type=1400 audit(1175.340:40820): avc: denied { allowed } for pid=10167 comm="syz.7.11882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 395.059797][ T29] audit: type=1400 audit(1175.340:40821): avc: denied { prog_load } for pid=10167 comm="syz.7.11882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.307415][T10215] lo speed is unknown, defaulting to 1000 [ 396.337871][T10215] lo speed is unknown, defaulting to 1000 [ 396.648207][T10242] vlan1: entered promiscuous mode [ 396.653356][T10242] hsr_slave_1: entered promiscuous mode [ 396.659264][T10242] vlan1: entered allmulticast mode [ 396.664456][T10242] hsr_slave_1: entered allmulticast mode [ 396.700520][T10242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10242 comm=syz.5.11899 [ 396.743863][T10257] wireguard0: entered promiscuous mode [ 396.749413][T10257] wireguard0: entered allmulticast mode [ 397.462588][T10284] lo speed is unknown, defaulting to 1000 [ 397.544225][T10284] lo speed is unknown, defaulting to 1000 [ 397.755047][T10321] netlink: 'syz.7.11911': attribute type 6 has an invalid length. [ 397.860034][T10325] lo speed is unknown, defaulting to 1000 [ 397.949703][T10325] lo speed is unknown, defaulting to 1000 [ 398.633403][T10408] __nla_validate_parse: 11 callbacks suppressed [ 398.633441][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11927'. [ 398.655326][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11927'. [ 398.938908][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11934'. [ 398.948073][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11934'. [ 398.957123][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11934'. [ 398.966202][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11934'. [ 398.975293][T10443] netlink: 'syz.2.11934': attribute type 6 has an invalid length. [ 399.547358][T10464] lo speed is unknown, defaulting to 1000 [ 399.580541][T10464] lo speed is unknown, defaulting to 1000 [ 399.658247][ T29] kauditd_printk_skb: 1760 callbacks suppressed [ 399.658261][ T29] audit: type=1326 audit(1180.327:42582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff31399ebe9 code=0x7ffc0000 [ 399.688418][ T29] audit: type=1326 audit(1180.327:42583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff31399ec23 code=0x7ffc0000 [ 399.711410][ T29] audit: type=1326 audit(1180.337:42584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff31399d69f code=0x7ffc0000 [ 399.734409][ T29] audit: type=1326 audit(1180.337:42585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff31399ec77 code=0x7ffc0000 [ 399.757604][ T29] audit: type=1400 audit(1180.369:42586): avc: denied { prog_load } for pid=10496 comm="syz.7.11946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.766473][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11946'. [ 399.783789][ T29] audit: type=1400 audit(1180.369:42587): avc: denied { prog_load } for pid=10496 comm="syz.7.11946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.785527][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11946'. [ 399.804269][ T29] audit: type=1326 audit(1180.411:42588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff31399d550 code=0x7ffc0000 [ 399.813357][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11946'. [ 399.836472][ T29] audit: type=1326 audit(1180.411:42589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff31399d84a code=0x7ffc0000 [ 399.846742][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11946'. [ 399.868405][ T29] audit: type=1326 audit(1180.411:42590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31399ebe9 code=0x7ffc0000 [ 399.868432][ T29] audit: type=1326 audit(1180.411:42591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.2.11942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31399ebe9 code=0x7ffc0000 [ 399.923881][T10497] netlink: 'syz.7.11946': attribute type 6 has an invalid length. [ 400.033149][T10501] syzkaller0: entered promiscuous mode [ 400.038645][T10501] syzkaller0: entered allmulticast mode [ 400.210475][T10525] lo speed is unknown, defaulting to 1000 [ 400.245463][T10525] lo speed is unknown, defaulting to 1000 [ 400.368343][T10555] netlink: 'syz.5.11958': attribute type 6 has an invalid length. [ 400.846345][T10565] netlink: 'syz.2.11971': attribute type 10 has an invalid length. [ 400.854363][T10565] dummy0: left promiscuous mode [ 400.860457][T10565] dummy0: entered promiscuous mode [ 400.865933][T10565] team0: Port device dummy0 added [ 400.872809][T10565] netlink: 'syz.2.11971': attribute type 10 has an invalid length. [ 400.881722][T10565] dummy0: left promiscuous mode [ 400.887115][T10565] team0: Port device dummy0 removed [ 400.893712][T10565] dummy0: entered promiscuous mode [ 400.899127][T10565] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 401.794899][T10592] vlan0: entered promiscuous mode [ 401.799960][T10592] bridge_slave_0: entered promiscuous mode [ 401.813235][T10595] team0: Cannot enslave team device to itself [ 401.819359][T10595] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 401.957085][T10608] lo speed is unknown, defaulting to 1000 [ 401.990865][T10608] lo speed is unknown, defaulting to 1000 [ 402.079959][T10637] lo speed is unknown, defaulting to 1000 [ 402.114857][T10637] lo speed is unknown, defaulting to 1000 [ 402.758719][T10693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.957631][T10707] netlink: 'syz.6.11991': attribute type 4 has an invalid length. [ 403.011503][T10709] kernel profiling enabled (shift: 17) [ 403.041112][T19099] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 403.049282][T10711] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 403.058132][T10711] netlink: 'syz.0.11993': attribute type 10 has an invalid length. [ 403.066270][T10711] netlink: 'syz.0.11993': attribute type 10 has an invalid length. [ 403.076798][T10711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 403.134447][T10719] netlink: 'syz.0.11996': attribute type 1 has an invalid length. [ 403.867244][T10750] netlink: 'syz.6.12004': attribute type 7 has an invalid length. [ 403.875145][T10750] __nla_validate_parse: 10 callbacks suppressed [ 403.875155][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12004'. [ 404.305282][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12008'. [ 404.370446][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12010'. [ 404.406772][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12013'. [ 404.450796][ T29] kauditd_printk_skb: 2244 callbacks suppressed [ 404.450810][ T29] audit: type=1400 audit(1185.355:44824): avc: denied { prog_load } for pid=10776 comm="syz.5.12012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.477484][ T29] audit: type=1400 audit(1185.387:44825): avc: denied { prog_load } for pid=10776 comm="syz.5.12012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.496346][ T29] audit: type=1400 audit(1185.387:44826): avc: denied { prog_load } for pid=10776 comm="syz.5.12012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.516303][ T29] audit: type=1400 audit(1185.408:44827): avc: denied { create } for pid=10774 comm="syz.7.12011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 404.535706][ T29] audit: type=1400 audit(1185.408:44828): avc: denied { watch watch_reads } for pid=10774 comm="syz.7.12011" path="/1322" dev="tmpfs" ino=6903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 404.558545][ T29] audit: type=1400 audit(1185.429:44829): avc: denied { create } for pid=10778 comm="syz.6.12013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 404.578926][ T29] audit: type=1400 audit(1185.429:44830): avc: denied { create } for pid=10778 comm="syz.6.12013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 404.599463][ T29] audit: type=1400 audit(1185.429:44831): avc: denied { create } for pid=10778 comm="syz.6.12013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 404.619850][ T29] audit: type=1400 audit(1185.450:44832): avc: denied { map_create } for pid=10778 comm="syz.6.12013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.638800][ T29] audit: type=1400 audit(1185.450:44833): avc: denied { prog_load } for pid=10778 comm="syz.6.12013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 405.204306][T10815] lo speed is unknown, defaulting to 1000 [ 405.249508][T10815] lo speed is unknown, defaulting to 1000 [ 405.358230][T10850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12027'. [ 405.766682][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12035'. [ 405.812278][T10884] $Hÿ: (slave dummy0): Releasing backup interface [ 405.820645][T10884] dummy0: left promiscuous mode [ 405.847540][T10884] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 405.861475][T10886] netlink: 'syz.5.12036': attribute type 10 has an invalid length. [ 405.869457][T10886] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12036'. [ 405.970777][T10888] wireguard0: entered promiscuous mode [ 405.976351][T10888] wireguard0: entered allmulticast mode [ 406.559702][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12047'. [ 406.568831][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12047'. [ 406.577891][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12047'. [ 406.608038][T10927] netlink: 'syz.0.12047': attribute type 6 has an invalid length. [ 406.909194][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 406.961549][T10964] lo speed is unknown, defaulting to 1000 [ 406.998187][T10964] lo speed is unknown, defaulting to 1000 [ 407.271818][T10991] macsec0: entered promiscuous mode [ 407.336876][T10997] lo speed is unknown, defaulting to 1000 [ 407.374905][T10997] lo speed is unknown, defaulting to 1000 [ 407.535445][T11043] lo speed is unknown, defaulting to 1000 [ 407.599728][T11043] lo speed is unknown, defaulting to 1000 [ 407.614018][T11066] netlink: 'syz.5.12076': attribute type 6 has an invalid length. [ 407.667272][T11065] lo speed is unknown, defaulting to 1000 [ 407.738353][T11065] lo speed is unknown, defaulting to 1000 [ 407.896179][T11137] lo speed is unknown, defaulting to 1000 [ 407.963570][T11137] lo speed is unknown, defaulting to 1000 [ 408.084000][T11169] lo speed is unknown, defaulting to 1000 [ 408.143247][T11169] lo speed is unknown, defaulting to 1000 [ 408.173186][T11180] netlink: 'syz.0.12093': attribute type 6 has an invalid length. [ 408.458002][T11204] lo speed is unknown, defaulting to 1000 [ 408.555040][T11204] lo speed is unknown, defaulting to 1000 [ 408.732931][T11219] lo speed is unknown, defaulting to 1000 [ 408.759810][T11237] lo speed is unknown, defaulting to 1000 [ 408.937977][T11219] lo speed is unknown, defaulting to 1000 [ 408.990598][T11237] lo speed is unknown, defaulting to 1000 [ 409.035028][T11269] __nla_validate_parse: 17 callbacks suppressed [ 409.035044][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12104'. [ 409.077602][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12105'. [ 409.086930][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12105'. [ 409.096001][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12105'. [ 409.105595][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12105'. [ 409.114729][T11280] netlink: 'syz.0.12105': attribute type 6 has an invalid length. [ 409.192430][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12108'. [ 409.246406][ T29] kauditd_printk_skb: 1850 callbacks suppressed [ 409.246421][ T29] audit: type=1400 audit(1190.394:46684): avc: denied { map_create } for pid=11305 comm="syz.7.12109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.317601][T11306] lo speed is unknown, defaulting to 1000 [ 409.323441][ T29] audit: type=1400 audit(1190.426:46685): avc: denied { prog_load } for pid=11305 comm="syz.7.12109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.342346][ T29] audit: type=1400 audit(1190.426:46686): avc: denied { prog_load } for pid=11305 comm="syz.7.12109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.361153][ T29] audit: type=1400 audit(1190.426:46687): avc: denied { create } for pid=11305 comm="syz.7.12109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 409.380608][ T29] audit: type=1400 audit(1190.457:46688): avc: denied { map_create } for pid=11310 comm="syz.2.12111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.399494][ T29] audit: type=1400 audit(1190.457:46689): avc: denied { prog_load } for pid=11310 comm="syz.2.12111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.418312][ T29] audit: type=1400 audit(1190.457:46690): avc: denied { prog_load } for pid=11310 comm="syz.2.12111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.437270][ T29] audit: type=1400 audit(1190.457:46691): avc: denied { create } for pid=11310 comm="syz.2.12111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 409.456905][ T29] audit: type=1400 audit(1190.457:46692): avc: denied { read append } for pid=11310 comm="syz.2.12111" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 409.480245][ T29] audit: type=1400 audit(1190.457:46693): avc: denied { prog_load } for pid=11310 comm="syz.2.12111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.506558][T11306] lo speed is unknown, defaulting to 1000 [ 409.642133][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12117'. [ 409.651648][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12117'. [ 409.660726][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12117'. [ 409.683122][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12117'. [ 409.692218][T11349] netlink: 'syz.2.12117': attribute type 6 has an invalid length. [ 409.818546][T11365] lo speed is unknown, defaulting to 1000 [ 409.851916][T11369] lo speed is unknown, defaulting to 1000 [ 409.959767][T11369] lo speed is unknown, defaulting to 1000 [ 409.983661][T11365] lo speed is unknown, defaulting to 1000 [ 409.984251][T11386] lo speed is unknown, defaulting to 1000 [ 410.131052][T11386] lo speed is unknown, defaulting to 1000 [ 410.152105][T11438] lo speed is unknown, defaulting to 1000 [ 410.165860][T11439] lo speed is unknown, defaulting to 1000 [ 410.238965][T11438] lo speed is unknown, defaulting to 1000 [ 410.270498][T11439] lo speed is unknown, defaulting to 1000 [ 410.551526][T11522] lo speed is unknown, defaulting to 1000 [ 410.604592][T11537] netlink: 'syz.0.12145': attribute type 6 has an invalid length. [ 410.632623][T11522] lo speed is unknown, defaulting to 1000 [ 410.685430][T11549] lo speed is unknown, defaulting to 1000 [ 410.765236][T11549] lo speed is unknown, defaulting to 1000 [ 410.953654][T11600] lo speed is unknown, defaulting to 1000 [ 410.986471][T11606] lo speed is unknown, defaulting to 1000 [ 411.044663][T11606] lo speed is unknown, defaulting to 1000 [ 411.072769][T11600] lo speed is unknown, defaulting to 1000 [ 411.078580][T11615] lo speed is unknown, defaulting to 1000 [ 411.078664][T11632] netlink: 'syz.0.12159': attribute type 6 has an invalid length. [ 411.176690][T11663] lo speed is unknown, defaulting to 1000 [ 411.185248][T11615] lo speed is unknown, defaulting to 1000 [ 411.223637][T11663] lo speed is unknown, defaulting to 1000 [ 411.372386][T11722] lo speed is unknown, defaulting to 1000 [ 411.452334][T11741] netlink: 'syz.2.12171': attribute type 6 has an invalid length. [ 411.463626][T11722] lo speed is unknown, defaulting to 1000 [ 411.544699][T11749] lo speed is unknown, defaulting to 1000 [ 411.574462][T11766] lo speed is unknown, defaulting to 1000 [ 411.617915][T11749] lo speed is unknown, defaulting to 1000 [ 411.650400][T11766] lo speed is unknown, defaulting to 1000 [ 411.658974][T11782] lo speed is unknown, defaulting to 1000 [ 411.752147][T11782] lo speed is unknown, defaulting to 1000 [ 411.798606][T11837] lo speed is unknown, defaulting to 1000 [ 411.861824][T11837] lo speed is unknown, defaulting to 1000 [ 411.921150][T11868] netlink: 'syz.5.12184': attribute type 6 has an invalid length. [ 412.295247][T11930] netlink: 'syz.2.12197': attribute type 6 has an invalid length. [ 412.347672][T11932] lo speed is unknown, defaulting to 1000 [ 412.391066][T11932] lo speed is unknown, defaulting to 1000 [ 412.576408][T11962] lo speed is unknown, defaulting to 1000 [ 412.615431][T11962] lo speed is unknown, defaulting to 1000 [ 412.779917][T11990] lo speed is unknown, defaulting to 1000 [ 412.892329][T11990] lo speed is unknown, defaulting to 1000 [ 412.971223][T12021] lo speed is unknown, defaulting to 1000 [ 413.014882][T12021] lo speed is unknown, defaulting to 1000 [ 413.113806][T12048] lo speed is unknown, defaulting to 1000 [ 413.200080][T12048] lo speed is unknown, defaulting to 1000 [ 413.296904][T12083] netlink: 'syz.6.12211': attribute type 6 has an invalid length. [ 413.307628][T12077] lo speed is unknown, defaulting to 1000 [ 413.419090][T12077] lo speed is unknown, defaulting to 1000 [ 413.534574][T12127] lo speed is unknown, defaulting to 1000 [ 413.638016][T12139] lo speed is unknown, defaulting to 1000 [ 413.647227][T12127] lo speed is unknown, defaulting to 1000 [ 413.689409][T12139] lo speed is unknown, defaulting to 1000 [ 413.720428][T12157] netlink: 'syz.7.12228': attribute type 6 has an invalid length. [ 414.004251][T12199] lo speed is unknown, defaulting to 1000 [ 414.019170][ T29] kauditd_printk_skb: 1150 callbacks suppressed [ 414.019185][ T29] audit: type=1400 audit(1195.402:47844): avc: denied { map_create } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.032522][T12203] lo speed is unknown, defaulting to 1000 [ 414.060427][ T29] audit: type=1400 audit(1195.444:47845): avc: denied { prog_load } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.089331][T12209] lo speed is unknown, defaulting to 1000 [ 414.089981][ T29] audit: type=1400 audit(1195.444:47846): avc: denied { create } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 414.100806][T12199] lo speed is unknown, defaulting to 1000 [ 414.114936][ T29] audit: type=1400 audit(1195.444:47847): avc: denied { read append } for pid=12208 comm="syz.5.12237" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 414.175102][T12203] lo speed is unknown, defaulting to 1000 [ 414.181486][ T29] audit: type=1400 audit(1195.517:47848): avc: denied { prog_load } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.200351][ T29] audit: type=1400 audit(1195.517:47849): avc: denied { prog_load } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.219235][ T29] audit: type=1400 audit(1195.517:47850): avc: denied { prog_load } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.238082][ T29] audit: type=1400 audit(1195.517:47851): avc: denied { map_create } for pid=12208 comm="syz.5.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.295726][T12209] lo speed is unknown, defaulting to 1000 [ 414.385140][ T29] audit: type=1400 audit(1195.780:47852): avc: denied { prog_load } for pid=12256 comm="syz.2.12239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.419971][T12258] lo speed is unknown, defaulting to 1000 [ 414.429026][ T29] audit: type=1400 audit(1195.832:47853): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 414.467270][T12284] __nla_validate_parse: 32 callbacks suppressed [ 414.467286][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12241'. [ 414.482723][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12241'. [ 414.491783][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12241'. [ 414.501577][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12241'. [ 414.510648][T12284] netlink: 'syz.0.12241': attribute type 6 has an invalid length. [ 414.519943][T12258] lo speed is unknown, defaulting to 1000 [ 414.529648][T12286] lo speed is unknown, defaulting to 1000 [ 414.576308][T12286] lo speed is unknown, defaulting to 1000 [ 414.585333][T12288] lo speed is unknown, defaulting to 1000 [ 414.690939][T12288] lo speed is unknown, defaulting to 1000 [ 414.711295][T12343] lo speed is unknown, defaulting to 1000 [ 414.722783][T12340] lo speed is unknown, defaulting to 1000 [ 414.789716][T12340] lo speed is unknown, defaulting to 1000 [ 414.801768][T12343] lo speed is unknown, defaulting to 1000 [ 414.986463][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 414.990686][T12419] lo speed is unknown, defaulting to 1000 [ 415.036197][T12425] lo speed is unknown, defaulting to 1000 [ 415.090066][T12419] lo speed is unknown, defaulting to 1000 [ 415.124272][T12425] lo speed is unknown, defaulting to 1000 [ 415.203043][T12472] lo speed is unknown, defaulting to 1000 [ 415.305462][T12472] lo speed is unknown, defaulting to 1000 [ 415.474597][T12501] lo speed is unknown, defaulting to 1000 [ 415.531775][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12255'. [ 415.540999][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12255'. [ 415.550173][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12255'. [ 415.566640][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12255'. [ 415.575745][T12509] netlink: 'syz.2.12255': attribute type 6 has an invalid length. [ 415.638900][T12501] lo speed is unknown, defaulting to 1000 [ 415.761867][T12507] lo speed is unknown, defaulting to 1000 [ 415.833505][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12268'. [ 415.842647][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12268'. [ 415.901054][T12541] netlink: 'syz.2.12268': attribute type 6 has an invalid length. [ 415.929868][T12543] lo speed is unknown, defaulting to 1000 [ 415.951131][T12550] netlink: 'syz.2.12260': attribute type 1 has an invalid length. [ 415.964734][T12543] lo speed is unknown, defaulting to 1000 [ 415.986919][T12507] lo speed is unknown, defaulting to 1000 [ 416.087120][T12550] bond0: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 416.163775][T12636] lo speed is unknown, defaulting to 1000 [ 416.287168][T12636] lo speed is unknown, defaulting to 1000 [ 416.330673][T12639] lo speed is unknown, defaulting to 1000 [ 416.389276][T12639] lo speed is unknown, defaulting to 1000 [ 416.481751][T12670] veth3: entered promiscuous mode [ 416.546769][T12703] lo speed is unknown, defaulting to 1000 [ 416.580064][T12716] netlink: 'syz.5.12271': attribute type 6 has an invalid length. [ 416.600011][T12703] lo speed is unknown, defaulting to 1000 [ 416.645128][T12705] lo speed is unknown, defaulting to 1000 [ 416.687103][T12738] netlink: 'syz.5.12272': attribute type 1 has an invalid length. [ 416.730618][T12705] lo speed is unknown, defaulting to 1000 [ 416.749829][T12738] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 416.842123][T12808] netlink: 'syz.2.12275': attribute type 1 has an invalid length. [ 416.856982][T12801] veth7: entered promiscuous mode [ 416.934378][T12808] veth5: entered promiscuous mode [ 417.232828][T12889] lo speed is unknown, defaulting to 1000 [ 417.253057][T12896] netlink: 'syz.2.12283': attribute type 6 has an invalid length. [ 417.331086][T12889] lo speed is unknown, defaulting to 1000 [ 417.348258][T12898] veth7: entered promiscuous mode [ 417.434959][T12955] lo speed is unknown, defaulting to 1000 [ 417.566169][T12955] lo speed is unknown, defaulting to 1000 [ 417.908851][T13008] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 417.917784][T13007] lo speed is unknown, defaulting to 1000 [ 417.925520][T13010] lo speed is unknown, defaulting to 1000 [ 417.962891][T13007] lo speed is unknown, defaulting to 1000 [ 417.993763][T13010] lo speed is unknown, defaulting to 1000 [ 418.098857][T13102] lo speed is unknown, defaulting to 1000 [ 418.179922][T13108] lo speed is unknown, defaulting to 1000 [ 418.224360][T13108] lo speed is unknown, defaulting to 1000 [ 418.246373][T13102] lo speed is unknown, defaulting to 1000 [ 418.257116][T13113] lo speed is unknown, defaulting to 1000 [ 418.337569][T13113] lo speed is unknown, defaulting to 1000 [ 418.363809][T13142] lo speed is unknown, defaulting to 1000 [ 418.426686][T13142] lo speed is unknown, defaulting to 1000 [ 418.571504][T13210] lo speed is unknown, defaulting to 1000 [ 418.633490][T13210] lo speed is unknown, defaulting to 1000 [ 418.641124][T13222] validate_nla: 3 callbacks suppressed [ 418.641136][T13222] netlink: 'syz.0.12307': attribute type 6 has an invalid length. [ 418.662926][T13220] lo speed is unknown, defaulting to 1000 [ 418.715243][T13240] lo speed is unknown, defaulting to 1000 [ 418.743754][T13220] lo speed is unknown, defaulting to 1000 [ 418.843305][T13240] lo speed is unknown, defaulting to 1000 [ 418.918899][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 418.918912][ T29] audit: type=1400 audit(1200.546:48329): avc: denied { map_create } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 418.969608][ T29] audit: type=1400 audit(1200.588:48330): avc: denied { prog_load } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 418.988465][ T29] audit: type=1400 audit(1200.588:48331): avc: denied { prog_load } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 418.988486][ T29] audit: type=1400 audit(1200.588:48332): avc: denied { create } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 418.999529][T13277] lo speed is unknown, defaulting to 1000 [ 419.045503][ T29] audit: type=1400 audit(1200.682:48333): avc: denied { prog_load } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.112250][T13277] lo speed is unknown, defaulting to 1000 [ 419.119252][T13300] netlink: 'syz.2.12311': attribute type 1 has an invalid length. [ 419.178185][ T29] audit: type=1400 audit(1200.703:48334): avc: denied { prog_load } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.178241][ T29] audit: type=1400 audit(1200.703:48335): avc: denied { prog_load } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.178258][ T29] audit: type=1400 audit(1200.703:48336): avc: denied { map_create } for pid=13276 comm="syz.7.12309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.178279][ T29] audit: type=1400 audit(1200.724:48337): avc: denied { prog_load } for pid=13288 comm="syz.5.12310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.178376][ T29] audit: type=1400 audit(1200.724:48338): avc: denied { prog_load } for pid=13288 comm="syz.5.12310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.410067][T13362] netlink: 'syz.6.12315': attribute type 1 has an invalid length. [ 419.753420][T13362] bond0: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 419.828885][T13402] veth3: entered promiscuous mode [ 419.849759][T13422] __nla_validate_parse: 18 callbacks suppressed [ 419.849784][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12319'. [ 419.865265][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12319'. [ 419.874356][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12319'. [ 419.934989][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12319'. [ 419.944230][T13422] netlink: 'syz.5.12319': attribute type 6 has an invalid length. [ 420.057909][T13414] lo speed is unknown, defaulting to 1000 [ 420.062572][T13430] netlink: 'syz.2.12322': attribute type 1 has an invalid length. [ 420.089097][T13415] lo speed is unknown, defaulting to 1000 [ 420.146189][T13414] lo speed is unknown, defaulting to 1000 [ 420.189895][T13415] lo speed is unknown, defaulting to 1000 [ 420.211296][T13435] lo speed is unknown, defaulting to 1000 [ 420.240347][T13430] veth9: entered promiscuous mode [ 420.253040][T13430] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 420.330990][T13435] lo speed is unknown, defaulting to 1000 [ 420.386840][T13526] lo speed is unknown, defaulting to 1000 [ 420.433197][T13547] lo speed is unknown, defaulting to 1000 [ 420.451618][T13567] lo speed is unknown, defaulting to 1000 [ 420.497833][T13526] lo speed is unknown, defaulting to 1000 [ 420.557877][T13567] lo speed is unknown, defaulting to 1000 [ 420.607441][T13547] lo speed is unknown, defaulting to 1000 [ 420.722974][T13638] netlink: 'syz.0.12332': attribute type 1 has an invalid length. [ 420.736165][T13638] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 420.749759][T13638] veth1: entered promiscuous mode [ 420.784913][T13692] netlink: 'syz.0.12334': attribute type 1 has an invalid length. [ 421.034838][T13730] lo speed is unknown, defaulting to 1000 [ 421.125443][T13730] lo speed is unknown, defaulting to 1000 [ 421.137327][T13744] lo speed is unknown, defaulting to 1000 [ 421.216812][T13744] lo speed is unknown, defaulting to 1000 [ 421.380329][T13799] netlink: 'syz.6.12342': attribute type 1 has an invalid length. [ 421.390658][T13801] netlink: 'syz.0.12343': attribute type 1 has an invalid length. [ 421.407573][T13799] veth5: entered promiscuous mode [ 421.414043][T13799] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 421.468549][T13886] lo speed is unknown, defaulting to 1000 [ 421.493293][T13889] lo speed is unknown, defaulting to 1000 [ 421.533274][T13886] lo speed is unknown, defaulting to 1000 [ 421.595912][T13889] lo speed is unknown, defaulting to 1000 [ 421.603107][T13920] netlink: 'syz.6.12349': attribute type 1 has an invalid length. [ 421.630620][T13920] veth7: entered promiscuous mode [ 421.681940][T13959] lo speed is unknown, defaulting to 1000 [ 421.697341][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12350'. [ 421.706561][T13985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12350'. [ 421.715631][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12350'. [ 421.742940][T13985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12350'. [ 421.752939][T13959] lo speed is unknown, defaulting to 1000 [ 421.830256][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12354'. [ 421.851121][T14021] lo speed is unknown, defaulting to 1000 [ 421.862130][T14023] lo speed is unknown, defaulting to 1000 [ 421.903593][T14035] veth9: entered promiscuous mode [ 421.909904][T14035] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 421.918465][T14021] lo speed is unknown, defaulting to 1000 [ 422.005308][T14023] lo speed is unknown, defaulting to 1000 [ 422.061747][T14103] lo speed is unknown, defaulting to 1000 [ 422.157422][T14103] lo speed is unknown, defaulting to 1000 [ 422.234833][T14158] lo speed is unknown, defaulting to 1000 [ 422.256952][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12363'. [ 422.269856][T14158] lo speed is unknown, defaulting to 1000 [ 422.380932][T14191] lo speed is unknown, defaulting to 1000 [ 422.400431][T14196] veth5: entered promiscuous mode [ 422.429666][T14191] lo speed is unknown, defaulting to 1000 [ 422.513901][T14268] lo speed is unknown, defaulting to 1000 [ 422.546815][T14268] lo speed is unknown, defaulting to 1000 [ 422.672132][T14301] lo speed is unknown, defaulting to 1000 [ 422.699478][T14301] lo speed is unknown, defaulting to 1000 [ 422.733552][T14321] lo speed is unknown, defaulting to 1000 [ 422.786309][T14321] lo speed is unknown, defaulting to 1000 [ 422.811324][T14334] veth7: entered promiscuous mode [ 422.818006][T14334] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 422.883769][T14386] lo speed is unknown, defaulting to 1000 [ 422.918677][T14386] lo speed is unknown, defaulting to 1000 [ 422.969477][T14409] lo speed is unknown, defaulting to 1000 [ 422.999754][T14413] veth11: entered promiscuous mode [ 423.012034][T14413] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 423.021597][T14409] lo speed is unknown, defaulting to 1000 [ 423.056602][T14463] lo speed is unknown, defaulting to 1000 [ 423.109520][T14463] lo speed is unknown, defaulting to 1000 [ 423.307667][T14572] veth9: entered promiscuous mode [ 423.316739][T14572] bond2: (slave veth9): Enslaving as a backup interface with a down link [ 423.330218][T14570] lo speed is unknown, defaulting to 1000 [ 423.390658][T14570] lo speed is unknown, defaulting to 1000 [ 423.457487][T14694] lo speed is unknown, defaulting to 1000 [ 423.514426][T14645] veth13: entered promiscuous mode [ 423.523006][T14645] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 423.542532][T14694] lo speed is unknown, defaulting to 1000 [ 423.563315][T14730] validate_nla: 11 callbacks suppressed [ 423.563328][T14730] netlink: 'syz.5.12403': attribute type 1 has an invalid length. [ 423.572654][T14734] netlink: 'syz.2.12405': attribute type 6 has an invalid length. [ 423.609010][T14744] netlink: 'syz.7.12407': attribute type 1 has an invalid length. [ 423.681775][T14797] netlink: 'syz.5.12410': attribute type 1 has an invalid length. [ 423.725366][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 423.725380][ T29] audit: type=1400 audit(1205.595:48942): avc: denied { read write } for pid=14794 comm="syz.0.12409" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 423.755687][T14797] veth11: entered promiscuous mode [ 423.762227][T14797] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 423.769566][ T29] audit: type=1400 audit(1205.606:48943): avc: denied { create } for pid=14753 comm="syz.2.12408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 423.791001][ T29] audit: type=1400 audit(1205.606:48944): avc: denied { create } for pid=14753 comm="syz.2.12408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 423.811208][ T29] audit: type=1400 audit(1205.606:48945): avc: denied { create } for pid=14868 comm="syz.6.12411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 423.831520][ T29] audit: type=1400 audit(1205.606:48946): avc: denied { map_create } for pid=14868 comm="syz.6.12411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 423.850531][ T29] audit: type=1400 audit(1205.606:48947): avc: denied { prog_load } for pid=14868 comm="syz.6.12411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 423.869417][ T29] audit: type=1400 audit(1205.606:48948): avc: denied { allowed } for pid=14868 comm="syz.6.12411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 423.888579][ T29] audit: type=1400 audit(1205.606:48949): avc: denied { create } for pid=14743 comm="syz.7.12407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 423.908181][ T29] audit: type=1400 audit(1205.669:48950): avc: denied { open } for pid=14794 comm="syz.0.12409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 423.927321][ T29] audit: type=1400 audit(1205.669:48951): avc: denied { name_bind } for pid=14794 comm="syz.0.12409" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 423.957016][T14799] veth7: entered promiscuous mode [ 423.963511][T14799] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 423.973878][T14895] netlink: 'syz.5.12417': attribute type 6 has an invalid length. [ 423.991844][T14890] lo speed is unknown, defaulting to 1000 [ 424.010696][T14893] lo speed is unknown, defaulting to 1000 [ 424.024853][T14915] lo speed is unknown, defaulting to 1000 [ 424.049498][T14926] netlink: 'syz.5.12420': attribute type 1 has an invalid length. [ 424.077481][T14926] veth13: entered promiscuous mode [ 424.084672][T14926] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 424.093517][T14890] lo speed is unknown, defaulting to 1000 [ 424.184380][T15002] ALSA: seq fatal error: cannot create timer (-19) [ 424.212961][T14972] lo speed is unknown, defaulting to 1000 [ 424.216901][T14915] lo speed is unknown, defaulting to 1000 [ 424.227683][T15004] lo speed is unknown, defaulting to 1000 [ 424.258161][T14893] lo speed is unknown, defaulting to 1000 [ 424.353646][T15004] lo speed is unknown, defaulting to 1000 [ 424.364801][T14972] lo speed is unknown, defaulting to 1000 [ 424.364803][T15026] lo speed is unknown, defaulting to 1000 [ 424.429695][T15071] netlink: 'syz.2.12428': attribute type 1 has an invalid length. [ 424.452649][T15026] lo speed is unknown, defaulting to 1000 [ 424.495933][T15132] netlink: 'syz.6.12429': attribute type 1 has an invalid length. [ 424.513002][T15071] veth15: entered promiscuous mode [ 424.522515][T15071] bond8: (slave veth15): Enslaving as a backup interface with a down link [ 424.581644][T15155] netlink: 'syz.7.12431': attribute type 6 has an invalid length. [ 424.603501][T15193] lo speed is unknown, defaulting to 1000 [ 424.618013][T15132] veth11: entered promiscuous mode [ 424.624815][T15132] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 424.673555][T15193] lo speed is unknown, defaulting to 1000 [ 424.702447][T15219] netlink: 'syz.5.12443': attribute type 1 has an invalid length. [ 424.802574][T15242] lo speed is unknown, defaulting to 1000 [ 424.836848][T15219] veth15: entered promiscuous mode [ 424.843521][T15219] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 424.852138][T15242] lo speed is unknown, defaulting to 1000 [ 424.975269][T15316] lo speed is unknown, defaulting to 1000 [ 424.983740][T15324] lo speed is unknown, defaulting to 1000 [ 424.991655][T15320] lo speed is unknown, defaulting to 1000 [ 425.013340][T15316] lo speed is unknown, defaulting to 1000 [ 425.078161][T15320] lo speed is unknown, defaulting to 1000 [ 425.094832][T15349] lo speed is unknown, defaulting to 1000 [ 425.100621][T15324] lo speed is unknown, defaulting to 1000 [ 425.189805][T15349] lo speed is unknown, defaulting to 1000 [ 425.229173][T15391] veth17: entered promiscuous mode [ 425.239753][T15391] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 425.342496][T15463] veth13: entered promiscuous mode [ 425.350977][T15463] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 425.362306][T15496] lo speed is unknown, defaulting to 1000 [ 425.376228][T15524] __nla_validate_parse: 25 callbacks suppressed [ 425.376243][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12446'. [ 425.391623][T15524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12446'. [ 425.400667][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12446'. [ 425.418323][T15524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12446'. [ 425.427953][T15496] lo speed is unknown, defaulting to 1000 [ 425.499682][T15512] veth17: entered promiscuous mode [ 425.520501][T15584] ALSA: seq fatal error: cannot create timer (-19) [ 425.630498][T15613] veth9: entered promiscuous mode [ 425.679313][T15615] lo speed is unknown, defaulting to 1000 [ 425.686989][T15611] veth19: entered promiscuous mode [ 425.704388][T15611] bond8: (slave veth19): Enslaving as a backup interface with a down link [ 425.717170][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12461'. [ 425.726332][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12461'. [ 425.735559][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12461'. [ 425.747316][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12461'. [ 425.756739][T15615] lo speed is unknown, defaulting to 1000 [ 425.820848][T15722] ALSA: seq fatal error: cannot create timer (-19) [ 425.868091][T15725] veth9: entered promiscuous mode [ 425.922955][T15747] lo speed is unknown, defaulting to 1000 [ 425.937636][T15736] lo speed is unknown, defaulting to 1000 [ 425.946082][T15748] lo speed is unknown, defaulting to 1000 [ 425.952828][T15751] lo speed is unknown, defaulting to 1000 [ 425.968147][T15747] lo speed is unknown, defaulting to 1000 [ 426.014908][T15751] lo speed is unknown, defaulting to 1000 [ 426.076900][T15736] lo speed is unknown, defaulting to 1000 [ 426.135549][T15748] lo speed is unknown, defaulting to 1000 [ 426.214375][T15829] veth11: entered promiscuous mode [ 426.221688][T15829] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 426.265210][T15885] lo speed is unknown, defaulting to 1000 [ 426.282318][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12474'. [ 426.291475][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12474'. [ 426.334841][T15885] lo speed is unknown, defaulting to 1000 [ 426.373039][T15912] veth13: entered promiscuous mode [ 426.458435][T15943] lo speed is unknown, defaulting to 1000 [ 426.495809][T15943] lo speed is unknown, defaulting to 1000 [ 426.649895][T15978] veth9: entered promiscuous mode [ 426.772637][T15996] lo speed is unknown, defaulting to 1000 [ 426.799448][T15996] lo speed is unknown, defaulting to 1000 [ 426.949286][T16031] lo speed is unknown, defaulting to 1000 [ 426.991972][T16031] lo speed is unknown, defaulting to 1000 [ 427.057558][T16058] lo speed is unknown, defaulting to 1000 [ 427.093518][T16058] lo speed is unknown, defaulting to 1000 [ 427.125732][T16066] veth9: entered promiscuous mode [ 427.257024][T16119] veth15: entered promiscuous mode [ 427.298489][T16139] veth15: entered promiscuous mode [ 427.361487][T16156] lo speed is unknown, defaulting to 1000 [ 427.399180][T16161] lo speed is unknown, defaulting to 1000 [ 427.409482][T16156] lo speed is unknown, defaulting to 1000 [ 427.447562][T16173] lo speed is unknown, defaulting to 1000 [ 427.460712][T16161] lo speed is unknown, defaulting to 1000 [ 427.529228][T16173] lo speed is unknown, defaulting to 1000 [ 427.624645][T16240] ALSA: seq fatal error: cannot create timer (-19) [ 427.647795][T16244] ALSA: seq fatal error: cannot create timer (-19) [ 427.678756][T16243] lo speed is unknown, defaulting to 1000 [ 427.691940][T16247] lo speed is unknown, defaulting to 1000 [ 427.721388][T16243] lo speed is unknown, defaulting to 1000 [ 427.752380][T16247] lo speed is unknown, defaulting to 1000 [ 427.845495][T16301] lo speed is unknown, defaulting to 1000 [ 427.890660][T16309] lo speed is unknown, defaulting to 1000 [ 427.903567][T16318] ALSA: seq fatal error: cannot create timer (-19) [ 427.920244][T16301] lo speed is unknown, defaulting to 1000 [ 427.955968][T16309] lo speed is unknown, defaulting to 1000 [ 428.029728][T16343] lo speed is unknown, defaulting to 1000 [ 428.097685][T16343] lo speed is unknown, defaulting to 1000 [ 428.137818][T16374] veth17: entered promiscuous mode [ 428.145310][T16369] lo speed is unknown, defaulting to 1000 [ 428.188683][T16369] lo speed is unknown, defaulting to 1000 [ 428.249594][T16416] lo speed is unknown, defaulting to 1000 [ 428.339860][T16416] lo speed is unknown, defaulting to 1000 [ 428.339926][T16447] validate_nla: 17 callbacks suppressed [ 428.339975][T16447] netlink: 'syz.2.12534': attribute type 6 has an invalid length. [ 428.391188][T16449] lo speed is unknown, defaulting to 1000 [ 428.414076][T16464] veth17: entered promiscuous mode [ 428.468999][T16449] lo speed is unknown, defaulting to 1000 [ 428.493957][T16491] lo speed is unknown, defaulting to 1000 [ 428.538443][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 428.538473][ T29] audit: type=1400 audit(1210.645:49599): avc: denied { prog_load } for pid=16492 comm="syz.2.12538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 428.538730][T16493] lo speed is unknown, defaulting to 1000 [ 428.569589][T16491] lo speed is unknown, defaulting to 1000 [ 428.579866][ T29] audit: type=1400 audit(1210.697:49600): avc: denied { prog_load } for pid=16492 comm="syz.2.12538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 428.611214][ T29] audit: type=1400 audit(1210.718:49601): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 428.634288][ T29] audit: type=1400 audit(1210.729:49602): avc: denied { prog_load } for pid=16492 comm="syz.2.12538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 428.642690][T16529] netlink: 'syz.0.12539': attribute type 1 has an invalid length. [ 428.653084][ T29] audit: type=1400 audit(1210.729:49603): avc: denied { map_create } for pid=16492 comm="syz.2.12538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 428.683138][T16493] lo speed is unknown, defaulting to 1000 [ 428.718464][ T29] audit: type=1400 audit(1210.834:49604): avc: denied { create } for pid=16528 comm="syz.0.12539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 428.745639][T16529] veth17: entered promiscuous mode [ 428.753152][T16529] bond7: (slave veth17): Enslaving as an active interface with an up link [ 428.803903][ T29] audit: type=1400 audit(1210.928:49605): avc: denied { create } for pid=16611 comm="syz.7.12541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 428.835149][T16612] veth11: entered promiscuous mode [ 428.866440][ T29] audit: type=1400 audit(1210.970:49606): avc: denied { open } for pid=16602 comm="syz.5.12540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 428.885532][ T29] audit: type=1400 audit(1210.970:49607): avc: denied { name_bind } for pid=16602 comm="syz.5.12540" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 428.907020][ T29] audit: type=1400 audit(1210.970:49608): avc: denied { create } for pid=16602 comm="syz.5.12540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 428.978953][T16637] veth15: entered promiscuous mode [ 428.994514][T16633] lo speed is unknown, defaulting to 1000 [ 428.995960][T16662] netlink: 'syz.7.12547': attribute type 6 has an invalid length. [ 429.015529][T16634] lo speed is unknown, defaulting to 1000 [ 429.065334][T16669] lo speed is unknown, defaulting to 1000 [ 429.072178][T16633] lo speed is unknown, defaulting to 1000 [ 429.079135][T16655] lo speed is unknown, defaulting to 1000 [ 429.092319][T16675] lo speed is unknown, defaulting to 1000 [ 429.113141][T16634] lo speed is unknown, defaulting to 1000 [ 429.161083][T16669] lo speed is unknown, defaulting to 1000 [ 429.264413][T16740] lo speed is unknown, defaulting to 1000 [ 429.264487][T16655] lo speed is unknown, defaulting to 1000 [ 429.277563][T16675] lo speed is unknown, defaulting to 1000 [ 429.329431][T16740] lo speed is unknown, defaulting to 1000 [ 429.379942][T16745] lo speed is unknown, defaulting to 1000 [ 429.483342][T16745] lo speed is unknown, defaulting to 1000 [ 429.543467][T16810] lo speed is unknown, defaulting to 1000 [ 429.595965][T16825] lo speed is unknown, defaulting to 1000 [ 429.603435][T16839] veth21: entered promiscuous mode [ 429.613097][T16815] lo speed is unknown, defaulting to 1000 [ 429.618311][T16810] lo speed is unknown, defaulting to 1000 [ 429.681261][T16825] lo speed is unknown, defaulting to 1000 [ 429.710123][T16815] lo speed is unknown, defaulting to 1000 [ 429.712324][T16889] netlink: 'syz.5.12561': attribute type 6 has an invalid length. [ 429.876693][T16898] lo speed is unknown, defaulting to 1000 [ 429.887014][T16902] lo speed is unknown, defaulting to 1000 [ 429.938697][T16898] lo speed is unknown, defaulting to 1000 [ 429.968253][T16947] lo speed is unknown, defaulting to 1000 [ 430.004855][T16902] lo speed is unknown, defaulting to 1000 [ 430.052060][T16948] lo speed is unknown, defaulting to 1000 [ 430.100134][T16993] lo speed is unknown, defaulting to 1000 [ 430.109557][T16947] lo speed is unknown, defaulting to 1000 [ 430.116938][T16948] lo speed is unknown, defaulting to 1000 [ 430.206394][T17031] lo speed is unknown, defaulting to 1000 [ 430.206389][T16993] lo speed is unknown, defaulting to 1000 [ 430.227413][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 430.298932][T17031] lo speed is unknown, defaulting to 1000 [ 430.501623][T17099] __nla_validate_parse: 37 callbacks suppressed [ 430.501638][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12574'. [ 430.517091][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12574'. [ 430.526255][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12574'. [ 430.535500][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12574'. [ 430.544632][T17099] netlink: 'syz.2.12574': attribute type 6 has an invalid length. [ 430.574244][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12575'. [ 430.632681][T17101] veth17: entered promiscuous mode [ 430.725481][T17122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12577'. [ 430.785525][T17122] veth21: entered promiscuous mode [ 430.861541][T17145] netlink: 'syz.0.12580': attribute type 1 has an invalid length. [ 430.892893][T17145] veth19: entered promiscuous mode [ 430.899687][T17145] bond8: (slave veth19): Enslaving as a backup interface with a down link [ 431.104027][T17207] veth15: entered promiscuous mode [ 431.174925][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12586'. [ 431.184013][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12586'. [ 431.193156][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12586'. [ 431.202374][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12586'. [ 431.211425][T17227] netlink: 'syz.6.12586': attribute type 6 has an invalid length. [ 431.295815][T17233] lo speed is unknown, defaulting to 1000 [ 431.326998][T17233] lo speed is unknown, defaulting to 1000 [ 431.347914][T17238] lo speed is unknown, defaulting to 1000 [ 431.386057][T17238] lo speed is unknown, defaulting to 1000 [ 431.445753][T17287] ALSA: seq fatal error: cannot create timer (-19) [ 431.466198][T17289] netlink: 'syz.5.12594': attribute type 1 has an invalid length. [ 431.488132][T17289] veth21: entered promiscuous mode [ 431.494076][T17301] netlink: 'syz.0.12605': attribute type 1 has an invalid length. [ 431.510579][T17296] lo speed is unknown, defaulting to 1000 [ 431.527798][T17322] netlink: 'syz.5.12596': attribute type 1 has an invalid length. [ 431.567840][T17301] veth21: entered promiscuous mode [ 431.581910][T17301] bond9: (slave veth21): Enslaving as a backup interface with a down link [ 431.590753][T17296] lo speed is unknown, defaulting to 1000 [ 431.619835][T17322] veth23: entered promiscuous mode [ 431.630309][T17322] bond9: (slave veth23): Enslaving as a backup interface with a down link [ 431.680228][T17423] lo speed is unknown, defaulting to 1000 [ 431.762685][T17423] lo speed is unknown, defaulting to 1000 [ 431.798366][T17451] lo speed is unknown, defaulting to 1000 [ 431.867070][T17451] lo speed is unknown, defaulting to 1000 [ 432.117583][T17511] lo speed is unknown, defaulting to 1000 [ 432.152355][T17511] lo speed is unknown, defaulting to 1000 [ 432.694473][T17600] lo speed is unknown, defaulting to 1000 [ 432.739558][T17600] lo speed is unknown, defaulting to 1000 [ 432.782399][T17607] veth15: entered promiscuous mode [ 432.789029][T17607] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 432.813383][T17670] lo speed is unknown, defaulting to 1000 [ 432.877001][T17670] lo speed is unknown, defaulting to 1000 [ 432.900857][T17683] lo speed is unknown, defaulting to 1000 [ 432.938749][T17683] lo speed is unknown, defaulting to 1000 [ 433.031862][T17733] veth17: entered promiscuous mode [ 433.039001][T17733] bond8: (slave veth17): Enslaving as a backup interface with a down link [ 433.086896][T17780] lo speed is unknown, defaulting to 1000 [ 433.101750][T17783] lo speed is unknown, defaulting to 1000 [ 433.117145][T17780] lo speed is unknown, defaulting to 1000 [ 433.154078][T17783] lo speed is unknown, defaulting to 1000 [ 433.234637][T17830] lo speed is unknown, defaulting to 1000 [ 433.255939][T17835] validate_nla: 6 callbacks suppressed [ 433.255953][T17835] netlink: 'syz.7.12647': attribute type 1 has an invalid length. [ 433.276271][T17830] lo speed is unknown, defaulting to 1000 [ 433.292295][T17835] veth11: entered promiscuous mode [ 433.299440][T17835] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 433.377012][ T29] kauditd_printk_skb: 1118 callbacks suppressed [ 433.377024][ T29] audit: type=1400 audit(1215.726:50727): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 433.436076][ T29] audit: type=1400 audit(1215.778:50728): avc: denied { map_create } for pid=17902 comm="syz.0.12649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 433.455037][ T29] audit: type=1400 audit(1215.778:50729): avc: denied { prog_load } for pid=17902 comm="syz.0.12649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 433.473844][ T29] audit: type=1326 audit(1215.778:50730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.0.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf44ebe9 code=0x7ffc0000 [ 433.497002][ T29] audit: type=1326 audit(1215.778:50731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.0.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf44ebe9 code=0x7ffc0000 [ 433.520287][ T29] audit: type=1326 audit(1215.778:50732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.0.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3cf44ebe9 code=0x7ffc0000 [ 433.543339][ T29] audit: type=1400 audit(1215.778:50733): avc: denied { create } for pid=17902 comm="syz.0.12649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 433.562649][ T29] audit: type=1326 audit(1215.778:50734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.0.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf44ebe9 code=0x7ffc0000 [ 433.585873][ T29] audit: type=1326 audit(1215.778:50735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.0.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf44ebe9 code=0x7ffc0000 [ 433.609081][ T29] audit: type=1326 audit(1215.778:50736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.0.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3cf44ebe9 code=0x7ffc0000 [ 433.658014][T17911] lo speed is unknown, defaulting to 1000 [ 433.660397][T17929] netlink: 'syz.7.12654': attribute type 6 has an invalid length. [ 433.729102][T17938] lo speed is unknown, defaulting to 1000 [ 433.735351][T17911] lo speed is unknown, defaulting to 1000 [ 433.812491][T17938] lo speed is unknown, defaulting to 1000 [ 433.831044][T17945] lo speed is unknown, defaulting to 1000 [ 433.923984][T17945] lo speed is unknown, defaulting to 1000 [ 433.987276][T17997] bond0: (slave ip6gretap0): Releasing backup interface [ 433.997350][T17997] bond1: (slave veth5): Releasing backup interface [ 434.006056][T17997] bond3: (slave veth9): Releasing backup interface [ 434.014802][T17997] bond4: (slave veth11): Releasing backup interface [ 434.023487][T17997] bond5: (slave veth13): Releasing backup interface [ 434.040992][T17997] bond7: (slave veth15): Releasing backup interface [ 434.050291][T17997] bond8: (slave veth17): Releasing backup interface [ 434.087204][T18009] lo speed is unknown, defaulting to 1000 [ 434.101519][T18004] lo speed is unknown, defaulting to 1000 [ 434.126042][T18012] lo speed is unknown, defaulting to 1000 [ 434.140729][T18009] lo speed is unknown, defaulting to 1000 [ 434.210638][T18044] netlink: 'syz.2.12667': attribute type 6 has an invalid length. [ 434.219822][T18004] lo speed is unknown, defaulting to 1000 [ 434.303122][T18012] lo speed is unknown, defaulting to 1000 [ 434.373856][T18087] lo speed is unknown, defaulting to 1000 [ 434.383837][T18091] lo speed is unknown, defaulting to 1000 [ 434.478080][T18087] lo speed is unknown, defaulting to 1000 [ 434.505866][T18127] netlink: 'syz.5.12681': attribute type 1 has an invalid length. [ 434.556278][T18127] veth25: entered promiscuous mode [ 434.563622][T18127] bond10: (slave veth25): Enslaving as a backup interface with a down link [ 434.572694][T18091] lo speed is unknown, defaulting to 1000 [ 434.602772][T18125] lo speed is unknown, defaulting to 1000 [ 434.710951][T18210] lo speed is unknown, defaulting to 1000 [ 434.714608][T18125] lo speed is unknown, defaulting to 1000 [ 434.759186][T18210] lo speed is unknown, defaulting to 1000 [ 434.792183][T18217] lo speed is unknown, defaulting to 1000 [ 434.860175][T18217] lo speed is unknown, defaulting to 1000 [ 434.866173][T18238] lo speed is unknown, defaulting to 1000 [ 434.926873][T18290] netlink: 'syz.5.12687': attribute type 1 has an invalid length. [ 435.014721][T18290] veth27: entered promiscuous mode [ 435.028344][T18290] bond11: (slave veth27): Enslaving as a backup interface with a down link [ 435.057534][T18238] lo speed is unknown, defaulting to 1000 [ 435.112901][T18346] netlink: 'syz.7.12679': attribute type 6 has an invalid length. [ 435.202031][T18371] lo speed is unknown, defaulting to 1000 [ 435.217351][T18369] lo speed is unknown, defaulting to 1000 [ 435.263020][T18383] lo speed is unknown, defaulting to 1000 [ 435.268286][T18371] lo speed is unknown, defaulting to 1000 [ 435.341111][T18369] lo speed is unknown, defaulting to 1000 [ 435.372664][T18383] lo speed is unknown, defaulting to 1000 [ 435.441204][T18431] lo speed is unknown, defaulting to 1000 [ 435.518558][T18431] lo speed is unknown, defaulting to 1000 [ 435.559581][T18469] lo speed is unknown, defaulting to 1000 [ 435.660693][T18456] lo speed is unknown, defaulting to 1000 [ 435.688410][T18469] lo speed is unknown, defaulting to 1000 [ 435.694437][T18488] lo speed is unknown, defaulting to 1000 [ 435.721217][T18456] lo speed is unknown, defaulting to 1000 [ 435.797119][T18488] lo speed is unknown, defaulting to 1000 [ 435.849078][T18536] netlink: 'syz.5.12692': attribute type 1 has an invalid length. [ 435.924410][T18536] __nla_validate_parse: 34 callbacks suppressed [ 435.924424][T18536] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12692'. [ 436.006790][T18608] netlink: 'syz.7.12697': attribute type 1 has an invalid length. [ 436.015699][T18536] veth29: entered promiscuous mode [ 436.031182][T18536] bond12: (slave veth29): Enslaving as a backup interface with a down link [ 436.039898][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12696'. [ 436.048978][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12696'. [ 436.058126][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12696'. [ 436.069063][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12696'. [ 436.078368][T18597] netlink: 'syz.0.12696': attribute type 6 has an invalid length. [ 436.092758][T18617] netlink: 52 bytes leftover after parsing attributes in process `syz.7.12697'. [ 436.111393][T18612] lo speed is unknown, defaulting to 1000 [ 436.124956][T18616] lo speed is unknown, defaulting to 1000 [ 436.139634][T18608] veth13: entered promiscuous mode [ 436.146283][T18608] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 436.231077][T18612] lo speed is unknown, defaulting to 1000 [ 436.261291][T18677] lo speed is unknown, defaulting to 1000 [ 436.323927][T18677] lo speed is unknown, defaulting to 1000 [ 436.335838][T18676] lo speed is unknown, defaulting to 1000 [ 436.335850][T18616] lo speed is unknown, defaulting to 1000 [ 436.438500][T18676] lo speed is unknown, defaulting to 1000 [ 436.565410][T18742] lo speed is unknown, defaulting to 1000 [ 436.639985][T18742] lo speed is unknown, defaulting to 1000 [ 436.725885][T18781] lo speed is unknown, defaulting to 1000 [ 436.743968][T18793] lo speed is unknown, defaulting to 1000 [ 436.842412][T18781] lo speed is unknown, defaulting to 1000 [ 436.849822][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12711'. [ 436.858900][T18820] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12711'. [ 436.867938][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12711'. [ 436.905457][T18820] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12711'. [ 436.914616][T18820] netlink: 'syz.7.12711': attribute type 6 has an invalid length. [ 436.927618][T18793] lo speed is unknown, defaulting to 1000 [ 436.944879][T18818] lo speed is unknown, defaulting to 1000 [ 437.058060][T18818] lo speed is unknown, defaulting to 1000 [ 437.190763][T18914] veth31: entered promiscuous mode [ 437.197604][T18914] bond13: (slave veth31): Enslaving as a backup interface with a down link [ 437.213428][T18884] veth15: entered promiscuous mode [ 437.220258][T18884] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 437.243301][T18880] veth23: entered promiscuous mode [ 437.256282][T18880] bond10: (slave veth23): Enslaving as a backup interface with a down link [ 437.424784][T19040] lo speed is unknown, defaulting to 1000 [ 437.441948][T19044] lo speed is unknown, defaulting to 1000 [ 437.458652][T19040] lo speed is unknown, defaulting to 1000 [ 437.474981][T19046] lo speed is unknown, defaulting to 1000 [ 437.486794][T19052] lo speed is unknown, defaulting to 1000 [ 437.506920][T19044] lo speed is unknown, defaulting to 1000 [ 437.548468][T19046] lo speed is unknown, defaulting to 1000 [ 437.642900][T19052] lo speed is unknown, defaulting to 1000 [ 437.654000][T19140] veth33: entered promiscuous mode [ 437.661303][T19140] bond14: (slave veth33): Enslaving as a backup interface with a down link [ 437.747964][T19195] veth17: entered promiscuous mode [ 437.754490][T19195] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 437.764800][T19198] lo speed is unknown, defaulting to 1000 [ 437.837086][T19232] lo speed is unknown, defaulting to 1000 [ 437.843074][T19198] lo speed is unknown, defaulting to 1000 [ 437.876643][T19266] lo speed is unknown, defaulting to 1000 [ 437.923165][T19289] lo speed is unknown, defaulting to 1000 [ 437.928353][T19232] lo speed is unknown, defaulting to 1000 [ 437.979201][T19266] lo speed is unknown, defaulting to 1000 [ 438.016996][T19313] lo speed is unknown, defaulting to 1000 [ 438.067475][T19289] lo speed is unknown, defaulting to 1000 [ 438.129790][T19313] lo speed is unknown, defaulting to 1000 [ 438.214434][ T29] kauditd_printk_skb: 819 callbacks suppressed [ 438.214448][ T29] audit: type=1400 audit(1220.807:51556): avc: denied { open } for pid=19346 comm="syz.6.12738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 438.250928][ T29] audit: type=1400 audit(1220.838:51557): avc: denied { prog_load } for pid=19386 comm="syz.7.12739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 438.269851][ T29] audit: type=1400 audit(1220.838:51558): avc: denied { map_create } for pid=19386 comm="syz.7.12739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 438.288906][ T29] audit: type=1400 audit(1220.838:51559): avc: denied { name_bind } for pid=19346 comm="syz.6.12738" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 438.310347][ T29] audit: type=1400 audit(1220.838:51560): avc: denied { create } for pid=19346 comm="syz.6.12738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 438.329671][ T29] audit: type=1400 audit(1220.838:51561): avc: denied { prog_load } for pid=19346 comm="syz.6.12738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 438.348736][ T29] audit: type=1400 audit(1220.838:51562): avc: denied { map_create } for pid=19346 comm="syz.6.12738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 438.367628][ T29] audit: type=1400 audit(1220.838:51563): avc: denied { prog_load } for pid=19346 comm="syz.6.12738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 438.399705][ T29] audit: type=1400 audit(1220.901:51564): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 438.422670][ T29] audit: type=1400 audit(1220.954:51565): avc: denied { prog_load } for pid=19391 comm="syz.0.12742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 438.454297][T19398] lo speed is unknown, defaulting to 1000 [ 438.489020][T19398] lo speed is unknown, defaulting to 1000 [ 438.526947][T19406] lo speed is unknown, defaulting to 1000 [ 438.661760][T19406] lo speed is unknown, defaulting to 1000 [ 438.777891][T19434] lo speed is unknown, defaulting to 1000 [ 438.853052][T19434] lo speed is unknown, defaulting to 1000 [ 439.011048][T19473] lo speed is unknown, defaulting to 1000 [ 439.076091][T19473] lo speed is unknown, defaulting to 1000 [ 439.221311][T19524] validate_nla: 5 callbacks suppressed [ 439.221325][T19524] netlink: 'syz.0.12755': attribute type 1 has an invalid length. [ 439.227245][T19522] lo speed is unknown, defaulting to 1000 [ 439.280425][T19521] lo speed is unknown, defaulting to 1000 [ 439.292261][T19522] lo speed is unknown, defaulting to 1000 [ 439.306884][T19524] veth25: entered promiscuous mode [ 439.313122][T19524] bond11: (slave veth25): Enslaving as a backup interface with a down link [ 439.356912][T19530] lo speed is unknown, defaulting to 1000 [ 439.375938][T19521] lo speed is unknown, defaulting to 1000 [ 439.459815][T19530] lo speed is unknown, defaulting to 1000 [ 439.483736][T19626] lo speed is unknown, defaulting to 1000 [ 439.560102][T19626] lo speed is unknown, defaulting to 1000 [ 439.566731][T19648] lo speed is unknown, defaulting to 1000 [ 439.581375][T19647] lo speed is unknown, defaulting to 1000 [ 439.608057][T19648] lo speed is unknown, defaulting to 1000 [ 439.644816][T19701] netlink: 'syz.2.12761': attribute type 6 has an invalid length. [ 439.712741][T19647] lo speed is unknown, defaulting to 1000 [ 439.781125][T19720] lo speed is unknown, defaulting to 1000 [ 439.787778][T19727] lo speed is unknown, defaulting to 1000 [ 439.833037][T19720] lo speed is unknown, defaulting to 1000 [ 439.880312][T19727] lo speed is unknown, defaulting to 1000 [ 439.892049][T19771] netlink: 'syz.7.12771': attribute type 1 has an invalid length. [ 439.977681][T19772] lo speed is unknown, defaulting to 1000 [ 439.984132][T19771] veth19: entered promiscuous mode [ 439.991548][T19771] bond8: (slave veth19): Enslaving as a backup interface with a down link [ 440.015327][T19780] lo speed is unknown, defaulting to 1000 [ 440.051673][T19851] netlink: 'syz.7.12774': attribute type 6 has an invalid length. [ 440.077277][T19780] lo speed is unknown, defaulting to 1000 [ 440.094855][T19772] lo speed is unknown, defaulting to 1000 [ 440.158558][T19859] lo speed is unknown, defaulting to 1000 [ 440.218425][T19859] lo speed is unknown, defaulting to 1000 [ 440.242827][T19896] lo speed is unknown, defaulting to 1000 [ 440.301061][T19896] lo speed is unknown, defaulting to 1000 [ 440.381402][T19930] lo speed is unknown, defaulting to 1000 [ 440.435384][T19963] lo speed is unknown, defaulting to 1000 [ 440.452299][T19958] lo speed is unknown, defaulting to 1000 [ 440.467931][T19930] lo speed is unknown, defaulting to 1000 [ 440.562252][T19963] lo speed is unknown, defaulting to 1000 [ 440.637069][T20021] netlink: 'syz.0.12786': attribute type 1 has an invalid length. [ 440.659625][T20018] netlink: 'syz.7.12787': attribute type 6 has an invalid length. [ 440.673398][T19958] lo speed is unknown, defaulting to 1000 [ 440.683288][T20021] veth27: entered promiscuous mode [ 440.703191][T20021] bond12: (slave veth27): Enslaving as a backup interface with a down link [ 440.714608][T20073] netlink: 'syz.7.12789': attribute type 1 has an invalid length. [ 440.765799][T20118] __nla_validate_parse: 20 callbacks suppressed [ 440.765812][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12790'. [ 440.773433][T20073] netlink: 52 bytes leftover after parsing attributes in process `syz.7.12789'. [ 440.806043][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12802'. [ 440.815217][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12802'. [ 440.824275][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12802'. [ 440.834886][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12802'. [ 440.844050][T20116] netlink: 'syz.0.12802': attribute type 6 has an invalid length. [ 440.892321][T20073] veth21: entered promiscuous mode [ 440.900253][T20073] bond9: (slave veth21): Enslaving as a backup interface with a down link [ 440.911745][T20152] netlink: 'syz.0.12795': attribute type 1 has an invalid length. [ 440.955151][T20152] veth29: entered promiscuous mode [ 440.970196][T20152] bond13: (slave veth29): Enslaving as a backup interface with a down link [ 441.017344][T20171] lo speed is unknown, defaulting to 1000 [ 441.093514][T20228] netlink: 'syz.0.12805': attribute type 1 has an invalid length. [ 441.128694][T20171] lo speed is unknown, defaulting to 1000 [ 441.148312][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12806'. [ 441.157460][T20232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12806'. [ 441.166502][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12806'. [ 441.185402][T20232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12806'. [ 441.200069][T20230] lo speed is unknown, defaulting to 1000 [ 441.265269][T20230] lo speed is unknown, defaulting to 1000 [ 441.296222][T20241] veth19: entered promiscuous mode [ 441.329072][T20241] bond9: (slave veth19): Enslaving as a backup interface with a down link [ 441.362959][T20228] veth31: entered promiscuous mode [ 441.396862][T20228] bond14: (slave veth31): Enslaving as a backup interface with a down link [ 441.486690][T20369] lo speed is unknown, defaulting to 1000 [ 441.565887][T20379] lo speed is unknown, defaulting to 1000 [ 441.608561][T20369] lo speed is unknown, defaulting to 1000 [ 441.653441][T20379] lo speed is unknown, defaulting to 1000 [ 441.992305][T20447] lo speed is unknown, defaulting to 1000 [ 442.019873][T20451] lo speed is unknown, defaulting to 1000 [ 442.043359][T20447] lo speed is unknown, defaulting to 1000 [ 442.092485][T20451] lo speed is unknown, defaulting to 1000 [ 442.289075][T20505] lo speed is unknown, defaulting to 1000 [ 442.349452][T20503] lo speed is unknown, defaulting to 1000 [ 442.390134][T20516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.399986][T20516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.415513][T21956] lo speed is unknown, defaulting to 1000 [ 442.421258][T21956] syz2: Port: 1 Link ACTIVE [ 442.427519][T20505] lo speed is unknown, defaulting to 1000 [ 442.484982][T20503] lo speed is unknown, defaulting to 1000 [ 442.568111][T20554] lo speed is unknown, defaulting to 1000 [ 442.670349][T20571] lo speed is unknown, defaulting to 1000 [ 442.671482][T20554] lo speed is unknown, defaulting to 1000 [ 442.743546][T20571] lo speed is unknown, defaulting to 1000 [ 442.919071][T20624] lo speed is unknown, defaulting to 1000 [ 442.989324][ T29] kauditd_printk_skb: 933 callbacks suppressed [ 442.989337][ T29] audit: type=1400 audit(1225.814:52499): avc: denied { open } for pid=20631 comm="syz.5.12848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 443.004006][T20624] lo speed is unknown, defaulting to 1000 [ 443.025592][ T29] audit: type=1400 audit(1225.846:52500): avc: denied { name_bind } for pid=20631 comm="syz.5.12848" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 443.047080][ T29] audit: type=1400 audit(1225.846:52501): avc: denied { create } for pid=20631 comm="syz.5.12848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 443.066451][ T29] audit: type=1400 audit(1225.846:52502): avc: denied { prog_load } for pid=20631 comm="syz.5.12848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 443.085506][ T29] audit: type=1400 audit(1225.846:52503): avc: denied { map_create } for pid=20631 comm="syz.5.12848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 443.104406][ T29] audit: type=1400 audit(1225.846:52504): avc: denied { prog_load } for pid=20631 comm="syz.5.12848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 443.123479][ T29] audit: type=1400 audit(1225.951:52505): avc: denied { open } for pid=20644 comm="syz.5.12839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 443.142440][ T29] audit: type=1400 audit(1225.951:52506): avc: denied { map_create } for pid=20644 comm="syz.5.12839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 443.161367][ T29] audit: type=1400 audit(1225.951:52507): avc: denied { prog_load } for pid=20644 comm="syz.5.12839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 443.180140][ T29] audit: type=1400 audit(1225.951:52508): avc: denied { prog_load } for pid=20644 comm="syz.5.12839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 443.216786][T20645] lo speed is unknown, defaulting to 1000 [ 443.267236][T20645] lo speed is unknown, defaulting to 1000 [ 443.278089][T20662] C: left promiscuous mode [ 443.283728][T20662] tunl0: left promiscuous mode [ 443.289164][T20662] gre0: left promiscuous mode [ 443.294728][T20662] 1ªî{X¹¦: left promiscuous mode [ 443.301120][T20662] erspan0: left promiscuous mode [ 443.308485][T20662] ip_vti0: left promiscuous mode [ 443.314314][T20662] ip6_vti0: left promiscuous mode [ 443.320816][T20662] sit0: left promiscuous mode [ 443.328025][T20662] ip6tnl0: left promiscuous mode [ 443.334970][T20662] ip6gre0: left promiscuous mode [ 443.341348][T20662] $Hÿ: left promiscuous mode [ 443.346703][T20662] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 443.354629][T20662] team0: left promiscuous mode [ 443.359654][T20662] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.368315][T20662] nlmon0: left promiscuous mode [ 443.379983][T20662] caif0: left promiscuous mode [ 443.384809][T20662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.485503][T20686] lo speed is unknown, defaulting to 1000 [ 443.597738][T20686] lo speed is unknown, defaulting to 1000 [ 443.774100][T20728] lo speed is unknown, defaulting to 1000 [ 443.863556][T20736] veth33: entered promiscuous mode [ 443.871794][T20736] bond15: (slave veth33): Enslaving as a backup interface with a down link [ 443.880695][T20728] lo speed is unknown, defaulting to 1000 [ 444.167915][T20808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.273016][T20813] validate_nla: 5 callbacks suppressed [ 444.273031][T20813] netlink: 'syz.5.12858': attribute type 6 has an invalid length. [ 444.400497][T20820] netlink: 'syz.2.12861': attribute type 1 has an invalid length. [ 444.425575][T20820] veth17: entered promiscuous mode [ 444.432700][T20820] bond9: (slave veth17): Enslaving as a backup interface with a down link [ 444.463602][T20867] netlink: 'syz.2.12862': attribute type 1 has an invalid length. [ 444.540259][T20909] lo speed is unknown, defaulting to 1000 [ 444.650707][T19137]  (unregistering): (slave dummy0): Releasing backup interface [ 444.659474][T19137]  (unregistering): Released all slaves [ 444.666621][T20909] lo speed is unknown, defaulting to 1000 [ 444.678611][T20932] lo speed is unknown, defaulting to 1000 [ 444.704997][T19137] IPVS: stopping backup sync thread 16896 ... [ 444.723005][T20932] lo speed is unknown, defaulting to 1000 [ 444.754924][T19137] hsr_slave_0: left promiscuous mode [ 444.761697][T19137] hsr_slave_1: left promiscuous mode [ 444.768683][T19137] pim6reg (unregistering): left allmulticast mode [ 444.845668][T20971] lo speed is unknown, defaulting to 1000 [ 444.851806][T20969] lo speed is unknown, defaulting to 1000 [ 444.898511][T20969] lo speed is unknown, defaulting to 1000 [ 444.907057][T20992] netlink: 'syz.5.12881': attribute type 1 has an invalid length. [ 444.942714][T20992] veth35: entered promiscuous mode [ 444.951353][T20990] lo speed is unknown, defaulting to 1000 [ 444.965434][T20971] lo speed is unknown, defaulting to 1000 [ 445.038314][T20990] lo speed is unknown, defaulting to 1000 [ 445.044135][T21066] lo speed is unknown, defaulting to 1000 [ 445.046532][T21087] netlink: 'syz.7.12872': attribute type 1 has an invalid length. [ 445.097100][T21087] veth23: entered promiscuous mode [ 445.111443][T21087] bond10: (slave veth23): Enslaving as a backup interface with a down link [ 445.150385][T21066] lo speed is unknown, defaulting to 1000 [ 445.261969][T21161] lo speed is unknown, defaulting to 1000 [ 445.308099][T21183] lo speed is unknown, defaulting to 1000 [ 445.358515][T21161] lo speed is unknown, defaulting to 1000 [ 445.379359][T21200] netlink: 'syz.2.12884': attribute type 1 has an invalid length. [ 445.443475][T21183] lo speed is unknown, defaulting to 1000 [ 445.512202][T21200] veth19: entered promiscuous mode [ 445.518892][T21200] bond11: (slave veth19): Enslaving as a backup interface with a down link [ 445.523873][T21278] netlink: 'syz.5.12889': attribute type 1 has an invalid length. [ 445.577335][T21278] __nla_validate_parse: 27 callbacks suppressed [ 445.577347][T21278] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12889'. [ 445.630821][T21278] veth37: entered promiscuous mode [ 445.646465][T21278] bond16: (slave veth37): Enslaving as a backup interface with a down link [ 445.654243][T21347] netlink: 'syz.6.12893': attribute type 1 has an invalid length. [ 445.705589][T21347] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12893'. [ 445.722217][T21347] veth21: entered promiscuous mode [ 445.728791][T21347] bond10: (slave veth21): Enslaving as a backup interface with a down link [ 445.775964][T21400] lo speed is unknown, defaulting to 1000 [ 445.832737][T21400] lo speed is unknown, defaulting to 1000 [ 445.961531][T21430] lo speed is unknown, defaulting to 1000 [ 446.010930][T21430] lo speed is unknown, defaulting to 1000 [ 446.063672][T21454] veth25: entered promiscuous mode [ 446.134355][T21481] netlink: 'syz.0.12904': attribute type 1 has an invalid length. [ 446.153420][T21479] lo speed is unknown, defaulting to 1000 [ 446.215600][T21481] veth35: entered promiscuous mode [ 446.249201][T21479] lo speed is unknown, defaulting to 1000 [ 446.285786][T21533] netlink: 'syz.0.12906': attribute type 1 has an invalid length. [ 446.535698][T21595] veth37: entered promiscuous mode [ 446.559843][T21593] lo speed is unknown, defaulting to 1000 [ 446.705259][T21647] lo speed is unknown, defaulting to 1000 [ 446.711186][T21593] lo speed is unknown, defaulting to 1000 [ 446.813580][T21647] lo speed is unknown, defaulting to 1000 [ 447.031324][T21692] lo speed is unknown, defaulting to 1000 [ 447.042756][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12915'. [ 447.051837][T21704] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12915'. [ 447.060886][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12915'. [ 447.097406][T21704] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12915'. [ 447.115356][T21697] lo speed is unknown, defaulting to 1000 [ 447.194462][T21692] lo speed is unknown, defaulting to 1000 [ 447.257738][T21697] lo speed is unknown, defaulting to 1000 [ 447.319824][T21707] lo speed is unknown, defaulting to 1000 [ 447.460072][T21757] veth21: entered promiscuous mode [ 447.466581][T21757] bond12: (slave veth21): Enslaving as a backup interface with a down link [ 447.609158][T21707] lo speed is unknown, defaulting to 1000 [ 447.739790][T21860] lo speed is unknown, defaulting to 1000 [ 447.774584][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 447.774600][ T29] audit: type=1400 audit(1230.780:53321): avc: denied { map_create } for pid=21858 comm="syz.7.12921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.774829][T21860] lo speed is unknown, defaulting to 1000 [ 447.780883][ T29] audit: type=1400 audit(1230.780:53322): avc: denied { prog_load } for pid=21858 comm="syz.7.12921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.824321][ T29] audit: type=1400 audit(1230.780:53323): avc: denied { prog_load } for pid=21858 comm="syz.7.12921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.843163][ T29] audit: type=1400 audit(1230.780:53324): avc: denied { open } for pid=21858 comm="syz.7.12921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 447.862166][ T29] audit: type=1400 audit(1230.780:53325): avc: denied { prog_load } for pid=21858 comm="syz.7.12921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.881020][ T29] audit: type=1400 audit(1230.790:53326): avc: denied { map_create } for pid=21804 comm="syz.2.12920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.899920][ T29] audit: type=1400 audit(1230.790:53327): avc: denied { prog_load } for pid=21804 comm="syz.2.12920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.918795][ T29] audit: type=1400 audit(1230.790:53328): avc: denied { prog_load } for pid=21804 comm="syz.2.12920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 447.937647][ T29] audit: type=1400 audit(1230.790:53329): avc: denied { create } for pid=21804 comm="syz.2.12920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 447.957041][ T29] audit: type=1400 audit(1230.790:53330): avc: denied { read append } for pid=21804 comm="syz.2.12920" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 447.981000][T21865] veth23: entered promiscuous mode [ 447.988700][T21865] bond11: (slave veth23): Enslaving as a backup interface with a down link [ 448.195158][T21912] lo speed is unknown, defaulting to 1000 [ 448.259155][T21912] lo speed is unknown, defaulting to 1000 [ 448.803733][T21974] lo speed is unknown, defaulting to 1000 [ 448.867251][T21974] lo speed is unknown, defaulting to 1000 [ 448.905141][T21985] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12935'. [ 448.926663][T21983] veth39: entered promiscuous mode [ 448.941412][T21985] veth39: entered promiscuous mode [ 448.954349][T21985] bond19: (slave veth39): Enslaving as a backup interface with a down link [ 449.098078][T22099] lo speed is unknown, defaulting to 1000 [ 449.140715][T22106] lo speed is unknown, defaulting to 1000 [ 449.189164][T22114] lo speed is unknown, defaulting to 1000 [ 449.239914][T22106] lo speed is unknown, defaulting to 1000 [ 449.263756][T22099] lo speed is unknown, defaulting to 1000 [ 449.283437][T22114] lo speed is unknown, defaulting to 1000 [ 449.407188][T22174] lo speed is unknown, defaulting to 1000 [ 449.483065][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12945'. [ 449.492215][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12945'. [ 449.501259][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12945'. [ 449.517503][T22187] validate_nla: 6 callbacks suppressed [ 449.517516][T22187] netlink: 'syz.7.12945': attribute type 6 has an invalid length. [ 449.531103][T22174] lo speed is unknown, defaulting to 1000 [ 449.556929][T22198] lo speed is unknown, defaulting to 1000 [ 449.558975][T22215] netlink: 'syz.7.12949': attribute type 1 has an invalid length. [ 449.622664][T22215] veth27: entered promiscuous mode [ 449.629403][T22215] bond11: (slave veth27): Enslaving as a backup interface with a down link [ 449.638225][T22198] lo speed is unknown, defaulting to 1000 [ 449.677221][T22283] netlink: 'syz.7.12951': attribute type 1 has an invalid length. [ 449.680158][T22281] netlink: 'syz.5.12950': attribute type 1 has an invalid length. [ 449.728924][T22283] veth29: entered promiscuous mode [ 449.735802][T22283] bond12: (slave veth29): Enslaving as a backup interface with a down link [ 449.762157][T22281] veth41: entered promiscuous mode [ 449.768914][T22281] bond18: (slave veth41): Enslaving as a backup interface with a down link [ 449.804786][T22388] netlink: 'syz.7.12953': attribute type 1 has an invalid length. [ 449.831999][T22390] lo speed is unknown, defaulting to 1000 [ 449.872385][T22390] lo speed is unknown, defaulting to 1000 [ 449.886086][T22428] lo speed is unknown, defaulting to 1000 [ 449.908278][T22430] lo speed is unknown, defaulting to 1000 [ 449.955600][T22428] lo speed is unknown, defaulting to 1000 [ 449.988611][T22430] lo speed is unknown, defaulting to 1000 [ 450.009339][T22485] netlink: 'syz.5.12955': attribute type 1 has an invalid length. [ 450.067461][T22485] veth43: entered promiscuous mode [ 450.083392][T22485] bond19: (slave veth43): Enslaving as a backup interface with a down link [ 450.107111][T22545] netlink: 'syz.7.12956': attribute type 1 has an invalid length. [ 450.148222][T22545] veth31: entered promiscuous mode [ 450.154730][T22545] bond14: (slave veth31): Enslaving as a backup interface with a down link [ 450.172938][T22565] lo speed is unknown, defaulting to 1000 [ 450.235472][T22565] lo speed is unknown, defaulting to 1000 [ 450.259872][T22612] netlink: 'syz.7.12960': attribute type 1 has an invalid length. [ 450.300140][T22637] netlink: 'syz.0.12973': attribute type 1 has an invalid length. [ 450.333396][T22612] veth33: entered promiscuous mode [ 450.340625][T22612] bond15: (slave veth33): Enslaving as a backup interface with a down link [ 450.350100][T22664] __nla_validate_parse: 2 callbacks suppressed [ 450.350109][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12962'. [ 450.365407][T22664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12962'. [ 450.374433][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12962'. [ 450.384384][T22664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12962'. [ 450.393417][T22664] netlink: 'syz.6.12962': attribute type 6 has an invalid length. [ 450.431195][T22680] lo speed is unknown, defaulting to 1000 [ 450.438468][T22662] lo speed is unknown, defaulting to 1000 [ 450.447447][T22715] veth25: entered promiscuous mode [ 450.454519][T22715] bond12: (slave veth25): Enslaving as a backup interface with a down link [ 450.478195][T22637] veth41: entered promiscuous mode [ 450.485853][T22637] bond20: (slave veth41): Enslaving as a backup interface with a down link [ 450.509888][T22680] lo speed is unknown, defaulting to 1000 [ 450.577963][T22662] lo speed is unknown, defaulting to 1000 [ 450.646611][T22827] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12970'. [ 450.701863][T22827] veth27: entered promiscuous mode [ 450.717900][T22827] bond13: (slave veth27): Enslaving as a backup interface with a down link [ 450.773195][T22901] lo speed is unknown, defaulting to 1000 [ 450.808049][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12978'. [ 450.817151][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12978'. [ 450.826326][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12978'. [ 450.842515][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12978'. [ 450.851873][T22901] lo speed is unknown, defaulting to 1000 [ 450.894827][T22966] lo speed is unknown, defaulting to 1000 [ 450.901879][T22968] veth29: entered promiscuous mode [ 450.909689][T22968] bond15: (slave veth29): Enslaving as a backup interface with a down link [ 451.006021][T22966] lo speed is unknown, defaulting to 1000 [ 451.093387][T23045] lo speed is unknown, defaulting to 1000 [ 451.146675][T23045] lo speed is unknown, defaulting to 1000 [ 451.151702][T23081] lo speed is unknown, defaulting to 1000 [ 451.225889][T23081] lo speed is unknown, defaulting to 1000 [ 451.237313][T23104] lo speed is unknown, defaulting to 1000 [ 451.331378][T23104] lo speed is unknown, defaulting to 1000 [ 451.368058][T23158] veth43: entered promiscuous mode [ 451.388150][T23158] bond22: (slave veth43): Enslaving as a backup interface with a down link [ 451.396863][T23116] lo speed is unknown, defaulting to 1000 [ 451.484452][T23116] lo speed is unknown, defaulting to 1000 [ 451.520071][T23249] lo speed is unknown, defaulting to 1000 [ 451.565123][T23276] ALSA: seq fatal error: cannot create timer (-19) [ 451.586151][T23249] lo speed is unknown, defaulting to 1000 [ 451.700151][T23308] lo speed is unknown, defaulting to 1000 [ 451.706282][T23306] lo speed is unknown, defaulting to 1000 [ 451.729718][T23308] lo speed is unknown, defaulting to 1000 [ 451.771746][T23306] lo speed is unknown, defaulting to 1000 [ 451.901641][T23359] veth35: entered promiscuous mode [ 451.910118][T23359] bond16: (slave veth35): Enslaving as a backup interface with a down link [ 451.935489][T23357] lo speed is unknown, defaulting to 1000 [ 451.955685][T23411] veth45: entered promiscuous mode [ 451.962616][T23411] bond20: (slave veth45): Enslaving as a backup interface with a down link [ 451.990238][T23446] lo speed is unknown, defaulting to 1000 [ 451.990568][T23462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13011'. [ 452.031741][T23357] lo speed is unknown, defaulting to 1000 [ 452.091648][T23446] lo speed is unknown, defaulting to 1000 [ 452.122082][T23473] lo speed is unknown, defaulting to 1000 [ 452.132185][T23475] veth45: entered promiscuous mode [ 452.138776][T23475] bond23: (slave veth45): Enslaving as a backup interface with a down link [ 452.211093][T23473] lo speed is unknown, defaulting to 1000 [ 452.272455][T23589] ALSA: seq fatal error: cannot create timer (-19) [ 452.378981][T23593] lo speed is unknown, defaulting to 1000 [ 452.395870][T23613] ALSA: seq fatal error: cannot create timer (-19) [ 452.405187][T23600] lo speed is unknown, defaulting to 1000 [ 452.441851][T23593] lo speed is unknown, defaulting to 1000 [ 452.509187][T23620] veth31: entered promiscuous mode [ 452.516116][T23620] bond16: (slave veth31): Enslaving as a backup interface with a down link [ 452.532565][T23658] veth23: entered promiscuous mode [ 452.542932][T23658] bond14: (slave veth23): Enslaving as a backup interface with a down link [ 452.554266][T23600] lo speed is unknown, defaulting to 1000 [ 452.602354][ T29] kauditd_printk_skb: 800 callbacks suppressed [ 452.602366][ T29] audit: type=1400 audit(1235.903:54131): avc: denied { create } for pid=23722 comm="syz.5.13026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 452.629011][T23723] veth47: entered promiscuous mode [ 452.635988][T23723] bond21: (slave veth47): Enslaving as a backup interface with a down link [ 452.703198][ T29] audit: type=1400 audit(1236.018:54132): avc: denied { create } for pid=23807 comm="syz.7.13027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 452.723792][ T29] audit: type=1400 audit(1236.018:54133): avc: denied { map_create } for pid=23807 comm="syz.7.13027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 452.742838][ T29] audit: type=1400 audit(1236.018:54134): avc: denied { prog_load } for pid=23807 comm="syz.7.13027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 452.761625][ T29] audit: type=1400 audit(1236.018:54135): avc: denied { create } for pid=23807 comm="syz.7.13027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 452.782012][ T29] audit: type=1400 audit(1236.018:54136): avc: denied { create } for pid=23807 comm="syz.7.13027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 452.807173][ T29] audit: type=1400 audit(1236.102:54137): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 452.830195][ T29] audit: type=1400 audit(1236.123:54138): avc: denied { create } for pid=23805 comm="syz.5.13028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 452.857514][ T29] audit: type=1400 audit(1236.176:54139): avc: denied { create } for pid=23802 comm="syz.2.13040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 452.877141][ T29] audit: type=1400 audit(1236.186:54140): avc: denied { create } for pid=23803 comm="syz.6.13039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 452.896869][T23804] veth25: entered promiscuous mode [ 452.903685][T23804] bond15: (slave veth25): Enslaving as a backup interface with a down link [ 452.933334][T23809] veth49: entered promiscuous mode [ 452.955158][T23821] veth33: entered promiscuous mode [ 452.962885][T23821] bond17: (slave veth33): Enslaving as a backup interface with a down link [ 452.993300][T23883] veth47: entered promiscuous mode [ 453.031020][T23979] lo speed is unknown, defaulting to 1000 [ 453.079164][T23979] lo speed is unknown, defaulting to 1000 [ 453.079348][T23993] lo speed is unknown, defaulting to 1000 [ 453.107466][T23995] lo speed is unknown, defaulting to 1000 [ 453.151973][T23993] lo speed is unknown, defaulting to 1000 [ 453.230752][T24043] lo speed is unknown, defaulting to 1000 [ 453.239930][T23995] lo speed is unknown, defaulting to 1000 [ 453.296416][T24043] lo speed is unknown, defaulting to 1000 [ 453.332849][T24051] lo speed is unknown, defaulting to 1000 [ 453.386141][T24041] lo speed is unknown, defaulting to 1000 [ 453.414100][T24102] ALSA: seq fatal error: cannot create timer (-19) [ 453.442858][T24051] lo speed is unknown, defaulting to 1000 [ 453.515116][T24041] lo speed is unknown, defaulting to 1000 [ 453.548964][T24107] lo speed is unknown, defaulting to 1000 [ 453.616037][T24149] lo speed is unknown, defaulting to 1000 [ 453.618341][T24107] lo speed is unknown, defaulting to 1000 [ 453.662056][T24165] veth27: entered promiscuous mode [ 453.669042][T24165] bond16: (slave veth27): Enslaving as a backup interface with a down link [ 453.724244][T24149] lo speed is unknown, defaulting to 1000 [ 453.751870][T24233] veth35: entered promiscuous mode [ 453.760814][T24233] bond18: (slave veth35): Enslaving as a backup interface with a down link [ 453.898579][T24313] veth49: entered promiscuous mode [ 454.026272][T24341] lo speed is unknown, defaulting to 1000 [ 454.046527][T24346] lo speed is unknown, defaulting to 1000 [ 454.071440][T24341] lo speed is unknown, defaulting to 1000 [ 454.112823][T24364] lo speed is unknown, defaulting to 1000 [ 454.123187][T24346] lo speed is unknown, defaulting to 1000 [ 454.180092][T24364] lo speed is unknown, defaulting to 1000 [ 454.301943][T24434] lo speed is unknown, defaulting to 1000 [ 454.329335][T24434] lo speed is unknown, defaulting to 1000 [ 454.428896][T24462] veth37: entered promiscuous mode [ 454.537002][T24488] lo speed is unknown, defaulting to 1000 [ 454.573752][T24488] lo speed is unknown, defaulting to 1000 [ 454.617226][T24506] lo speed is unknown, defaulting to 1000 [ 454.673479][T24506] lo speed is unknown, defaulting to 1000 [ 454.700497][T24520] lo speed is unknown, defaulting to 1000 [ 454.721678][T24541] ALSA: seq fatal error: cannot create timer (-19) [ 454.765022][T24520] lo speed is unknown, defaulting to 1000 [ 454.858383][T24575] lo speed is unknown, defaulting to 1000 [ 454.885432][T24575] lo speed is unknown, defaulting to 1000 [ 454.943685][T24603] validate_nla: 19 callbacks suppressed [ 454.943699][T24603] netlink: 'syz.0.13099': attribute type 1 has an invalid length. [ 455.019017][T24642] lo speed is unknown, defaulting to 1000 [ 455.050886][T24642] lo speed is unknown, defaulting to 1000 [ 455.122558][T24678] netlink: 'syz.0.13094': attribute type 1 has an invalid length. [ 455.143778][T24681] __nla_validate_parse: 12 callbacks suppressed [ 455.143794][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13095'. [ 455.159233][T24681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13095'. [ 455.168308][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13095'. [ 455.189006][T24678] veth49: entered promiscuous mode [ 455.196214][T24678] bond26: (slave veth49): Enslaving as a backup interface with a down link [ 455.247870][T24730] lo speed is unknown, defaulting to 1000 [ 455.281703][T24743] ALSA: seq fatal error: cannot create timer (-19) [ 455.291502][T24730] lo speed is unknown, defaulting to 1000 [ 455.314616][T24753] ALSA: seq fatal error: cannot create timer (-19) [ 455.503573][T24792] netlink: 'syz.6.13111': attribute type 1 has an invalid length. [ 455.517060][T24794] netlink: 'syz.0.13122': attribute type 1 has an invalid length. [ 455.542650][T24829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13112'. [ 455.551934][T24829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13112'. [ 455.560989][T24829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13112'. [ 455.602991][T24876] netlink: 'syz.7.13114': attribute type 1 has an invalid length. [ 455.611817][T24794] veth51: entered promiscuous mode [ 455.619472][T24794] bond27: (slave veth51): Enslaving as a backup interface with a down link [ 455.641273][T24792] veth37: entered promiscuous mode [ 455.648950][T24792] bond19: (slave veth37): Enslaving as an active interface with an up link [ 455.681132][T24933] netlink: 'syz.6.13117': attribute type 1 has an invalid length. [ 455.687668][T24896] lo speed is unknown, defaulting to 1000 [ 455.702472][T24876] veth37: entered promiscuous mode [ 455.709587][T24876] bond17: (slave veth37): Enslaving as a backup interface with a down link [ 455.729186][T24883] lo speed is unknown, defaulting to 1000 [ 455.753576][T24933] veth39: entered promiscuous mode [ 455.766446][T24999] netlink: 'syz.7.13118': attribute type 1 has an invalid length. [ 455.767649][T24933] bond20: (slave veth39): Enslaving as a backup interface with a down link [ 455.783160][T24896] lo speed is unknown, defaulting to 1000 [ 455.823695][T24999] veth39: entered promiscuous mode [ 455.830621][T24999] bond18: (slave veth39): Enslaving as a backup interface with a down link [ 455.849272][T24883] lo speed is unknown, defaulting to 1000 [ 455.866097][T25064] netlink: 'syz.5.13121': attribute type 1 has an invalid length. [ 455.917630][T25064] veth49: entered promiscuous mode [ 455.925707][T25064] bond22: (slave veth49): Enslaving as a backup interface with a down link [ 455.936288][T25042] lo speed is unknown, defaulting to 1000 [ 455.970938][T25139] netlink: 'syz.2.13123': attribute type 1 has an invalid length. [ 456.022566][T25042] lo speed is unknown, defaulting to 1000 [ 456.040667][T25138] lo speed is unknown, defaulting to 1000 [ 456.070150][T25150] lo speed is unknown, defaulting to 1000 [ 456.103306][T25138] lo speed is unknown, defaulting to 1000 [ 456.219034][T25181] lo speed is unknown, defaulting to 1000 [ 456.263117][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13128'. [ 456.272211][T25198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13128'. [ 456.281278][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13128'. [ 456.378264][T25150] lo speed is unknown, defaulting to 1000 [ 456.391488][T25202] lo speed is unknown, defaulting to 1000 [ 456.401803][T25203] lo speed is unknown, defaulting to 1000 [ 456.414910][T25181] lo speed is unknown, defaulting to 1000 [ 456.541849][T25202] lo speed is unknown, defaulting to 1000 [ 456.553095][T25203] lo speed is unknown, defaulting to 1000 [ 456.597444][T25266] ALSA: seq fatal error: cannot create timer (-19) [ 456.745708][T25290] lo speed is unknown, defaulting to 1000 [ 456.783380][T25290] lo speed is unknown, defaulting to 1000 [ 456.795903][T25300] netlink: 'syz.6.13134': attribute type 1 has an invalid length. [ 456.877588][T25307] lo speed is unknown, defaulting to 1000 [ 456.920750][T25300] veth41: entered promiscuous mode [ 456.935844][T25300] bond21: (slave veth41): Enslaving as a backup interface with a down link [ 456.959605][T25307] lo speed is unknown, defaulting to 1000 [ 456.972912][T25358] lo speed is unknown, defaulting to 1000 [ 457.001546][T25391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13139'. [ 457.039111][T25391] veth51: entered promiscuous mode [ 457.048733][T25358] lo speed is unknown, defaulting to 1000 [ 457.056520][T25381] lo speed is unknown, defaulting to 1000 [ 457.162417][T25381] lo speed is unknown, defaulting to 1000 [ 457.237509][T25446] lo speed is unknown, defaulting to 1000 [ 457.264308][T25462] veth29: entered promiscuous mode [ 457.277546][T25462] bond17: (slave veth29): Enslaving as a backup interface with a down link [ 457.330854][T25446] lo speed is unknown, defaulting to 1000 [ 457.336612][T25511] lo speed is unknown, defaulting to 1000 [ 457.349031][T25525] lo speed is unknown, defaulting to 1000 [ 457.383707][T25533] lo speed is unknown, defaulting to 1000 [ 457.392911][T25511] lo speed is unknown, defaulting to 1000 [ 457.405860][ T29] kauditd_printk_skb: 930 callbacks suppressed [ 457.405942][ T29] audit: type=1400 audit(1240.953:55071): avc: denied { prog_load } for pid=25532 comm="syz.2.13149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.445414][ T29] audit: type=1400 audit(1240.953:55072): avc: denied { prog_load } for pid=25532 comm="syz.2.13149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.464232][ T29] audit: type=1400 audit(1240.953:55073): avc: denied { prog_load } for pid=25532 comm="syz.2.13149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.483125][ T29] audit: type=1400 audit(1240.953:55074): avc: denied { map_create } for pid=25532 comm="syz.2.13149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.491644][T25525] lo speed is unknown, defaulting to 1000 [ 457.597407][ T29] audit: type=1400 audit(1241.142:55075): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 457.620495][ T29] audit: type=1400 audit(1241.142:55076): avc: denied { open } for pid=25603 comm="syz.5.13150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 457.639552][ T29] audit: type=1400 audit(1241.142:55077): avc: denied { map_create } for pid=25603 comm="syz.5.13150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.658572][ T29] audit: type=1400 audit(1241.142:55078): avc: denied { prog_load } for pid=25603 comm="syz.5.13150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.677395][ T29] audit: type=1400 audit(1241.142:55079): avc: denied { prog_load } for pid=25603 comm="syz.5.13150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.696234][ T29] audit: type=1400 audit(1241.142:55080): avc: denied { map_create } for pid=25603 comm="syz.5.13150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 457.716483][T25533] lo speed is unknown, defaulting to 1000 [ 457.752558][T25612] veth41: entered promiscuous mode [ 457.759005][T25612] bond19: (slave veth41): Enslaving as a backup interface with a down link [ 457.781652][T25613] veth53: entered promiscuous mode [ 457.789566][T25613] bond28: (slave veth53): Enslaving as a backup interface with a down link [ 457.826295][T25605] lo speed is unknown, defaulting to 1000 [ 457.843243][T25710] lo speed is unknown, defaulting to 1000 [ 457.886980][T25710] lo speed is unknown, defaulting to 1000 [ 457.901785][T25731] veth43: entered promiscuous mode [ 457.908698][T25731] bond20: (slave veth43): Enslaving as a backup interface with a down link [ 457.996188][T25605] lo speed is unknown, defaulting to 1000 [ 458.019754][T25792] lo speed is unknown, defaulting to 1000 [ 458.073938][T25792] lo speed is unknown, defaulting to 1000 [ 458.154636][T25857] ALSA: seq fatal error: cannot create timer (-19) [ 458.203276][T25861] lo speed is unknown, defaulting to 1000 [ 458.209785][T25859] lo speed is unknown, defaulting to 1000 [ 458.241059][T25861] lo speed is unknown, defaulting to 1000 [ 458.301900][T25859] lo speed is unknown, defaulting to 1000 [ 458.430959][T25916] lo speed is unknown, defaulting to 1000 [ 458.467502][T25916] lo speed is unknown, defaulting to 1000 [ 458.579599][T25951] lo speed is unknown, defaulting to 1000 [ 458.588757][T25956] veth51: entered promiscuous mode [ 458.595442][T25956] bond23: (slave veth51): Enslaving as a backup interface with a down link [ 458.642727][T25951] lo speed is unknown, defaulting to 1000 [ 458.653373][T26006] lo speed is unknown, defaulting to 1000 [ 458.716198][T26030] veth55: entered promiscuous mode [ 458.731250][T26030] bond29: (slave veth55): Enslaving as a backup interface with a down link [ 458.741280][T26006] lo speed is unknown, defaulting to 1000 [ 458.913502][T26112] veth53: entered promiscuous mode [ 458.920206][T26112] bond24: (slave veth53): Enslaving as a backup interface with a down link [ 459.197246][T26172] lo speed is unknown, defaulting to 1000 [ 459.224113][T26172] lo speed is unknown, defaulting to 1000 [ 459.307832][T26203] lo speed is unknown, defaulting to 1000 [ 459.341261][T26210] veth45: entered promiscuous mode [ 459.348098][T26210] bond21: (slave veth45): Enslaving as a backup interface with a down link [ 459.357049][T26203] lo speed is unknown, defaulting to 1000 [ 459.886478][T26306] validate_nla: 8 callbacks suppressed [ 459.886541][T26306] netlink: 'syz.7.13205': attribute type 1 has an invalid length. [ 459.918920][T26306] veth47: entered promiscuous mode [ 459.920586][T26348] __nla_validate_parse: 2 callbacks suppressed [ 459.920599][T26348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13207'. [ 459.925866][T26306] bond22: (slave veth47): Enslaving as a backup interface with a down link [ 459.984381][T26359] lo speed is unknown, defaulting to 1000 [ 460.019283][T26359] lo speed is unknown, defaulting to 1000 [ 460.099771][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 460.180317][T26397] lo speed is unknown, defaulting to 1000 [ 460.211542][T26397] lo speed is unknown, defaulting to 1000 [ 460.374354][T26434] lo speed is unknown, defaulting to 1000 [ 460.409359][T26434] lo speed is unknown, defaulting to 1000 [ 460.484396][T26461] netlink: 'syz.5.13223': attribute type 1 has an invalid length. [ 460.502765][T26460] lo speed is unknown, defaulting to 1000 [ 460.514092][T26461] veth55: entered promiscuous mode [ 460.520926][T26461] bond25: (slave veth55): Enslaving as a backup interface with a down link [ 460.550340][T26512] netlink: 'syz.5.13224': attribute type 1 has an invalid length. [ 460.581007][T26460] lo speed is unknown, defaulting to 1000 [ 460.600133][T26512] veth57: entered promiscuous mode [ 460.607332][T26512] bond26: (slave veth57): Enslaving as a backup interface with a down link [ 460.623451][T26515] lo speed is unknown, defaulting to 1000 [ 460.661971][T26515] lo speed is unknown, defaulting to 1000 [ 460.722410][T26577] lo speed is unknown, defaulting to 1000 [ 460.771147][T26577] lo speed is unknown, defaulting to 1000 [ 460.777243][T26612] lo speed is unknown, defaulting to 1000 [ 460.864116][T26612] lo speed is unknown, defaulting to 1000 [ 460.874244][T26622] lo speed is unknown, defaulting to 1000 [ 460.936297][T26622] lo speed is unknown, defaulting to 1000 [ 460.946245][T26642] lo speed is unknown, defaulting to 1000 [ 461.014977][T26642] lo speed is unknown, defaulting to 1000 [ 461.102304][T26724] lo speed is unknown, defaulting to 1000 [ 461.184427][T26724] lo speed is unknown, defaulting to 1000 [ 461.192850][T26747] netlink: 'syz.0.13243': attribute type 1 has an invalid length. [ 461.215051][T26747] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13243'. [ 461.248820][T26745] lo speed is unknown, defaulting to 1000 [ 461.267544][T26747] veth57: entered promiscuous mode [ 461.275650][T26747] bond30: (slave veth57): Enslaving as a backup interface with a down link [ 461.284378][T26749] lo speed is unknown, defaulting to 1000 [ 461.340886][T26822] lo speed is unknown, defaulting to 1000 [ 461.346857][T26749] lo speed is unknown, defaulting to 1000 [ 461.353921][T26824] lo speed is unknown, defaulting to 1000 [ 461.374781][T26745] lo speed is unknown, defaulting to 1000 [ 461.442781][T26824] lo speed is unknown, defaulting to 1000 [ 461.478511][T26822] lo speed is unknown, defaulting to 1000 [ 461.515084][T26884] lo speed is unknown, defaulting to 1000 [ 461.570440][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13252'. [ 461.611474][T26917] veth59: entered promiscuous mode [ 461.620664][T26884] lo speed is unknown, defaulting to 1000 [ 461.686799][T26954] lo speed is unknown, defaulting to 1000 [ 461.729490][T26954] lo speed is unknown, defaulting to 1000 [ 461.761804][T26966] lo speed is unknown, defaulting to 1000 [ 461.808342][T26997] netlink: 'syz.7.13258': attribute type 1 has an invalid length. [ 461.861453][T26966] lo speed is unknown, defaulting to 1000 [ 461.866587][T26997] netlink: 52 bytes leftover after parsing attributes in process `syz.7.13258'. [ 461.884103][T26999] lo speed is unknown, defaulting to 1000 [ 461.896172][T26997] veth49: entered promiscuous mode [ 461.902918][T26997] bond23: (slave veth49): Enslaving as a backup interface with a down link [ 461.992708][T26999] lo speed is unknown, defaulting to 1000 [ 462.003764][T27069] lo speed is unknown, defaulting to 1000 [ 462.047629][T27069] lo speed is unknown, defaulting to 1000 [ 462.074245][T27103] netlink: 'syz.2.13263': attribute type 1 has an invalid length. [ 462.084065][T27102] netlink: 'syz.0.13273': attribute type 1 has an invalid length. [ 462.131577][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13263'. [ 462.140583][T27103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13263'. [ 462.154878][T27102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13273'. [ 462.177166][T27102] veth59: entered promiscuous mode [ 462.183156][ T29] kauditd_printk_skb: 1340 callbacks suppressed [ 462.183169][ T29] audit: type=1400 audit(1245.960:56421): avc: denied { create } for pid=27094 comm="syz.2.13263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 462.184663][T27102] bond31: (slave veth59): Enslaving as a backup interface with a down link [ 462.236154][ T29] audit: type=1400 audit(1246.023:56422): avc: denied { prog_load } for pid=27202 comm="syz.2.13265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.266892][ T29] audit: type=1400 audit(1246.023:56423): avc: denied { prog_load } for pid=27202 comm="syz.2.13265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.285766][ T29] audit: type=1400 audit(1246.023:56424): avc: denied { create } for pid=27202 comm="syz.2.13265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 462.306239][ T29] audit: type=1400 audit(1246.023:56425): avc: denied { prog_load } for pid=27202 comm="syz.2.13265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.325052][ T29] audit: type=1400 audit(1246.023:56426): avc: denied { prog_load } for pid=27202 comm="syz.2.13265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.344155][ T29] audit: type=1400 audit(1246.023:56427): avc: denied { kexec_image_load } for pid=27202 comm="syz.2.13265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 462.364678][ T29] audit: type=1400 audit(1246.086:56428): avc: denied { map_create } for pid=27204 comm="syz.2.13266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.383605][ T29] audit: type=1400 audit(1246.086:56429): avc: denied { prog_load } for pid=27204 comm="syz.2.13266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.392429][T27218] netlink: 'syz.0.13279': attribute type 1 has an invalid length. [ 462.402374][ T29] audit: type=1326 audit(1246.086:56430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.2.13266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31399ebe9 code=0x7ffc0000 [ 462.452325][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13279'. [ 462.461437][T27218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13279'. [ 462.471282][T27257] lo speed is unknown, defaulting to 1000 [ 462.505512][T27257] lo speed is unknown, defaulting to 1000 [ 462.515076][T27270] netlink: 'syz.0.13272': attribute type 1 has an invalid length. [ 462.563078][T27270] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13272'. [ 462.611606][T27340] netlink: 'syz.2.13286': attribute type 1 has an invalid length. [ 462.619890][T27270] veth61: entered promiscuous mode [ 462.631443][T27270] bond33: (slave veth61): Enslaving as a backup interface with a down link [ 462.713735][T27383] veth31: entered promiscuous mode [ 462.771290][T27404] lo speed is unknown, defaulting to 1000 [ 462.835335][T27444] lo speed is unknown, defaulting to 1000 [ 462.901316][T27444] lo speed is unknown, defaulting to 1000 [ 462.914181][T27404] lo speed is unknown, defaulting to 1000 [ 462.948500][T19158] ================================================================== [ 462.956579][T19158] BUG: KCSAN: data-race in copy_process / free_pid [ 462.963066][T19158] [ 462.965369][T19158] read-write to 0xffffffff8685fc48 of 4 bytes by task 27501 on cpu 0: [ 462.973496][T19158] free_pid+0x77/0x180 [ 462.977548][T19158] free_pids+0x7a/0xb0 [ 462.981592][T19158] release_task+0x9a9/0xb60 [ 462.986081][T19158] do_exit+0xd81/0x15c0 [ 462.990217][T19158] call_usermodehelper_exec_async+0x247/0x250 [ 462.996266][T19158] ret_from_fork+0xda/0x150 [ 463.000750][T19158] ret_from_fork_asm+0x1a/0x30 [ 463.005499][T19158] [ 463.007887][T19158] read to 0xffffffff8685fc48 of 4 bytes by task 19158 on cpu 1: [ 463.015494][T19158] copy_process+0x14a6/0x2000 [ 463.020150][T19158] kernel_clone+0x16c/0x5c0 [ 463.024633][T19158] user_mode_thread+0x7d/0xb0 [ 463.029293][T19158] call_usermodehelper_exec_work+0x41/0x160 [ 463.035179][T19158] process_scheduled_works+0x4ce/0x9d0 [ 463.040621][T19158] worker_thread+0x582/0x770 [ 463.045195][T19158] kthread+0x486/0x510 [ 463.049243][T19158] ret_from_fork+0xda/0x150 [ 463.053723][T19158] ret_from_fork_asm+0x1a/0x30 [ 463.058471][T19158] [ 463.060793][T19158] value changed: 0x8000018a -> 0x80000189 [ 463.066482][T19158] [ 463.068784][T19158] Reported by Kernel Concurrency Sanitizer on: [ 463.074915][T19158] CPU: 1 UID: 0 PID: 19158 Comm: kworker/u8:64 Not tainted syzkaller #0 PREEMPT(voluntary) [ 463.084956][T19158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.094990][T19158] Workqueue: events_unbound call_usermodehelper_exec_work [ 463.102088][T19158] ================================================================== [ 463.134192][T27492] lo speed is unknown, defaulting to 1000 [ 463.175717][T27492] lo speed is unknown, defaulting to 1000