last executing test programs: 985.296397ms ago: executing program 2 (id=185): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000120)=[{0x80}, {0x15, 0x0, 0x1, 0x54}, {0x6}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000120)=[{0x80}, {0x15, 0x0, 0x1, 0x54}, {0x6}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='123456789012345678901234567890123456789012345678901234', 0x36}], 0x1}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='a', 0x1}], 0x1}], 0x14, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000a00)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='b', 0x1}], 0x1}], 0x14, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001500)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='c', 0x1}], 0x1}], 0x14, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002000)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}, {&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='d', 0x1}], 0x1}], 0x14, 0x0) 917.86691ms ago: executing program 2 (id=188): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000120)=0x2, 0x4) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000140)={{0xfffffffffffffffc, 0x1000}, 0x0}, 0x20) 917.754803ms ago: executing program 2 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0x8, 0x3, "00050000"}]}}}]}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x1f90, @loopback}, 0x10) 839.476225ms ago: executing program 2 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 839.135663ms ago: executing program 2 (id=191): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x3, {@llc={0x2, 0x2, 's'}}}}}, 0x0) getpeername$llc(r0, &(0x7f0000000300), &(0x7f0000000400)=0x10) 719.182602ms ago: executing program 0 (id=199): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) unshare(0x40000000) 519.546525ms ago: executing program 0 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) 459.150982ms ago: executing program 0 (id=207): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2, 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 458.700068ms ago: executing program 0 (id=210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/256, &(0x7f0000000200)=0x108) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000300)=""/32, &(0x7f0000000200)=0x100) 399.055099ms ago: executing program 0 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 398.585741ms ago: executing program 0 (id=213): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1f}, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x1f}, 0x8) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200), 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='hello world', 0xb}], 0x1}, 0x0) 339.814444ms ago: executing program 3 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/sys/net/ipv4/tcp_migrate_req\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0x10) shutdown(r1, 0x2) listen(r1, 0x10) 326.57006ms ago: executing program 1 (id=218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty}, 0x2, @in=@empty}}, 0xe8) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 250.276599ms ago: executing program 3 (id=219): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000)='fi', 0x2) 250.124593ms ago: executing program 1 (id=220): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'tunl0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'gre0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'gretap0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'ip_vti0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'ip6_vti0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'sit0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'ip6tnl0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'ip6gre0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'ip6gretap0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'nr0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'rose0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'erspan0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'vlan0\x00'}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, 0x0, 'vcan0\x00'}) 250.002153ms ago: executing program 3 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1 1\n', 0x4) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r2 = io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000240)={0x1, 0x0, 0x10, 0x0, &(0x7f00000002c0)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 249.785972ms ago: executing program 1 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000010), 0xc, &(0x7f0000000020)={&(0x7f0000000030)=@newqdisc={0x30, 0x24, 0x5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 179.429452ms ago: executing program 1 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 179.272728ms ago: executing program 3 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}, {0x0, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x94}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 178.940798ms ago: executing program 1 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x3, 0x6, 0x3fe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0x64}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x4, 0x3}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) write(r0, &(0x7f0000000800)="00112233445566778899aabb8100000108004500001c0000000040113cce01010101010101020001000200080000", 0x2e) 70.017374ms ago: executing program 1 (id=226): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000e00), 0x100}], 0x1}, 0x40) 370.609µs ago: executing program 3 (id=227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) 213.371µs ago: executing program 3 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setstatus(r1, 0x4, 0x800) bind(r1, &(0x7f0000000180)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000001c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r2, &(0x7f0000000200)=@in={0x2, 0x1122, @loopback}, 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a00004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001400"/76}}}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 2 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='lo\x00'}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='lo\x00'}) syz_emit_ethernet(0x2f, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @private=0xa010101}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 37.758294][ T42] audit: type=1400 audit(1785767865.062:120): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:58138' (ED25519) to the list of known hosts. [ 40.958871][ T5705] cgroup: Unknown subsys name 'net' [ 41.200126][ T5705] cgroup: Unknown subsys name 'cpuset' [ 41.204195][ T5705] cgroup: Unknown subsys name 'rlimit' [ 41.404772][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.163266][ T5705] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.491899][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 45.491911][ T42] audit: type=1400 audit(1785767872.792:158): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.675742][ T42] audit: type=1400 audit(1785767872.972:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.684265][ T42] audit: type=1400 audit(1785767872.972:160): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.693916][ T42] audit: type=1400 audit(1785767872.972:161): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.703673][ T42] audit: type=1400 audit(1785767872.982:162): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[1479]" dev="sockfs" ino=1479 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.711596][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.715506][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.716600][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.720283][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.720568][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.721365][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.721813][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.723477][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.724364][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.729497][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.729610][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.729899][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.730507][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.731977][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.732429][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.732900][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.733621][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.733851][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.736068][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.740245][ T42] audit: type=1400 audit(1785767873.042:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.747433][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.750227][ T42] audit: type=1400 audit(1785767873.042:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.792738][ T42] audit: type=1400 audit(1785767873.042:165): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.800296][ T42] audit: type=1400 audit(1785767873.052:166): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.807081][ T42] audit: type=1400 audit(1785767873.082:167): avc: denied { sys_module } for pid=5738 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.285242][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.287517][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.290066][ T5738] bridge_slave_0: entered allmulticast mode [ 46.292993][ T5738] bridge_slave_0: entered promiscuous mode [ 46.312470][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.314789][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.316806][ T5750] bridge_slave_0: entered allmulticast mode [ 46.319942][ T5750] bridge_slave_0: entered promiscuous mode [ 46.323043][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.325116][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.327588][ T5750] bridge_slave_1: entered allmulticast mode [ 46.330282][ T5750] bridge_slave_1: entered promiscuous mode [ 46.332723][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.334741][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.338027][ T5738] bridge_slave_1: entered allmulticast mode [ 46.340560][ T5738] bridge_slave_1: entered promiscuous mode [ 46.376743][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.379025][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.381182][ T5737] bridge_slave_0: entered allmulticast mode [ 46.384237][ T5737] bridge_slave_0: entered promiscuous mode [ 46.400771][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.412105][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.414151][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.416367][ T5737] bridge_slave_1: entered allmulticast mode [ 46.418922][ T5737] bridge_slave_1: entered promiscuous mode [ 46.430210][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.434271][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.464762][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.488435][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.505003][ T5750] team0: Port device team_slave_0 added [ 46.509872][ T5750] team0: Port device team_slave_1 added [ 46.512256][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.515786][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.518878][ T5741] bridge_slave_0: entered allmulticast mode [ 46.522708][ T5741] bridge_slave_0: entered promiscuous mode [ 46.530336][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.557459][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.559589][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.561863][ T5741] bridge_slave_1: entered allmulticast mode [ 46.564469][ T5741] bridge_slave_1: entered promiscuous mode [ 46.567919][ T5738] team0: Port device team_slave_0 added [ 46.571044][ T5738] team0: Port device team_slave_1 added [ 46.582461][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.584740][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.592835][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.618472][ T5737] team0: Port device team_slave_0 added [ 46.621684][ T5737] team0: Port device team_slave_1 added [ 46.623756][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.625917][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.633553][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.643415][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.645614][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.653696][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.666625][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.668931][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.676496][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.685384][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.697725][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.706110][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.708917][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.718823][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.732640][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.735154][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.745345][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.788876][ T5741] team0: Port device team_slave_0 added [ 46.794321][ T5750] hsr_slave_0: entered promiscuous mode [ 46.796688][ T5750] hsr_slave_1: entered promiscuous mode [ 46.802006][ T5738] hsr_slave_0: entered promiscuous mode [ 46.805257][ T5738] hsr_slave_1: entered promiscuous mode [ 46.807986][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 46.810345][ T5738] Cannot create hsr debugfs directory [ 46.825724][ T5741] team0: Port device team_slave_1 added [ 46.862325][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.864578][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.872608][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.887642][ T5737] hsr_slave_0: entered promiscuous mode [ 46.890722][ T5737] hsr_slave_1: entered promiscuous mode [ 46.893022][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 46.895295][ T5737] Cannot create hsr debugfs directory [ 46.902479][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.904662][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.912644][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.010195][ T5741] hsr_slave_0: entered promiscuous mode [ 47.013178][ T5741] hsr_slave_1: entered promiscuous mode [ 47.015984][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.018502][ T5741] Cannot create hsr debugfs directory [ 47.242636][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.250029][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.252816][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.256937][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.260957][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.265163][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.275530][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.279947][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.328408][ T5750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.332981][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.335670][ T5750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.339726][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.345272][ T5750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.349594][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.352366][ T5750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.356166][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.398717][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.402968][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.405636][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.410294][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.414113][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.418409][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.421110][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.425048][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.483386][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.487399][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.490250][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.493911][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.500241][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.504399][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.507931][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.511516][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.530607][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.562740][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.571863][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.581577][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.584144][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.602077][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.604395][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.612983][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.625632][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.628213][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.636821][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.639175][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.652379][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.678051][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.692752][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.697121][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.699470][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.711554][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.714127][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.733382][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.745167][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.747510][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.754933][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.757356][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.788091][ T5097] Bluetooth: hci1: command tx timeout [ 47.790934][ T5740] Bluetooth: hci3: command tx timeout [ 47.791124][ T5748] Bluetooth: hci2: command tx timeout [ 47.791259][ T5097] Bluetooth: hci0: command tx timeout [ 47.933845][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.946598][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.982044][ T5738] veth0_vlan: entered promiscuous mode [ 47.992063][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.002261][ T5738] veth1_vlan: entered promiscuous mode [ 48.008561][ T5750] veth0_vlan: entered promiscuous mode [ 48.024403][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.030599][ T5750] veth1_vlan: entered promiscuous mode [ 48.049826][ T5738] veth0_macvtap: entered promiscuous mode [ 48.058986][ T5738] veth1_macvtap: entered promiscuous mode [ 48.063373][ T5741] veth0_vlan: entered promiscuous mode [ 48.073797][ T5741] veth1_vlan: entered promiscuous mode [ 48.090083][ T5750] veth0_macvtap: entered promiscuous mode [ 48.096304][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.103831][ T5737] veth0_vlan: entered promiscuous mode [ 48.110788][ T5750] veth1_macvtap: entered promiscuous mode [ 48.116613][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.129788][ T5737] veth1_vlan: entered promiscuous mode [ 48.151929][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.155102][ T5741] veth0_macvtap: entered promiscuous mode [ 48.158119][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.168960][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.172782][ T5741] veth1_macvtap: entered promiscuous mode [ 48.193811][ T5737] veth0_macvtap: entered promiscuous mode [ 48.207089][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.226712][ T5737] veth1_macvtap: entered promiscuous mode [ 48.231127][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.239602][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.242736][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.274326][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.274379][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.279103][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.290600][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.308866][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.312251][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.344879][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.353367][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.358841][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.400247][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.403601][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.423845][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.428452][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.447966][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.448116][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.453914][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.488055][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.489886][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.490971][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.493662][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.527350][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.530533][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.549568][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.557008][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.577380][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.584212][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.593122][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.597744][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.621121][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.624058][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.626680][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.630407][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.648109][ T5904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.658524][ T5903] syzkaller0: entered promiscuous mode [ 48.660332][ T5903] syzkaller0: entered allmulticast mode [ 48.696882][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.730027][ T5913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 48.868144][ T5917] svc: failed to register lockdv1 RPC service (errno 111). [ 48.871195][ T5917] lockd_up: makesock failed, error=-111 [ 49.313040][ T5917] svc: failed to register nfsdv3 RPC service (errno 111). [ 49.317968][ T5917] svc: failed to register nfsaclv3 RPC service (errno 111). [ 49.321159][ T5917] failed to unregister tcp with rpcbind [ 49.324687][ T5917] svc: failed to register nfsdv3 RPC service (errno 97). [ 49.327728][ T5917] svc: failed to register nfsaclv3 RPC service (errno 97). [ 49.330775][ T5917] failed to unregister tcp with rpcbind [ 49.346397][ T5928] svc: failed to register lockdv1 RPC service (errno 111). [ 49.644378][ T5928] svc: failed to register nfsdv3 RPC service (errno 111). [ 49.648326][ T5928] svc: failed to register nfsaclv3 RPC service (errno 111). [ 49.650919][ T5928] failed to unregister tcp with rpcbind [ 49.653066][ T5928] svc: failed to register nfsdv3 RPC service (errno 97). [ 49.655372][ T5928] svc: failed to register nfsaclv3 RPC service (errno 97). [ 49.658401][ T5928] failed to unregister tcp with rpcbind [ 49.714601][ T5936] NFSD: Failed to start, no listeners configured. [ 49.773410][ T5944] Zero length message leads to an empty skb [ 49.868719][ T5748] Bluetooth: hci0: command tx timeout [ 49.868935][ T64] Bluetooth: hci2: command tx timeout [ 49.869644][ T5740] Bluetooth: hci1: command tx timeout [ 49.878041][ T64] Bluetooth: hci3: command tx timeout [ 50.000024][ T5972] netlink: 84 bytes leftover after parsing attributes in process `syz.3.34'. [ 50.023885][ T5972] netlink: 84 bytes leftover after parsing attributes in process `syz.3.34'. [ 50.035185][ T5971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.35'. [ 50.430139][ T5816] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.603982][ T5816] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 50.607045][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.610074][ T5816] usb 8-1: Product: syz [ 50.611716][ T5816] usb 8-1: Manufacturer: syz [ 50.613443][ T5816] usb 8-1: SerialNumber: syz [ 50.868799][ T42] kauditd_printk_skb: 59 callbacks suppressed [ 50.868812][ T42] audit: type=1400 audit(1785767878.172:227): avc: denied { bind } for pid=6000 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.953262][ T42] audit: type=1400 audit(1785767878.252:228): avc: denied { create } for pid=6009 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.959547][ T42] audit: type=1400 audit(1785767878.252:229): avc: denied { ioctl } for pid=6009 comm="syz.0.49" path="socket:[11423]" dev="sockfs" ino=11423 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.987155][ T42] audit: type=1400 audit(1785767878.282:230): avc: denied { write } for pid=6013 comm="syz.0.51" laddr=127.0.0.1 lport=20001 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.043098][ T6021] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 1, id = 0 [ 51.049863][ T5637] IPVS: starting estimator thread 0... [ 51.136191][ T42] audit: type=1400 audit(1785767878.432:231): avc: denied { create } for pid=6027 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.137423][ T6022] IPVS: using max 44 ests per chain, 105600 per kthread [ 51.142432][ T42] audit: type=1400 audit(1785767878.442:232): avc: denied { bind } for pid=6027 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.151268][ T42] audit: type=1400 audit(1785767878.442:233): avc: denied { listen } for pid=6027 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.157057][ T42] audit: type=1400 audit(1785767878.442:234): avc: denied { connect } for pid=6027 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.164139][ T42] audit: type=1400 audit(1785767878.442:235): avc: denied { map_create } for pid=6027 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.178343][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.181334][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 51.184567][ T42] audit: type=1400 audit(1785767878.482:236): avc: denied { setopt } for pid=6029 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.335491][ T5816] speedtch 8-1:1.0: speedtch_bind: data interface not found! [ 51.338150][ T5816] speedtch 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 51.348002][ T5816] usb 8-1: USB disconnect, device number 2 [ 51.381967][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 51.385019][ T6042] netlink: 332 bytes leftover after parsing attributes in process `syz.0.63'. [ 51.678080][ T6065] NFSD: Failed to start, no listeners configured. [ 51.947426][ T64] Bluetooth: hci0: command tx timeout [ 51.947454][ T5748] Bluetooth: hci1: command tx timeout [ 51.957381][ T5748] Bluetooth: hci3: command tx timeout [ 51.957402][ T64] Bluetooth: hci2: command tx timeout [ 51.986786][ T6086] ovs-system: entered promiscuous mode [ 51.990636][ T6086] openvswitch: netlink: Flow actions attr not present in new flow. [ 52.147350][ T5789] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.103207][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.110540][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.193704][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6156 comm=syz.2.104 [ 53.198043][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6156 comm=syz.2.104 [ 53.201921][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6156 comm=syz.2.104 [ 53.379534][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.384759][ T6181] netlink: 'syz.2.116': attribute type 5 has an invalid length. [ 53.808088][ T6209] hsr_slave_0: left promiscuous mode [ 53.810533][ T6209] hsr_slave_1: left promiscuous mode [ 53.868644][ T6210] bond0: entered promiscuous mode [ 53.870717][ T6210] bond_slave_0: entered promiscuous mode [ 53.873191][ T6210] bond_slave_1: entered promiscuous mode [ 53.877105][ T6210] gretap0: entered promiscuous mode [ 53.880882][ T6210] dummy0: entered promiscuous mode [ 53.887736][ T1359] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.924302][ T6145] ceph: No mds server is up or the cluster is laggy [ 54.027396][ T64] Bluetooth: hci2: command tx timeout [ 54.027530][ T5748] Bluetooth: hci0: command tx timeout [ 54.028171][ T5740] Bluetooth: hci3: command tx timeout [ 54.028201][ T5740] Bluetooth: hci1: command tx timeout [ 55.075198][ T6245] infiniband syz0: set active [ 55.077774][ T6245] infiniband syz0: added veth0 [ 55.091678][ T6245] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 55.104510][ T6245] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 55.110788][ T6245] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 55.149871][ T6245] RDS/IB: syz0: added [ 55.152039][ T6245] smc: adding ib device syz0 with port count 1 [ 55.155285][ T6245] smc: ib device syz0 port 1 has no pnetid [ 55.280194][ T6258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6258 comm=syz.3.147 [ 55.306761][ T6260] __nla_validate_parse: 6 callbacks suppressed [ 55.306773][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 55.371025][ T6267] can0: slcan on ptm0. [ 55.494998][ T6266] can0 (unregistered): slcan off ptm0. [ 55.557379][ T1359] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.708611][ T1359] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 55.710941][ T1359] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 55.715386][ T1359] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 55.718220][ T1359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 55.720560][ T1359] usb 5-1: Product: syz [ 55.721809][ T1359] usb 5-1: Manufacturer: syz [ 55.869327][ T1359] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 56.121554][ T6304] netlink: 7 bytes leftover after parsing attributes in process `syz.2.161'. [ 56.124620][ T6304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 56.127407][ T6304] netlink: 7 bytes leftover after parsing attributes in process `syz.2.161'. [ 56.310937][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 56.310950][ T42] audit: type=1400 audit(1785767883.612:293): avc: denied { accept } for pid=6315 comm="syz.2.167" laddr=127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.446351][ T42] audit: type=1400 audit(1785767883.742:294): avc: denied { setopt } for pid=6324 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.494842][ T42] audit: type=1400 audit(1785767883.792:295): avc: denied { getopt } for pid=6326 comm="syz.3.172" laddr=127.0.0.1 lport=35557 faddr=127.0.0.1 fport=8000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.529250][ T42] audit: type=1400 audit(1785767883.832:296): avc: denied { create } for pid=6332 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.538133][ T42] audit: type=1400 audit(1785767883.832:297): avc: denied { bind } for pid=6332 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.544786][ T42] audit: type=1400 audit(1785767883.832:298): avc: denied { node_bind } for pid=6332 comm="syz.2.174" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.564925][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 56.705931][ T42] audit: type=1400 audit(1785767884.002:299): avc: denied { create } for pid=6353 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.714721][ T42] audit: type=1400 audit(1785767884.002:300): avc: denied { connect } for pid=6353 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.758167][ T42] audit: type=1400 audit(1785767884.062:301): avc: denied { write } for pid=6353 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.886383][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 56.890653][ T6366] netlink: 112 bytes leftover after parsing attributes in process `syz.1.187'. [ 57.132633][ T42] audit: type=1400 audit(1785767884.432:302): avc: denied { create } for pid=6391 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 57.265917][ T1359] usb 5-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 57.271914][ T1359] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 57.836233][ C0] ------------[ cut here ]------------ [ 57.839163][ C0] (skb->_skb_refdst & ~(1UL)) && !(skb->_skb_refdst & 1UL) [ 57.839173][ C0] WARNING: ./include/linux/skbuff.h:1170 at nf_flow_offload_ip_hook+0xf6c/0x2b60, CPU#0: syz.2.229/6460 [ 57.844445][ C0] Modules linked in: [ 57.845784][ C0] CPU: 0 UID: 0 PID: 6460 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) [ 57.848489][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.851405][ C0] RIP: 0010:nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 57.853264][ C0] Code: 89 ee e8 87 4b 14 f8 48 83 fd 01 76 20 e8 dc 50 14 f8 83 e5 01 31 ff 48 89 ee e8 6f 4b 14 f8 48 85 ed 75 09 e8 c5 50 14 f8 90 <0f> 0b 90 e8 bc 50 14 f8 e8 e7 73 f7 f7 31 ff 89 c5 89 c6 e8 1c 4b [ 57.858777][ C0] RSP: 0018:ffffc90000007798 EFLAGS: 00010246 [ 57.860572][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89f61151 [ 57.862834][ C0] RDX: ffff888033718000 RSI: ffffffff89f6115b RDI: ffff888033718000 [ 57.865104][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 57.867442][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888037cffe58 [ 57.869705][ C0] R13: ffff8880267b2900 R14: ffff8880568f31c0 R15: ffff8880267b2900 [ 57.871954][ C0] FS: 00007f4401bcf6c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 57.874510][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.876459][ C0] CR2: 000000110c2dd067 CR3: 000000005b057000 CR4: 0000000000352ef0 [ 57.878814][ C0] Call Trace: [ 57.879833][ C0] [ 57.880710][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 57.882229][ C0] ? __pfx_nf_flow_offload_ip_hook+0x10/0x10 [ 57.884003][ C0] ? __lock_acquire+0x49f/0x1a40 [ 57.885502][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 57.887360][ C0] ? lock_acquire+0x1b9/0x370 [ 57.888722][ C0] nf_hook_slow+0xbf/0x220 [ 57.890029][ C0] __netif_receive_skb_core.constprop.0+0x1689/0x3530 [ 57.891989][ C0] ? find_held_lock+0x2b/0x80 [ 57.893374][ C0] ? __pfx_ip_output+0x10/0x10 [ 57.894796][ C0] ? ip_forward_finish+0x1b4/0x320 [ 57.896302][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.898489][ C0] ? ip_forward+0xfa2/0x2690 [ 57.899872][ C0] ? __lock_acquire+0x49f/0x1a40 [ 57.901311][ C0] ? process_backlog+0x32a/0x1580 [ 57.902807][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 57.904484][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.906336][ C0] ? lock_acquire+0x1b9/0x370 [ 57.907775][ C0] ? process_backlog+0x32a/0x1580 [ 57.909247][ C0] ? process_backlog+0x32a/0x1580 [ 57.910728][ C0] __netif_receive_skb+0x1f/0x120 [ 57.912195][ C0] process_backlog+0x37a/0x1580 [ 57.913625][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 57.915203][ C0] net_rx_action+0xa40/0xf20 [ 57.916549][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 57.918148][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 57.919717][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 57.921325][ C0] ? sched_clock+0x38/0x60 [ 57.922682][ C0] ? sched_clock_cpu+0x6c/0x570 [ 57.924197][ C0] ? rcu_is_watching+0x12/0xc0 [ 57.925631][ C0] handle_softirqs+0x1ea/0x9b0 [ 57.927101][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 57.928766][ C0] ? irqtime_account_delta+0x9a/0x110 [ 57.930344][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 57.932061][ C0] do_softirq+0xac/0xe0 [ 57.933319][ C0] [ 57.934217][ C0] [ 57.935158][ C0] __local_bh_enable_ip+0xf8/0x120 [ 57.936696][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 57.938354][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 57.940144][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 57.941622][ C0] tun_get_user+0x1e31/0x3c20 [ 57.943093][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 57.944608][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 57.946262][ C0] ? find_held_lock+0x2b/0x80 [ 57.947744][ C0] ? tun_get+0x191/0x370 [ 57.949018][ C0] ? tun_get+0x191/0x370 [ 57.950320][ C0] tun_chr_write_iter+0xdc/0x200 [ 57.951779][ C0] vfs_write+0x6ac/0x1050 [ 57.953069][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.954744][ C0] ? __pfx_vfs_write+0x10/0x10 [ 57.956151][ C0] ? find_held_lock+0x2b/0x80 [ 57.957606][ C0] ksys_write+0x12a/0x250 [ 57.958920][ C0] ? __pfx_ksys_write+0x10/0x10 [ 57.960356][ C0] do_syscall_64+0x115/0x870 [ 57.961725][ C0] ? clear_bhb_loop+0x40/0x90 [ 57.963181][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.964939][ C0] RIP: 0033:0x7f4400d5e84e [ 57.966293][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.971838][ C0] RSP: 002b:00007f4401bcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.974260][ C0] RAX: ffffffffffffffda RBX: 00007f4401bcf6c0 RCX: 00007f4400d5e84e [ 57.976619][ C0] RDX: 000000000000002f RSI: 0000200000000300 RDI: 00000000000000c8 [ 57.979004][ C0] RBP: 00007f4400e3500c R08: 0000000000000000 R09: 0000000000000000 [ 57.981325][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.983653][ C0] R13: 00007f4401026038 R14: 00007f4401025fa0 R15: 00007ffd397fd868 [ 57.986026][ C0] [ 57.986961][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.989083][ C0] CPU: 0 UID: 0 PID: 6460 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) [ 57.991735][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.994699][ C0] Call Trace: [ 57.995736][ C0] [ 57.996597][ C0] dump_stack_lvl+0x100/0x190 [ 57.997996][ C0] vpanic+0x552/0x970 [ 57.999196][ C0] ? __pfx_vpanic+0x10/0x10 [ 58.000545][ C0] panic+0xd1/0xe0 [ 58.001661][ C0] ? __pfx_panic+0x10/0x10 [ 58.003042][ C0] ? check_panic_on_warn+0x1f/0x90 [ 58.004564][ C0] check_panic_on_warn.cold+0x19/0x34 [ 58.006167][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 58.007884][ C0] __warn.cold+0x191/0x318 [ 58.009212][ C0] __report_bug+0x30f/0x440 [ 58.010599][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 58.012296][ C0] ? __pfx___report_bug+0x10/0x10 [ 58.013802][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 58.015352][ C0] ? irqentry_exit+0x24d/0xa00 [ 58.016788][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 58.018507][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 58.020192][ C0] report_bug+0xb2/0x220 [ 58.021466][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 58.023184][ C0] handle_bug+0x16a/0x2a0 [ 58.024491][ C0] exc_invalid_op+0x17/0x50 [ 58.025837][ C0] asm_exc_invalid_op+0x1a/0x20 [ 58.027283][ C0] RIP: 0010:nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 58.029151][ C0] Code: 89 ee e8 87 4b 14 f8 48 83 fd 01 76 20 e8 dc 50 14 f8 83 e5 01 31 ff 48 89 ee e8 6f 4b 14 f8 48 85 ed 75 09 e8 c5 50 14 f8 90 <0f> 0b 90 e8 bc 50 14 f8 e8 e7 73 f7 f7 31 ff 89 c5 89 c6 e8 1c 4b [ 58.034813][ C0] RSP: 0018:ffffc90000007798 EFLAGS: 00010246 [ 58.036591][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89f61151 [ 58.038904][ C0] RDX: ffff888033718000 RSI: ffffffff89f6115b RDI: ffff888033718000 [ 58.041211][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 58.043497][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888037cffe58 [ 58.045797][ C0] R13: ffff8880267b2900 R14: ffff8880568f31c0 R15: ffff8880267b2900 [ 58.048099][ C0] ? nf_flow_offload_ip_hook+0xf61/0x2b60 [ 58.049775][ C0] ? nf_flow_offload_ip_hook+0xf6b/0x2b60 [ 58.051478][ C0] ? nf_flow_offload_ip_hook+0xf6b/0x2b60 [ 58.053199][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 58.054792][ C0] ? __pfx_nf_flow_offload_ip_hook+0x10/0x10 [ 58.056567][ C0] ? __lock_acquire+0x49f/0x1a40 [ 58.058017][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 58.059804][ C0] ? lock_acquire+0x1b9/0x370 [ 58.061195][ C0] nf_hook_slow+0xbf/0x220 [ 58.062542][ C0] __netif_receive_skb_core.constprop.0+0x1689/0x3530 [ 58.064580][ C0] ? find_held_lock+0x2b/0x80 [ 58.065963][ C0] ? __pfx_ip_output+0x10/0x10 [ 58.067391][ C0] ? ip_forward_finish+0x1b4/0x320 [ 58.068914][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 58.071071][ C0] ? ip_forward+0xfa2/0x2690 [ 58.072526][ C0] ? __lock_acquire+0x49f/0x1a40 [ 58.074091][ C0] ? process_backlog+0x32a/0x1580 [ 58.075631][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 58.077426][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 58.079384][ C0] ? lock_acquire+0x1b9/0x370 [ 58.080844][ C0] ? process_backlog+0x32a/0x1580 [ 58.082431][ C0] ? process_backlog+0x32a/0x1580 [ 58.084047][ C0] __netif_receive_skb+0x1f/0x120 [ 58.085613][ C0] process_backlog+0x37a/0x1580 [ 58.087134][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 58.088786][ C0] net_rx_action+0xa40/0xf20 [ 58.090195][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 58.091784][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 58.093358][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 58.094937][ C0] ? sched_clock+0x38/0x60 [ 58.096303][ C0] ? sched_clock_cpu+0x6c/0x570 [ 58.097794][ C0] ? rcu_is_watching+0x12/0xc0 [ 58.099246][ C0] handle_softirqs+0x1ea/0x9b0 [ 58.100702][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 58.102260][ C0] ? irqtime_account_delta+0x9a/0x110 [ 58.103853][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 58.105482][ C0] do_softirq+0xac/0xe0 [ 58.106750][ C0] [ 58.107658][ C0] [ 58.108565][ C0] __local_bh_enable_ip+0xf8/0x120 [ 58.110086][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 58.111642][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 58.113378][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 58.114817][ C0] tun_get_user+0x1e31/0x3c20 [ 58.116243][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 58.117766][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 58.119414][ C0] ? find_held_lock+0x2b/0x80 [ 58.120803][ C0] ? tun_get+0x191/0x370 [ 58.122051][ C0] ? tun_get+0x191/0x370 [ 58.123348][ C0] tun_chr_write_iter+0xdc/0x200 [ 58.124800][ C0] vfs_write+0x6ac/0x1050 [ 58.126107][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.127734][ C0] ? __pfx_vfs_write+0x10/0x10 [ 58.129141][ C0] ? find_held_lock+0x2b/0x80 [ 58.130541][ C0] ksys_write+0x12a/0x250 [ 58.131869][ C0] ? __pfx_ksys_write+0x10/0x10 [ 58.133340][ C0] do_syscall_64+0x115/0x870 [ 58.134720][ C0] ? clear_bhb_loop+0x40/0x90 [ 58.136124][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.137883][ C0] RIP: 0033:0x7f4400d5e84e [ 58.139193][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.144676][ C0] RSP: 002b:00007f4401bcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.147056][ C0] RAX: ffffffffffffffda RBX: 00007f4401bcf6c0 RCX: 00007f4400d5e84e [ 58.149326][ C0] RDX: 000000000000002f RSI: 0000200000000300 RDI: 00000000000000c8 [ 58.151633][ C0] RBP: 00007f4400e3500c R08: 0000000000000000 R09: 0000000000000000 [ 58.153963][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.156271][ C0] R13: 00007f4401026038 R14: 00007f4401025fa0 R15: 00007ffd397fd868 [ 58.158577][ C0] [ 58.160112][ C0] Kernel Offset: disabled [ 58.161398][ C0] Rebooting in 86400 seconds..