[ 8.963163][ T2781] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.063748][ T2851] ssh-keygen (2851) used greatest stack depth: 11664 bytes left Starting sshd: OK syzkaller syzkaller login: [ 17.217029][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 17.217043][ T23] audit: type=1400 audit(1679079701.852:72): avc: denied { transition } for pid=2942 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.223225][ T23] audit: type=1400 audit(1679079701.862:73): avc: denied { write } for pid=2942 comm="sh" path="pipe:[10975]" dev="pipefs" ino=10975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.14' (ECDSA) to the list of known hosts. 2023/03/17 19:01:48 fuzzer started 2023/03/17 19:01:48 dialing manager at 10.128.0.163:40095 [ 27.748710][ T23] audit: type=1400 audit(1679079712.382:74): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.749986][ T3112] cgroup: Unknown subsys name 'net' [ 27.771529][ T23] audit: type=1400 audit(1679079712.382:75): avc: denied { mount } for pid=3112 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.798902][ T23] audit: type=1400 audit(1679079712.412:76): avc: denied { unmount } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.992665][ T3112] cgroup: Unknown subsys name 'rlimit' 2023/03/17 19:01:52 syscalls: 2806 2023/03/17 19:01:52 code coverage: enabled 2023/03/17 19:01:52 comparison tracing: enabled 2023/03/17 19:01:52 extra coverage: enabled 2023/03/17 19:01:52 delay kcov mmap: enabled 2023/03/17 19:01:52 setuid sandbox: enabled 2023/03/17 19:01:52 namespace sandbox: enabled 2023/03/17 19:01:52 Android sandbox: enabled 2023/03/17 19:01:52 fault injection: enabled 2023/03/17 19:01:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/03/17 19:01:52 net packet injection: enabled 2023/03/17 19:01:52 net device setup: enabled 2023/03/17 19:01:52 concurrency sanitizer: enabled 2023/03/17 19:01:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/03/17 19:01:52 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/03/17 19:01:52 USB emulation: /dev/raw-gadget does not exist 2023/03/17 19:01:52 hci packet injection: /dev/vhci does not exist 2023/03/17 19:01:52 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2023/03/17 19:01:52 802.15.4 emulation: enabled 2023/03/17 19:01:52 suppressing KCSAN reports in functions: 'blk_mq_sched_dispatch_requests' '_prb_read_valid' 'filemap_fdatawrite_wbc' 'pcpu_alloc' 'dentry_unlink_inode' 'io_wqe_activate_free_worker' 'generic_fillattr' 'dont_mount' 'generic_write_end' 'tick_sched_timer' 'io_wq_worker_running' 'can_receive' '__cgroup_account_cputime' 'can_send' 'ext4_do_writepages' '__xa_clear_mark' 'xas_clear_mark' 'd_delete' 'ext4_free_inodes_count' 'do_sys_poll' 'exit_mm' [ 28.112360][ T23] audit: type=1400 audit(1679079712.752:77): avc: denied { mounton } for pid=3112 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.137292][ T23] audit: type=1400 audit(1679079712.752:78): avc: denied { mount } for pid=3112 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/03/17 19:01:52 fetching corpus: 0, signal 0/2000 (executing program) [ 28.160721][ T23] audit: type=1400 audit(1679079712.752:79): avc: denied { create } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.181306][ T23] audit: type=1400 audit(1679079712.752:80): avc: denied { write } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/03/17 19:01:52 fetching corpus: 50, signal 13067/16869 (executing program) [ 28.201731][ T23] audit: type=1400 audit(1679079712.752:81): avc: denied { read } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/03/17 19:01:52 fetching corpus: 100, signal 27111/32517 (executing program) 2023/03/17 19:01:53 fetching corpus: 150, signal 32583/39639 (executing program) 2023/03/17 19:01:53 fetching corpus: 200, signal 38169/46770 (executing program) 2023/03/17 19:01:53 fetching corpus: 250, signal 42899/53036 (executing program) 2023/03/17 19:01:53 fetching corpus: 300, signal 46224/57856 (executing program) 2023/03/17 19:01:53 fetching corpus: 350, signal 50879/63888 (executing program) 2023/03/17 19:01:53 fetching corpus: 400, signal 53885/68300 (executing program) 2023/03/17 19:01:53 fetching corpus: 450, signal 57454/73214 (executing program) 2023/03/17 19:01:53 fetching corpus: 500, signal 59741/76878 (executing program) 2023/03/17 19:01:53 fetching corpus: 550, signal 61112/79660 (executing program) 2023/03/17 19:01:53 fetching corpus: 600, signal 62761/82665 (executing program) 2023/03/17 19:01:53 fetching corpus: 650, signal 65454/86669 (executing program) 2023/03/17 19:01:53 fetching corpus: 700, signal 67687/90217 (executing program) 2023/03/17 19:01:53 fetching corpus: 750, signal 69830/93580 (executing program) 2023/03/17 19:01:53 fetching corpus: 800, signal 72501/97357 (executing program) 2023/03/17 19:01:54 fetching corpus: 850, signal 74869/100864 (executing program) 2023/03/17 19:01:54 fetching corpus: 900, signal 77714/104750 (executing program) 2023/03/17 19:01:54 fetching corpus: 950, signal 80035/108153 (executing program) 2023/03/17 19:01:54 fetching corpus: 1000, signal 81870/111109 (executing program) 2023/03/17 19:01:54 fetching corpus: 1050, signal 83651/113995 (executing program) 2023/03/17 19:01:54 fetching corpus: 1100, signal 85304/116773 (executing program) 2023/03/17 19:01:54 fetching corpus: 1150, signal 86611/119202 (executing program) 2023/03/17 19:01:54 fetching corpus: 1200, signal 89356/122804 (executing program) 2023/03/17 19:01:54 fetching corpus: 1250, signal 90865/125371 (executing program) 2023/03/17 19:01:54 fetching corpus: 1300, signal 91771/127368 (executing program) 2023/03/17 19:01:54 fetching corpus: 1350, signal 93305/129928 (executing program) 2023/03/17 19:01:54 fetching corpus: 1400, signal 95167/132767 (executing program) 2023/03/17 19:01:54 fetching corpus: 1450, signal 96660/135216 (executing program) 2023/03/17 19:01:54 fetching corpus: 1500, signal 97745/137287 (executing program) 2023/03/17 19:01:55 fetching corpus: 1550, signal 99022/139554 (executing program) 2023/03/17 19:01:55 fetching corpus: 1600, signal 101123/142412 (executing program) 2023/03/17 19:01:55 fetching corpus: 1650, signal 102475/144628 (executing program) 2023/03/17 19:01:55 fetching corpus: 1700, signal 103625/146725 (executing program) 2023/03/17 19:01:55 fetching corpus: 1750, signal 104821/148892 (executing program) 2023/03/17 19:01:55 fetching corpus: 1800, signal 105778/150794 (executing program) 2023/03/17 19:01:55 fetching corpus: 1850, signal 107174/152990 (executing program) 2023/03/17 19:01:55 fetching corpus: 1900, signal 109936/156144 (executing program) 2023/03/17 19:01:55 fetching corpus: 1950, signal 111225/158235 (executing program) 2023/03/17 19:01:55 fetching corpus: 2000, signal 112650/160424 (executing program) 2023/03/17 19:01:55 fetching corpus: 2050, signal 113590/162234 (executing program) 2023/03/17 19:01:55 fetching corpus: 2100, signal 114464/163974 (executing program) 2023/03/17 19:01:55 fetching corpus: 2150, signal 116035/166221 (executing program) 2023/03/17 19:01:56 fetching corpus: 2200, signal 117391/168301 (executing program) 2023/03/17 19:01:56 fetching corpus: 2250, signal 118077/169897 (executing program) 2023/03/17 19:01:56 fetching corpus: 2300, signal 118965/171578 (executing program) 2023/03/17 19:01:56 fetching corpus: 2350, signal 119651/173095 (executing program) 2023/03/17 19:01:56 fetching corpus: 2400, signal 120802/174969 (executing program) 2023/03/17 19:01:56 fetching corpus: 2450, signal 121625/176538 (executing program) 2023/03/17 19:01:56 fetching corpus: 2500, signal 122647/178275 (executing program) 2023/03/17 19:01:56 fetching corpus: 2550, signal 123492/179870 (executing program) 2023/03/17 19:01:56 fetching corpus: 2600, signal 124410/181478 (executing program) 2023/03/17 19:01:56 fetching corpus: 2650, signal 125385/183193 (executing program) 2023/03/17 19:01:56 fetching corpus: 2700, signal 125944/184627 (executing program) 2023/03/17 19:01:56 fetching corpus: 2750, signal 128212/187000 (executing program) 2023/03/17 19:01:56 fetching corpus: 2800, signal 129113/188555 (executing program) 2023/03/17 19:01:56 fetching corpus: 2850, signal 129988/190129 (executing program) 2023/03/17 19:01:56 fetching corpus: 2900, signal 130705/191589 (executing program) 2023/03/17 19:01:57 fetching corpus: 2950, signal 131536/193087 (executing program) 2023/03/17 19:01:57 fetching corpus: 3000, signal 132278/194552 (executing program) 2023/03/17 19:01:57 fetching corpus: 3050, signal 133213/196090 (executing program) 2023/03/17 19:01:57 fetching corpus: 3100, signal 133775/197428 (executing program) 2023/03/17 19:01:57 fetching corpus: 3150, signal 134271/198708 (executing program) 2023/03/17 19:01:57 fetching corpus: 3200, signal 135088/200139 (executing program) 2023/03/17 19:01:57 fetching corpus: 3250, signal 135755/201471 (executing program) 2023/03/17 19:01:57 fetching corpus: 3300, signal 136516/202854 (executing program) 2023/03/17 19:01:57 fetching corpus: 3350, signal 137036/204083 (executing program) 2023/03/17 19:01:57 fetching corpus: 3400, signal 137997/205564 (executing program) 2023/03/17 19:01:57 fetching corpus: 3450, signal 138626/206825 (executing program) 2023/03/17 19:01:57 fetching corpus: 3500, signal 139181/208077 (executing program) 2023/03/17 19:01:57 fetching corpus: 3550, signal 139903/209372 (executing program) 2023/03/17 19:01:57 fetching corpus: 3600, signal 140666/210635 (executing program) 2023/03/17 19:01:57 fetching corpus: 3650, signal 141275/211860 (executing program) 2023/03/17 19:01:58 fetching corpus: 3700, signal 142182/213208 (executing program) 2023/03/17 19:01:58 fetching corpus: 3750, signal 142852/214434 (executing program) 2023/03/17 19:01:58 fetching corpus: 3800, signal 143483/215634 (executing program) 2023/03/17 19:01:58 fetching corpus: 3850, signal 144173/216812 (executing program) 2023/03/17 19:01:58 fetching corpus: 3900, signal 144819/217993 (executing program) 2023/03/17 19:01:58 fetching corpus: 3950, signal 145305/219087 (executing program) 2023/03/17 19:01:58 fetching corpus: 4000, signal 146074/220300 (executing program) 2023/03/17 19:01:58 fetching corpus: 4050, signal 146796/221524 (executing program) 2023/03/17 19:01:58 fetching corpus: 4100, signal 147476/222697 (executing program) 2023/03/17 19:01:58 fetching corpus: 4150, signal 148014/223827 (executing program) 2023/03/17 19:01:58 fetching corpus: 4200, signal 148572/224962 (executing program) 2023/03/17 19:01:58 fetching corpus: 4250, signal 149568/226225 (executing program) 2023/03/17 19:01:58 fetching corpus: 4300, signal 150751/227522 (executing program) 2023/03/17 19:01:58 fetching corpus: 4350, signal 151309/228593 (executing program) 2023/03/17 19:01:58 fetching corpus: 4400, signal 151954/229669 (executing program) 2023/03/17 19:01:59 fetching corpus: 4450, signal 153207/230976 (executing program) 2023/03/17 19:01:59 fetching corpus: 4500, signal 153888/232043 (executing program) 2023/03/17 19:01:59 fetching corpus: 4550, signal 154481/233059 (executing program) 2023/03/17 19:01:59 fetching corpus: 4600, signal 155013/234072 (executing program) 2023/03/17 19:01:59 fetching corpus: 4650, signal 155686/235123 (executing program) 2023/03/17 19:01:59 fetching corpus: 4700, signal 156230/236154 (executing program) 2023/03/17 19:01:59 fetching corpus: 4750, signal 156898/237178 (executing program) 2023/03/17 19:01:59 fetching corpus: 4800, signal 157423/238155 (executing program) 2023/03/17 19:01:59 fetching corpus: 4850, signal 158195/239240 (executing program) 2023/03/17 19:01:59 fetching corpus: 4900, signal 158988/240303 (executing program) 2023/03/17 19:01:59 fetching corpus: 4950, signal 159555/241318 (executing program) 2023/03/17 19:01:59 fetching corpus: 5000, signal 160293/242329 (executing program) 2023/03/17 19:01:59 fetching corpus: 5050, signal 160665/243202 (executing program) 2023/03/17 19:01:59 fetching corpus: 5100, signal 161687/244279 (executing program) 2023/03/17 19:01:59 fetching corpus: 5150, signal 162202/245151 (executing program) 2023/03/17 19:01:59 fetching corpus: 5200, signal 162940/246128 (executing program) 2023/03/17 19:01:59 fetching corpus: 5250, signal 163626/247049 (executing program) 2023/03/17 19:02:00 fetching corpus: 5300, signal 164096/247929 (executing program) 2023/03/17 19:02:00 fetching corpus: 5350, signal 164584/248812 (executing program) 2023/03/17 19:02:00 fetching corpus: 5400, signal 165009/249678 (executing program) 2023/03/17 19:02:00 fetching corpus: 5450, signal 165427/250539 (executing program) 2023/03/17 19:02:00 fetching corpus: 5500, signal 166010/251396 (executing program) 2023/03/17 19:02:00 fetching corpus: 5550, signal 166629/252251 (executing program) 2023/03/17 19:02:00 fetching corpus: 5600, signal 167071/253089 (executing program) 2023/03/17 19:02:00 fetching corpus: 5650, signal 167565/253931 (executing program) 2023/03/17 19:02:00 fetching corpus: 5700, signal 168059/254798 (executing program) 2023/03/17 19:02:00 fetching corpus: 5750, signal 168524/255674 (executing program) 2023/03/17 19:02:00 fetching corpus: 5800, signal 168950/256447 (executing program) 2023/03/17 19:02:00 fetching corpus: 5850, signal 169390/257214 (executing program) 2023/03/17 19:02:00 fetching corpus: 5900, signal 169876/258028 (executing program) 2023/03/17 19:02:00 fetching corpus: 5950, signal 170522/258833 (executing program) 2023/03/17 19:02:00 fetching corpus: 6000, signal 171035/259636 (executing program) 2023/03/17 19:02:00 fetching corpus: 6050, signal 171618/260416 (executing program) 2023/03/17 19:02:00 fetching corpus: 6100, signal 172016/261176 (executing program) 2023/03/17 19:02:01 fetching corpus: 6150, signal 172580/261967 (executing program) 2023/03/17 19:02:01 fetching corpus: 6200, signal 173352/262769 (executing program) 2023/03/17 19:02:01 fetching corpus: 6250, signal 174547/263574 (executing program) 2023/03/17 19:02:01 fetching corpus: 6300, signal 175375/264313 (executing program) 2023/03/17 19:02:01 fetching corpus: 6350, signal 176021/265074 (executing program) 2023/03/17 19:02:01 fetching corpus: 6400, signal 176355/265763 (executing program) 2023/03/17 19:02:01 fetching corpus: 6450, signal 176767/266473 (executing program) 2023/03/17 19:02:01 fetching corpus: 6500, signal 177255/267197 (executing program) 2023/03/17 19:02:01 fetching corpus: 6550, signal 177690/267881 (executing program) 2023/03/17 19:02:01 fetching corpus: 6600, signal 178140/268550 (executing program) 2023/03/17 19:02:01 fetching corpus: 6650, signal 178648/269193 (executing program) 2023/03/17 19:02:01 fetching corpus: 6700, signal 179327/269804 (executing program) 2023/03/17 19:02:01 fetching corpus: 6750, signal 179938/269804 (executing program) 2023/03/17 19:02:01 fetching corpus: 6800, signal 180406/269804 (executing program) 2023/03/17 19:02:01 fetching corpus: 6850, signal 180788/269804 (executing program) 2023/03/17 19:02:01 fetching corpus: 6900, signal 181168/269804 (executing program) 2023/03/17 19:02:01 fetching corpus: 6950, signal 182078/269804 (executing program) 2023/03/17 19:02:01 fetching corpus: 7000, signal 182514/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7050, signal 182890/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7100, signal 183847/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7150, signal 184338/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7200, signal 184900/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7250, signal 185444/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7300, signal 186110/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7350, signal 186481/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7400, signal 187091/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7450, signal 187697/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7500, signal 188289/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7550, signal 188779/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7600, signal 189080/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7650, signal 189388/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7700, signal 189936/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7750, signal 190264/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7800, signal 190548/269804 (executing program) 2023/03/17 19:02:02 fetching corpus: 7850, signal 191023/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 7900, signal 191353/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 7950, signal 191800/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8000, signal 192141/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8050, signal 192483/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8100, signal 192877/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8150, signal 193196/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8200, signal 193741/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8250, signal 194169/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8300, signal 195201/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8350, signal 195901/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8400, signal 196153/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8450, signal 196502/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8500, signal 196813/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8550, signal 197174/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8600, signal 197545/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8650, signal 197912/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8700, signal 198359/269804 (executing program) 2023/03/17 19:02:03 fetching corpus: 8750, signal 198715/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 8800, signal 198996/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 8849, signal 199302/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 8899, signal 199556/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 8949, signal 199883/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 8999, signal 200242/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9049, signal 200539/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9099, signal 200867/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9149, signal 201206/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9199, signal 201609/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9249, signal 201945/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9299, signal 202219/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9349, signal 202565/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9399, signal 203160/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9449, signal 203480/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9499, signal 203910/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9549, signal 204409/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9599, signal 204701/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9649, signal 205091/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9699, signal 205516/269804 (executing program) 2023/03/17 19:02:04 fetching corpus: 9749, signal 205819/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 9799, signal 206103/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 9849, signal 206455/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 9899, signal 206721/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 9949, signal 207063/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 9999, signal 207369/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10049, signal 207705/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10099, signal 208011/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10149, signal 208398/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10199, signal 208952/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10249, signal 209251/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10299, signal 209562/269804 (executing program) 2023/03/17 19:02:05 fetching corpus: 10349, signal 209902/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10399, signal 210265/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10449, signal 210524/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10499, signal 210803/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10549, signal 211096/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10599, signal 211607/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10649, signal 211928/269805 (executing program) 2023/03/17 19:02:05 fetching corpus: 10699, signal 212351/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 10749, signal 212682/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 10799, signal 213000/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 10849, signal 213293/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 10899, signal 213524/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 10949, signal 213851/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 10999, signal 214155/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11049, signal 214442/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11099, signal 214814/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11149, signal 215121/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11199, signal 215402/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11249, signal 215736/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11299, signal 215953/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11349, signal 216687/269805 (executing program) 2023/03/17 19:02:06 fetching corpus: 11399, signal 217010/269807 (executing program) 2023/03/17 19:02:06 fetching corpus: 11449, signal 217335/269807 (executing program) 2023/03/17 19:02:06 fetching corpus: 11499, signal 217652/269807 (executing program) 2023/03/17 19:02:06 fetching corpus: 11549, signal 217921/269807 (executing program) 2023/03/17 19:02:06 fetching corpus: 11599, signal 218250/269807 (executing program) 2023/03/17 19:02:06 fetching corpus: 11649, signal 218720/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11699, signal 219100/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11749, signal 219319/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11799, signal 219855/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11849, signal 220403/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11898, signal 220774/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11948, signal 221027/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 11998, signal 221304/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12048, signal 221665/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12098, signal 222117/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12148, signal 222387/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12197, signal 222612/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12247, signal 222860/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12297, signal 223242/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12347, signal 223592/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12397, signal 223931/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12447, signal 224250/269807 (executing program) 2023/03/17 19:02:07 fetching corpus: 12497, signal 224481/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12547, signal 224942/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12597, signal 225270/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12647, signal 225576/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12697, signal 226010/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12747, signal 226322/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12797, signal 226593/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12847, signal 226831/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12897, signal 227282/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12947, signal 227514/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 12997, signal 227767/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13047, signal 228050/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13097, signal 228374/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13147, signal 228851/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13197, signal 229097/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13247, signal 229371/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13297, signal 229649/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13347, signal 229871/269807 (executing program) 2023/03/17 19:02:08 fetching corpus: 13397, signal 230184/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13446, signal 230599/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13496, signal 231046/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13546, signal 231258/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13596, signal 231668/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13646, signal 231904/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13696, signal 232213/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13746, signal 232475/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13796, signal 232940/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13846, signal 233178/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13896, signal 233348/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13946, signal 233798/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 13996, signal 234078/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14046, signal 234321/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14096, signal 234589/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14146, signal 234917/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14196, signal 235190/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14246, signal 235496/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14296, signal 235730/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14346, signal 236099/269807 (executing program) 2023/03/17 19:02:09 fetching corpus: 14396, signal 236284/269812 (executing program) 2023/03/17 19:02:09 fetching corpus: 14446, signal 236497/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14496, signal 236967/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14546, signal 237301/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14596, signal 237508/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14646, signal 237724/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14696, signal 237887/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14746, signal 238217/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14796, signal 238531/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14846, signal 238754/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14896, signal 238957/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14946, signal 239203/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 14996, signal 239457/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15046, signal 239726/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15096, signal 240208/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15146, signal 240518/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15196, signal 240814/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15246, signal 241080/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15296, signal 241285/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15346, signal 241509/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15396, signal 242001/269812 (executing program) 2023/03/17 19:02:10 fetching corpus: 15446, signal 242861/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15496, signal 243107/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15546, signal 243384/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15596, signal 243609/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15646, signal 243812/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15696, signal 244222/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15746, signal 244551/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15796, signal 244820/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15846, signal 244977/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15896, signal 245275/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15946, signal 245534/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 15996, signal 245890/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16046, signal 246421/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16096, signal 246660/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16146, signal 246837/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16196, signal 247027/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16246, signal 247203/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16296, signal 247414/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16346, signal 247662/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16396, signal 247844/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16446, signal 248045/269812 (executing program) 2023/03/17 19:02:11 fetching corpus: 16496, signal 248510/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16546, signal 248856/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16596, signal 249155/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16646, signal 249396/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16696, signal 249648/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16746, signal 249869/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16796, signal 250144/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16846, signal 250389/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16896, signal 250568/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16946, signal 250794/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 16996, signal 251330/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17046, signal 251564/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17095, signal 251747/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17145, signal 251999/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17195, signal 252303/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17245, signal 252481/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17295, signal 252679/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17345, signal 252896/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17395, signal 253130/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17445, signal 253373/269812 (executing program) 2023/03/17 19:02:12 fetching corpus: 17495, signal 253637/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17545, signal 254094/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17595, signal 254336/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17645, signal 254554/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17695, signal 254822/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17745, signal 255057/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17795, signal 255263/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17845, signal 255439/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17895, signal 255717/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17945, signal 255924/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 17995, signal 256227/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18045, signal 256495/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18095, signal 256763/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18145, signal 256907/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18195, signal 257109/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18245, signal 257433/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18295, signal 257652/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18345, signal 257938/269812 (executing program) 2023/03/17 19:02:13 fetching corpus: 18395, signal 258154/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18445, signal 258350/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18495, signal 258650/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18545, signal 258918/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18595, signal 259343/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18645, signal 259629/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18695, signal 259813/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18745, signal 260118/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18795, signal 260392/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18845, signal 260582/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18895, signal 260814/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18945, signal 260992/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 18995, signal 261204/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19045, signal 261785/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19095, signal 262021/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19145, signal 262258/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19195, signal 262466/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19245, signal 262749/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19295, signal 263171/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19345, signal 263348/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19395, signal 263604/269812 (executing program) 2023/03/17 19:02:14 fetching corpus: 19445, signal 263771/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19495, signal 263982/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19545, signal 264233/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19595, signal 264595/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19645, signal 264841/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19694, signal 265024/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19744, signal 265176/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19794, signal 265382/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19844, signal 265547/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19894, signal 265779/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19944, signal 266409/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19951, signal 266442/269812 (executing program) 2023/03/17 19:02:15 fetching corpus: 19951, signal 266442/269812 (executing program) 2023/03/17 19:02:17 starting 6 fuzzer processes 19:02:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:17 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 19:02:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xbc, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0xa, 0x1, {0x8, 0xf8, 0x4, 0x4, 0x0, 0x4, 0x10000, 0x3}}, {0xa, 0x2, [0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x3, 0xfffa, 0x9, 0x2, 0xfff, 0x4, 0x2}}, {0x8, 0x2, [0x200, 0x63b1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xbc}, 0x1, 0x0, 0x0, 0x38000}, 0x0) [ 52.812767][ T3106] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=3106 'syz-fuzzer' 19:02:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000001d80)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "0656eb94f03aadd7d2d2341c35ada1db9a6aa8c60312f448b301204d409eee04", "eb916b8d1605ddb54b2c2b05bc819ee41574594a659f1b990ea2cd12b0b4ca87"}}}]}, 0x268}}, 0x0) 19:02:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="9f", 0x1) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) [ 52.968497][ T23] audit: type=1400 audit(1679079737.592:82): avc: denied { execmem } for pid=3120 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.021168][ T23] audit: type=1400 audit(1679079737.622:83): avc: denied { read } for pid=3129 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.042593][ T23] audit: type=1400 audit(1679079737.622:84): avc: denied { open } for pid=3129 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.066229][ T23] audit: type=1400 audit(1679079737.622:85): avc: denied { mounton } for pid=3129 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.087748][ T23] audit: type=1400 audit(1679079737.622:86): avc: denied { module_request } for pid=3129 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.109707][ T23] audit: type=1400 audit(1679079737.652:87): avc: denied { sys_module } for pid=3129 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.398912][ T3129] chnl_net:caif_netlink_parms(): no params data found [ 53.558846][ T3134] chnl_net:caif_netlink_parms(): no params data found [ 53.577288][ T3132] chnl_net:caif_netlink_parms(): no params data found [ 53.586271][ T3129] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.593378][ T3129] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.600560][ T3129] bridge_slave_0: entered allmulticast mode [ 53.607085][ T3129] bridge_slave_0: entered promiscuous mode [ 53.616413][ T3129] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.623520][ T3129] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.630819][ T3129] bridge_slave_1: entered allmulticast mode [ 53.637480][ T3129] bridge_slave_1: entered promiscuous mode [ 53.671214][ T3151] chnl_net:caif_netlink_parms(): no params data found [ 53.682801][ T3129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.711586][ T3129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.745647][ T3152] chnl_net:caif_netlink_parms(): no params data found [ 53.759426][ T3129] team0: Port device team_slave_0 added [ 53.778805][ T3134] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.785922][ T3134] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.793088][ T3134] bridge_slave_0: entered allmulticast mode [ 53.799307][ T3134] bridge_slave_0: entered promiscuous mode [ 53.808248][ T3134] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.815374][ T3134] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.822510][ T3134] bridge_slave_1: entered allmulticast mode [ 53.828847][ T3134] bridge_slave_1: entered promiscuous mode [ 53.835542][ T3129] team0: Port device team_slave_1 added [ 53.843697][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.850800][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.858260][ T3132] bridge_slave_0: entered allmulticast mode [ 53.864640][ T3132] bridge_slave_0: entered promiscuous mode [ 53.907355][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.914483][ T3132] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.921819][ T3132] bridge_slave_1: entered allmulticast mode [ 53.928203][ T3132] bridge_slave_1: entered promiscuous mode [ 53.950776][ T3134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.961071][ T3134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.986784][ T3129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.993818][ T3129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.019791][ T3129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.032938][ T3129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.039880][ T3129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.065880][ T3129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.089047][ T3132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.102690][ T3143] chnl_net:caif_netlink_parms(): no params data found [ 54.111352][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.118450][ T3151] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.125627][ T3151] bridge_slave_0: entered allmulticast mode [ 54.132175][ T3151] bridge_slave_0: entered promiscuous mode [ 54.141460][ T3134] team0: Port device team_slave_0 added [ 54.152736][ T3132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.164795][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.172439][ T3151] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.179677][ T3151] bridge_slave_1: entered allmulticast mode [ 54.186299][ T3151] bridge_slave_1: entered promiscuous mode [ 54.198265][ T3134] team0: Port device team_slave_1 added [ 54.234719][ T3152] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.241853][ T3152] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.248963][ T3152] bridge_slave_0: entered allmulticast mode [ 54.255405][ T3152] bridge_slave_0: entered promiscuous mode [ 54.267187][ T3132] team0: Port device team_slave_0 added [ 54.278916][ T3151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.288307][ T3134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.295351][ T3134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.321376][ T3134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.332483][ T3152] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.339687][ T3152] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.346862][ T3152] bridge_slave_1: entered allmulticast mode [ 54.353476][ T3152] bridge_slave_1: entered promiscuous mode [ 54.368548][ T3132] team0: Port device team_slave_1 added [ 54.379885][ T3151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.389361][ T3134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.396390][ T3134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.422629][ T3134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.445920][ T3129] hsr_slave_0: entered promiscuous mode [ 54.452200][ T3129] hsr_slave_1: entered promiscuous mode [ 54.480463][ T3152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.515683][ T3134] hsr_slave_0: entered promiscuous mode [ 54.521670][ T3134] hsr_slave_1: entered promiscuous mode [ 54.527455][ T3134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.535105][ T3134] Cannot create hsr debugfs directory [ 54.541526][ T3152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.550787][ T3132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.557778][ T3132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.583698][ T3132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.595139][ T3151] team0: Port device team_slave_0 added [ 54.601003][ T3143] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.608066][ T3143] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.615288][ T3143] bridge_slave_0: entered allmulticast mode [ 54.621741][ T3143] bridge_slave_0: entered promiscuous mode [ 54.640140][ T3132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.647116][ T3132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.673247][ T3132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.684602][ T3151] team0: Port device team_slave_1 added [ 54.695833][ T3143] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.702951][ T3143] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.710107][ T3143] bridge_slave_1: entered allmulticast mode [ 54.716855][ T3143] bridge_slave_1: entered promiscuous mode [ 54.723922][ T3152] team0: Port device team_slave_0 added [ 54.754600][ T3152] team0: Port device team_slave_1 added [ 54.768566][ T3143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.791667][ T3151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.798643][ T3151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.824576][ T3151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.836510][ T3143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.857469][ T3152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.864487][ T3152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.890494][ T3152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.903708][ T3151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.910658][ T3151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.936669][ T3151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.960144][ T3132] hsr_slave_0: entered promiscuous mode [ 54.966161][ T3132] hsr_slave_1: entered promiscuous mode [ 54.973336][ T3132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.980919][ T3132] Cannot create hsr debugfs directory [ 54.986605][ T3152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.993632][ T3152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.019566][ T3152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.040038][ T3143] team0: Port device team_slave_0 added [ 55.057430][ T3143] team0: Port device team_slave_1 added [ 55.091238][ T3151] hsr_slave_0: entered promiscuous mode [ 55.097411][ T3151] hsr_slave_1: entered promiscuous mode [ 55.103327][ T3151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.110902][ T3151] Cannot create hsr debugfs directory [ 55.122708][ T3143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.129663][ T3143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.156169][ T3143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.168187][ T3143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.175237][ T3143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.201420][ T3143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.241456][ T3152] hsr_slave_0: entered promiscuous mode [ 55.247471][ T3152] hsr_slave_1: entered promiscuous mode [ 55.253469][ T3152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.261052][ T3152] Cannot create hsr debugfs directory [ 55.299066][ T3143] hsr_slave_0: entered promiscuous mode [ 55.305237][ T3143] hsr_slave_1: entered promiscuous mode [ 55.311166][ T3143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.318708][ T3143] Cannot create hsr debugfs directory [ 55.363824][ T3134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.385458][ T3134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.401182][ T3134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.410320][ T3134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.465510][ T3129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.474660][ T3129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.487861][ T3129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.510058][ T3129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.529024][ T3134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.536112][ T3132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.557470][ T3132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.566490][ T3132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.587159][ T3151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.595757][ T3132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.614793][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.622596][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.631471][ T3134] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.638624][ T3151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.648610][ T3151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.657356][ T3151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.680800][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.689315][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.698153][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.705299][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.714927][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.729499][ T3129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.738577][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.747669][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.757473][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.764553][ T887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.781345][ T3134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.791748][ T3134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.802431][ T23] audit: type=1400 audit(1679079740.442:88): avc: denied { remove_name } for pid=2726 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.803302][ T3152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.825432][ T23] audit: type=1400 audit(1679079740.442:89): avc: denied { rename } for pid=2726 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.856047][ T3152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.866108][ T3152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.877695][ T3129] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.884969][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.895497][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.904461][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.913951][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.922603][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.932463][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.941280][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.949566][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.959450][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.967737][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.976240][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.984078][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.010963][ T3152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.031268][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.039235][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.047042][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.055514][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.064047][ T887] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.071142][ T887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.079162][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.087955][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.096290][ T887] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.103346][ T887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.111375][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.120006][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.129037][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.137352][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.146733][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.154534][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.187839][ T3143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.211402][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.219766][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.228687][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.237029][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.261085][ T3134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.268256][ T3143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.278691][ T3129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.289872][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.307433][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.315100][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.322844][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.331426][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.340435][ T3143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.352003][ T3143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.379682][ T3132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.396116][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.406969][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.426998][ T3152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.441418][ T3151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.458641][ T3132] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.468657][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.476541][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.484323][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.492293][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.499939][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.507930][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.517033][ T3151] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.527187][ T3129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.548619][ T3134] veth0_vlan: entered promiscuous mode [ 56.555377][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.563302][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.571277][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.579887][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.588501][ T3235] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.595640][ T3235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.603662][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.612274][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.620568][ T3235] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.627662][ T3235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.635618][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.644654][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.653019][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.662067][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.669879][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.677579][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.701342][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.710369][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.719043][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.728023][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.736666][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.745132][ T3229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.752185][ T3229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.760084][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.768478][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.777266][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.785666][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.794194][ T3229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.801259][ T3229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.809043][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.817569][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.826164][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.835028][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.843385][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.851976][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.860005][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.871324][ T3152] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.882628][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.895728][ T3134] veth1_vlan: entered promiscuous mode [ 56.923392][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.933789][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.943186][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.953284][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.961630][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.970098][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.978736][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.987250][ T3231] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.994323][ T3231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.002197][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.010647][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.019126][ T3231] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.026176][ T3231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.034221][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.042903][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.051882][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.060334][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.069185][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.077668][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.086452][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.094756][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.103073][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.111645][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.122071][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.130234][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.138658][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.153818][ T3143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.167643][ T3151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.178281][ T3151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.194651][ T3152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.206176][ T3152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.217571][ T3134] veth0_macvtap: entered promiscuous mode [ 57.224619][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.233346][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.241947][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.250208][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.258818][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.267356][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.275817][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.284331][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.296165][ T3143] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.320858][ T3132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.333702][ T3134] veth1_macvtap: entered promiscuous mode [ 57.340579][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.351870][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.360019][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.368723][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.376506][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.384544][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.393117][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.401718][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.408755][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.416531][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.425177][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.434692][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.441841][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.449655][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.458413][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.467320][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.475852][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.484511][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.492110][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.499525][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.508113][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.520661][ T3129] veth0_vlan: entered promiscuous mode [ 57.541354][ T3143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.551839][ T3143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.576309][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.587954][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.597730][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.606208][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.615326][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.623612][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.632591][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.641167][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.649430][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.658281][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.667137][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.674837][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.682653][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.692944][ T3129] veth1_vlan: entered promiscuous mode [ 57.701956][ T3134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.710696][ T3134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.718437][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.727171][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.736209][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.744855][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.760901][ T3152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.785344][ T3134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.794168][ T3134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.803005][ T3134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.811872][ T3134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.826957][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.834505][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.842553][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.850175][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.857835][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.866502][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.876924][ T3151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.895309][ T3129] veth0_macvtap: entered promiscuous mode [ 57.926474][ T3129] veth1_macvtap: entered promiscuous mode [ 57.936836][ T23] audit: type=1400 audit(1679079742.572:90): avc: denied { mounton } for pid=3134 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.941277][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.982546][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.990549][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.001144][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.021254][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.029699][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.038549][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.046413][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.059897][ T3143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.079074][ T3132] veth0_vlan: entered promiscuous mode [ 58.091326][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.098810][ T3231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.114470][ T23] audit: type=1400 audit(1679079742.742:91): avc: denied { read write } for pid=3134 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.138728][ T23] audit: type=1400 audit(1679079742.752:92): avc: denied { open } for pid=3134 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.162858][ T23] audit: type=1400 audit(1679079742.752:93): avc: denied { ioctl } for pid=3134 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 19:02:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 58.195029][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.199098][ T23] audit: type=1400 audit(1679079742.832:94): avc: denied { create } for pid=3289 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.221240][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.224319][ T23] audit: type=1400 audit(1679079742.832:95): avc: denied { write } for pid=3289 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.245475][ T3129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.263927][ T23] audit: type=1400 audit(1679079742.892:96): avc: denied { open } for pid=3293 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.263958][ T23] audit: type=1400 audit(1679079742.892:97): avc: denied { perfmon } for pid=3293 comm="syz-executor.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.284733][ T3129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.300803][ T3129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.305848][ T23] audit: type=1400 audit(1679079742.892:98): avc: denied { kernel } for pid=3293 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.309488][ T23] audit: type=1400 audit(1679079742.942:99): avc: denied { read } for pid=3293 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.318980][ T3132] veth1_vlan: entered promiscuous mode [ 58.323029][ T23] audit: type=1400 audit(1679079742.942:100): avc: denied { write } for pid=3293 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.352207][ T3132] veth0_macvtap: entered promiscuous mode [ 58.395604][ T3132] veth1_macvtap: entered promiscuous mode [ 58.402861][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.415358][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.430831][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.443258][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.452224][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.460643][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.470890][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.479829][ T3129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.490312][ T3129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.502860][ T3129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.514034][ T3132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.524693][ T3132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.534604][ T3132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.545053][ T3132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.556273][ T3132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.565600][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.574273][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.592647][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.601734][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.610351][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.624499][ T3129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.633330][ T3129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.642091][ T3129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.650822][ T3129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.661364][ T3132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.671828][ T3132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.681699][ T3132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.692214][ T3132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.703377][ T3132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.721140][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.729857][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.738726][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.747290][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.756007][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.764347][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.787228][ T3132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.796040][ T3132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.804783][ T3132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.813576][ T3132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.823539][ T3151] veth0_vlan: entered promiscuous mode [ 58.831541][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.839389][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.860730][ T3151] veth1_vlan: entered promiscuous mode [ 58.869646][ T3152] veth0_vlan: entered promiscuous mode [ 58.877548][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.886093][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.907729][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.919053][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.933548][ T3152] veth1_vlan: entered promiscuous mode 19:02:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 58.962336][ T3151] veth0_macvtap: entered promiscuous mode [ 58.969787][ T3151] veth1_macvtap: entered promiscuous mode [ 58.981624][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.989771][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.999228][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.008201][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.017410][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.026154][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.035497][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.044649][ T3143] veth0_vlan: entered promiscuous mode 19:02:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 59.057389][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.068007][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.077998][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.088475][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.098331][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 19:02:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 59.108806][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.120895][ T3151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.128335][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.136405][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.144254][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.152684][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 19:02:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xbc, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0xa, 0x1, {0x8, 0xf8, 0x4, 0x4, 0x0, 0x4, 0x10000, 0x3}}, {0xa, 0x2, [0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x3, 0xfffa, 0x9, 0x2, 0xfff, 0x4, 0x2}}, {0x8, 0x2, [0x200, 0x63b1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xbc}, 0x1, 0x0, 0x0, 0x38000}, 0x0) [ 59.161561][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.175761][ T3143] veth1_vlan: entered promiscuous mode [ 59.190930][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.201434][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:02:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 59.211476][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.221907][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.231814][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.242420][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.255201][ T3151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.262978][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.271140][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.279651][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.288333][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.297009][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.314392][ T3152] veth0_macvtap: entered promiscuous mode [ 59.322497][ T3151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.331332][ T3151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.340084][ T3151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.348939][ T3151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.365163][ T3152] veth1_macvtap: entered promiscuous mode [ 59.376574][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.385091][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.393163][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.402654][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.411379][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.423859][ T3143] veth0_macvtap: entered promiscuous mode [ 59.438869][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.449423][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.459328][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.469757][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.479657][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.490098][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.499917][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.510352][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.523387][ T3152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.538207][ T3143] veth1_macvtap: entered promiscuous mode [ 59.545712][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.553990][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.561833][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.570321][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.595815][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.606412][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.616241][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.626717][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.636551][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.647074][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.656916][ T3152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.667343][ T3152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.679696][ T3152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.688950][ T3152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.697884][ T3152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.706654][ T3152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.715472][ T3152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.726130][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.736498][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.753317][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.763830][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.767971][ T3339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3339 comm=syz-executor.2 [ 59.773729][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.797144][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.806971][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.817395][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.827274][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.837701][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.847517][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.858051][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.869556][ T3143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.892666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.901659][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.916443][ T3339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.927541][ T3339] geneve0: entered promiscuous mode [ 59.932937][ T3339] macvlan2: entered promiscuous mode [ 59.938290][ T3339] macvlan2: entered allmulticast mode [ 59.943921][ T3339] geneve0: entered allmulticast mode [ 59.950458][ T3339] geneve0: left allmulticast mode [ 59.955599][ T3339] geneve0: left promiscuous mode [ 59.986341][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.996982][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.006881][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.017395][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.027304][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.037734][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.047557][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.058011][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.067895][ T3143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.078481][ T3143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.091936][ T3143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.101675][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.103723][ T3339] syz-executor.2 (3339) used greatest stack depth: 11336 bytes left [ 60.110653][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.142433][ T3143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151304][ T3143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.160057][ T3143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.168846][ T3143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:02:24 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 19:02:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xbc, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0xa, 0x1, {0x8, 0xf8, 0x4, 0x4, 0x0, 0x4, 0x10000, 0x3}}, {0xa, 0x2, [0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x3, 0xfffa, 0x9, 0x2, 0xfff, 0x4, 0x2}}, {0x8, 0x2, [0x200, 0x63b1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xbc}, 0x1, 0x0, 0x0, 0x38000}, 0x0) 19:02:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:24 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 19:02:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="9f", 0x1) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) 19:02:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xbc, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0xa, 0x1, {0x8, 0xf8, 0x4, 0x4, 0x0, 0x4, 0x10000, 0x3}}, {0xa, 0x2, [0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x3, 0xfffa, 0x9, 0x2, 0xfff, 0x4, 0x2}}, {0x8, 0x2, [0x200, 0x63b1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xbc}, 0x1, 0x0, 0x0, 0x38000}, 0x0) 19:02:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="9f", 0x1) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) 19:02:24 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 19:02:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 60.255686][ T3357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3357 comm=syz-executor.2 [ 60.286657][ T3357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 19:02:24 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 19:02:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="9f", 0x1) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) [ 60.341311][ T3357] geneve0: entered promiscuous mode 19:02:25 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 19:02:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) [ 60.363981][ T3357] macvlan2: entered promiscuous mode [ 60.369388][ T3357] macvlan2: entered allmulticast mode [ 60.374829][ T3357] geneve0: entered allmulticast mode 19:02:25 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) [ 60.404325][ T3357] geneve0: left allmulticast mode [ 60.408540][ T3378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3378 comm=syz-executor.4 [ 60.409460][ T3357] geneve0: left promiscuous mode [ 60.472144][ T3378] ip6gre0: entered promiscuous mode [ 60.488034][ T3378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 60.499126][ T3378] geneve0: entered promiscuous mode [ 60.504522][ T3378] macvlan2: entered promiscuous mode [ 60.510013][ T3378] macvlan2: entered allmulticast mode [ 60.515490][ T3378] geneve0: entered allmulticast mode [ 60.521662][ T3357] syz-executor.2 (3357) used greatest stack depth: 11240 bytes left [ 60.530047][ T3378] geneve0: left allmulticast mode [ 60.535161][ T3378] geneve0: left promiscuous mode [ 60.596231][ T3377] ip6gre0: left promiscuous mode 19:02:25 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 19:02:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:25 executing program 5: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 19:02:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 61.107083][ T3389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3389 comm=syz-executor.4 [ 61.113665][ T3391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3391 comm=syz-executor.0 [ 61.133530][ T3388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3388 comm=syz-executor.2 [ 61.137114][ T3389] ip6gretap0: entered promiscuous mode 19:02:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 61.155423][ T3388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.174475][ T3388] geneve0: entered promiscuous mode [ 61.179730][ T3388] macvlan2: entered promiscuous mode [ 61.185131][ T3388] macvlan2: entered allmulticast mode [ 61.190518][ T3388] geneve0: entered allmulticast mode [ 61.198567][ T3388] geneve0: left allmulticast mode 19:02:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 61.203728][ T3388] geneve0: left promiscuous mode [ 61.221894][ T3391] veth0: entered promiscuous mode [ 61.233214][ T3389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.250619][ T3389] geneve0: entered promiscuous mode 19:02:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) [ 61.256031][ T3389] macvlan2: entered promiscuous mode [ 61.261515][ T3389] macvlan2: entered allmulticast mode [ 61.266927][ T3389] geneve0: entered allmulticast mode [ 61.278746][ T3389] geneve0: left allmulticast mode [ 61.283943][ T3389] geneve0: left promiscuous mode [ 61.327057][ T3391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.328178][ T3410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3410 comm=syz-executor.2 [ 61.338402][ T3391] geneve0: entered promiscuous mode [ 61.355736][ T3391] macvlan2: entered promiscuous mode [ 61.361175][ T3391] macvlan2: entered allmulticast mode [ 61.366569][ T3391] geneve0: entered allmulticast mode [ 61.375155][ T3391] geneve0: left allmulticast mode [ 61.380302][ T3391] geneve0: left promiscuous mode [ 61.409496][ T3413] ip6gre0: entered promiscuous mode [ 61.415829][ T3383] ip6gretap0: left promiscuous mode [ 61.444426][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.457313][ T3410] geneve0: entered promiscuous mode [ 61.462788][ T3410] macvlan2: entered promiscuous mode [ 61.468154][ T3410] macvlan2: entered allmulticast mode [ 61.473625][ T3410] geneve0: entered allmulticast mode [ 61.480040][ T3410] geneve0: left allmulticast mode [ 61.485204][ T3410] geneve0: left promiscuous mode [ 61.502351][ T3382] veth0: left promiscuous mode [ 61.536946][ T3408] ip6gre0: left promiscuous mode 19:02:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 19:02:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:26 executing program 3: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000480)=0x8) [ 62.008597][ T3419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3419 comm=syz-executor.0 [ 62.027822][ T3419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.031305][ T3421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3421 comm=syz-executor.4 [ 62.038960][ T3419] geneve0: entered promiscuous mode 19:02:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 3: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000480)=0x8) [ 62.056582][ T3419] macvlan2: entered promiscuous mode [ 62.062252][ T3419] macvlan2: entered allmulticast mode [ 62.067669][ T3419] geneve0: entered allmulticast mode [ 62.078425][ T3419] geneve0: left allmulticast mode [ 62.083788][ T3419] geneve0: left promiscuous mode 19:02:26 executing program 3: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000480)=0x8) [ 62.133696][ T3421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.145991][ T3421] geneve0: entered promiscuous mode [ 62.151604][ T3421] macvlan2: entered promiscuous mode [ 62.157009][ T3421] macvlan2: entered allmulticast mode [ 62.165721][ T3421] geneve0: entered allmulticast mode [ 62.176800][ T3421] geneve0: left allmulticast mode 19:02:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 3: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000480)=0x8) 19:02:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 62.181995][ T3421] geneve0: left promiscuous mode 19:02:26 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$binfmt_script(r0, 0x0, 0xb) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) 19:02:26 executing program 1: io_uring_setup(0x0, &(0x7f0000000140)) r0 = io_uring_setup(0x1bda, &(0x7f0000000080)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) 19:02:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', r2, 0x8, 0x1, 0xfff, 0x1000, {{0x16, 0x4, 0x3, 0x32, 0x58, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x3, [{@remote, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@remote, 0x6}, {@multicast1, 0xfffffff7}, {@broadcast}, {@empty, 0x7}, {@empty, 0x9}]}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0205865, &(0x7f0000000200)={0x2000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xc, 0x4, 0x20, 0x7fffffff, 0x2, 0xffffffffffffffff, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r14, 0xc0205865, &(0x7f0000000200)={0x2000}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r15, 0xc0205865, &(0x7f0000000200)={0x2000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x0, 0x0, 0x6, 0x0, 0xc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000440)=""/253, 0x41000, 0x12, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x3f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r12, r3, r13, 0xffffffffffffffff, r14, r15]}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x22, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xffffffffffffffd0}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) 19:02:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000000000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001a00)='./binderfs2/binder-control\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) pipe2(0x0, 0x2080) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000021c0)='./file0\x00', 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x401870c8, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x401870c8, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x32, 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/156, 0x9c}], 0x1, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/169, 0xa9}], 0x3, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) getpgrp(0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x1, r2, r3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x2}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 19:02:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:26 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xffffc000) mlockall(0x3) 19:02:27 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$binfmt_script(r0, 0x0, 0xb) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) 19:02:27 executing program 1: io_uring_setup(0x0, &(0x7f0000000140)) r0 = io_uring_setup(0x1bda, &(0x7f0000000080)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) 19:02:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) [ 62.334966][ T3460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3460 comm=syz-executor.0 [ 62.354847][ T3460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.401368][ T3460] geneve0: entered promiscuous mode 19:02:27 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$binfmt_script(r0, 0x0, 0xb) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) [ 62.423898][ T3460] macvlan2: entered promiscuous mode [ 62.429318][ T3460] macvlan2: entered allmulticast mode [ 62.434853][ T3460] geneve0: entered allmulticast mode 19:02:27 executing program 1: io_uring_setup(0x0, &(0x7f0000000140)) r0 = io_uring_setup(0x1bda, &(0x7f0000000080)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) 19:02:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$binfmt_script(r0, 0x0, 0xb) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) [ 62.467542][ T3460] geneve0: left allmulticast mode [ 62.472720][ T3460] geneve0: left promiscuous mode 19:02:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 1: io_uring_setup(0x0, &(0x7f0000000140)) r0 = io_uring_setup(0x1bda, &(0x7f0000000080)) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x16, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) 19:02:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xffffc000) mlockall(0x3) 19:02:27 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) 19:02:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 19:02:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) 19:02:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 19:02:27 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) 19:02:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 19:02:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 19:02:27 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000dc0), 0x8, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:02:27 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xffffc000) mlockall(0x3) 19:02:27 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) 19:02:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0xee00) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8948, &(0x7f0000000540)={'wpan3\x00'}) 19:02:27 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000dc0), 0x8, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:02:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 19:02:27 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19:02:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0xee00) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8948, &(0x7f0000000540)={'wpan3\x00'}) 19:02:27 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19:02:27 executing program 0: process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x20000000) 19:02:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 19:02:27 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000dc0), 0x8, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:02:27 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19:02:27 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xffffc000) mlockall(0x3) 19:02:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0xee00) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8948, &(0x7f0000000540)={'wpan3\x00'}) 19:02:27 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000dc0), 0x8, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:02:27 executing program 0: process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x20000000) 19:02:27 executing program 5: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19:02:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 19:02:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0xee00) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8948, &(0x7f0000000540)={'wpan3\x00'}) 19:02:27 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 19:02:27 executing program 0: process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x20000000) 19:02:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) 19:02:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) [ 63.372842][ T23] kauditd_printk_skb: 28 callbacks suppressed [ 63.372879][ T23] audit: type=1400 audit(1679079748.012:129): avc: denied { block_suspend } for pid=3549 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 19:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) 19:02:28 executing program 0: process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x20000000) 19:02:28 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x2, 0x0, 0x0) 19:02:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) 19:02:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="d09d55a477a3", &(0x7f0000001340)=""/4096, 0x0, 0x0, 0x0, 0x0}) 19:02:28 executing program 0: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 19:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) [ 63.545319][ T3572] syz-executor.5 (3572) used greatest stack depth: 10904 bytes left [ 63.546114][ T23] audit: type=1400 audit(1679079748.182:130): avc: denied { read } for pid=3575 comm="syz-executor.4" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.582314][ T23] audit: type=1400 audit(1679079748.222:131): avc: denied { open } for pid=3575 comm="syz-executor.4" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.606611][ T23] audit: type=1400 audit(1679079748.222:132): avc: denied { ioctl } for pid=3575 comm="syz-executor.4" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.638401][ T3578] team1: entered promiscuous mode [ 63.643523][ T3578] team1: entered allmulticast mode [ 63.661079][ T3578] 8021q: adding VLAN 0 to HW filter on device team1 19:02:28 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:28 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x2, 0x0, 0x0) 19:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) 19:02:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) 19:02:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="d09d55a477a3", &(0x7f0000001340)=""/4096, 0x0, 0x0, 0x0, 0x0}) 19:02:28 executing program 0: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 19:02:28 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x2, 0x0, 0x0) 19:02:28 executing program 0: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 19:02:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="d09d55a477a3", &(0x7f0000001340)=""/4096, 0x0, 0x0, 0x0, 0x0}) 19:02:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010401eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80280000, 0xb}}}}]}, 0x40}}, 0x0) 19:02:28 executing program 0: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 19:02:28 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:29 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="d09d55a477a3", &(0x7f0000001340)=""/4096, 0x0, 0x0, 0x0, 0x0}) 19:02:29 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x2, 0x0, 0x0) 19:02:29 executing program 5: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 19:02:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfdcf, &(0x7f000000cf3d)=""/192, 0x0, 0x5}, 0x48) 19:02:29 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000080)) 19:02:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfdcf, &(0x7f000000cf3d)=""/192, 0x0, 0x5}, 0x48) 19:02:29 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x2, '\x00', {0x0, 0x6, "5716a2", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0xff00000000000000}, [@dstopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) [ 65.034390][ T23] audit: type=1400 audit(1679079749.672:133): avc: denied { prog_run } for pid=3612 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.065052][ T3617] __nla_validate_parse: 11 callbacks suppressed [ 65.065070][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:02:29 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000080)) 19:02:29 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x2, '\x00', {0x0, 0x6, "5716a2", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0xff00000000000000}, [@dstopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 19:02:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfdcf, &(0x7f000000cf3d)=""/192, 0x0, 0x5}, 0x48) [ 65.109360][ T3617] team1: entered promiscuous mode [ 65.114528][ T3617] team1: entered allmulticast mode [ 65.123412][ T3617] 8021q: adding VLAN 0 to HW filter on device team1 19:02:29 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:30 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:30 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x2, '\x00', {0x0, 0x6, "5716a2", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0xff00000000000000}, [@dstopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 19:02:30 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000080)) 19:02:30 executing program 5: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 19:02:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfdcf, &(0x7f000000cf3d)=""/192, 0x0, 0x5}, 0x48) 19:02:30 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x2, '\x00', {0x0, 0x6, "5716a2", 0x0, 0x0, 0x0, @loopback={0xff00000000000000}, @loopback={0xff00000000000000}, [@dstopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) 19:02:30 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000080)) 19:02:30 executing program 5: set_mempolicy(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100005e4a440040000000000000", @ANYRES32, @ANYBLOB="81ffffffffdfffff240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) [ 65.963927][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:02:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4, 0x8}]}]}, 0x24}}, 0x0) 19:02:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x63, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:02:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x49, &(0x7f00000004c0)="71eb8ad12a2753b941e47f05bbb6b47f8d615fb94f0b3cad66fc0353a72102cae4c856709fcbe022e71ca731b6f7dacdb569de7dcecaf9bf41427c91055cea6a0ecadc4e9b87fa69be", 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='kfree\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff"], 0x5000) [ 66.013475][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 66.072575][ T23] audit: type=1400 audit(1679079750.712:134): avc: denied { map_read map_write } for pid=3659 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 19:02:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4, 0x8}]}]}, 0x24}}, 0x0) 19:02:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x49, &(0x7f00000004c0)="71eb8ad12a2753b941e47f05bbb6b47f8d615fb94f0b3cad66fc0353a72102cae4c856709fcbe022e71ca731b6f7dacdb569de7dcecaf9bf41427c91055cea6a0ecadc4e9b87fa69be", 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='kfree\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff"], 0x5000) 19:02:31 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f00000001c0)=[{r3, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r2, r3) 19:02:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x63, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:02:31 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) 19:02:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4, 0x8}]}]}, 0x24}}, 0x0) 19:02:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 19:02:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x63, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:02:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x49, &(0x7f00000004c0)="71eb8ad12a2753b941e47f05bbb6b47f8d615fb94f0b3cad66fc0353a72102cae4c856709fcbe022e71ca731b6f7dacdb569de7dcecaf9bf41427c91055cea6a0ecadc4e9b87fa69be", 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='kfree\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff"], 0x5000) 19:02:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4, 0x8}]}]}, 0x24}}, 0x0) 19:02:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 19:02:31 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) [ 66.855185][ T23] audit: type=1326 audit(1679079751.492:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97162d0f9 code=0x7ffc0000 19:02:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x63, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 66.935760][ T23] audit: type=1326 audit(1679079751.512:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb97162d0f9 code=0x7ffc0000 [ 66.959969][ T23] audit: type=1326 audit(1679079751.522:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97162d0f9 code=0x7ffc0000 19:02:31 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) [ 66.983926][ T23] audit: type=1326 audit(1679079751.522:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb97162d0f9 code=0x7ffc0000 19:02:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 19:02:32 executing program 2: socket$l2tp(0x2, 0x2, 0x73) 19:02:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x49, &(0x7f00000004c0)="71eb8ad12a2753b941e47f05bbb6b47f8d615fb94f0b3cad66fc0353a72102cae4c856709fcbe022e71ca731b6f7dacdb569de7dcecaf9bf41427c91055cea6a0ecadc4e9b87fa69be", 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='kfree\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff"], 0x5000) 19:02:32 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) 19:02:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 19:02:32 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:32 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff4f, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_GENERIC_ERROR_NTF, 0x4) 19:02:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 19:02:32 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) 19:02:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0x8008, 0x3e) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 19:02:32 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) 19:02:32 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='(', 0x1}], 0x1}, 0x0) close(r1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/217, 0xd9}], 0x1, &(0x7f0000000340)=""/23, 0x17}, 0x0) 19:02:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) 19:02:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffe}}]}]}]}, 0x3c}}, 0x0) 19:02:32 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='(', 0x1}], 0x1}, 0x0) close(r1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/217, 0xd9}], 0x1, &(0x7f0000000340)=""/23, 0x17}, 0x0) 19:02:32 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) 19:02:32 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='(', 0x1}], 0x1}, 0x0) close(r1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/217, 0xd9}], 0x1, &(0x7f0000000340)=""/23, 0x17}, 0x0) [ 68.007120][ C1] hrtimer: interrupt took 36430 ns 19:02:33 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffe}}]}]}]}, 0x3c}}, 0x0) 19:02:33 executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='(', 0x1}], 0x1}, 0x0) close(r1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/217, 0xd9}], 0x1, &(0x7f0000000340)=""/23, 0x17}, 0x0) 19:02:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) 19:02:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) 19:02:33 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff4f, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_GENERIC_ERROR_NTF, 0x4) 19:02:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffe}}]}]}]}, 0x3c}}, 0x0) 19:02:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) 19:02:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffe}}]}]}]}, 0x3c}}, 0x0) 19:02:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:34 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff4f, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_GENERIC_ERROR_NTF, 0x4) 19:02:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) 19:02:34 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:35 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff4f, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_GENERIC_ERROR_NTF, 0x4) 19:02:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:35 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:35 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:35 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) 19:02:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:36 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:36 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) 19:02:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) [ 71.883095][ T3815] ================================================================== [ 71.891303][ T3815] BUG: KCSAN: data-race in clockevents_program_min_delta / print_tickdevice [ 71.900987][ T3815] [ 71.903323][ T3815] read-write to 0xffff888237d1bf40 of 8 bytes by interrupt on cpu 1: [ 71.911763][ T3815] clockevents_program_min_delta+0xb6/0x250 [ 71.917808][ T3815] clockevents_program_event+0x16f/0x1d0 [ 71.923479][ T3815] tick_program_event+0x88/0xd0 [ 71.928377][ T3815] hrtimer_reprogram+0x201/0x240 [ 71.933426][ T3815] hrtimer_update_softirq_timer+0x1e0/0x1f0 [ 71.939354][ T3815] hrtimer_run_softirq+0x118/0x140 [ 71.944501][ T3815] __do_softirq+0xe4/0x2b0 [ 71.948953][ T3815] run_ksoftirqd+0x23/0x30 [ 71.953403][ T3815] smpboot_thread_fn+0x2f8/0x490 [ 71.958392][ T3815] kthread+0x1ac/0x1e0 [ 71.962494][ T3815] ret_from_fork+0x1f/0x30 [ 71.966939][ T3815] [ 71.969264][ T3815] read to 0xffff888237d1bf40 of 8 bytes by task 3815 on cpu 0: [ 71.976901][ T3815] print_tickdevice+0x2ae/0x340 [ 71.981788][ T3815] timer_list_show+0x79/0x180 [ 71.986482][ T3815] seq_read_iter+0x612/0x8f0 [ 71.991098][ T3815] proc_reg_read_iter+0x10e/0x180 [ 71.996137][ T3815] generic_file_splice_read+0xe3/0x290 [ 72.001630][ T3815] splice_direct_to_actor+0x25a/0x5f0 [ 72.007201][ T3815] do_splice_direct+0x104/0x180 [ 72.012086][ T3815] do_sendfile+0x3b8/0x950 [ 72.016507][ T3815] __x64_sys_sendfile64+0x110/0x150 [ 72.021726][ T3815] do_syscall_64+0x41/0xc0 [ 72.026178][ T3815] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.032085][ T3815] [ 72.034415][ T3815] value changed: 0x0000000000003bdd -> 0x0000000000003bde [ 72.041553][ T3815] [ 72.043877][ T3815] Reported by Kernel Concurrency Sanitizer on: [ 72.050070][ T3815] CPU: 0 PID: 3815 Comm: syz-executor.5 Not tainted 6.3.0-rc2-syzkaller-00077-g38e04b3e4240 #0 [ 72.060407][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 72.070469][ T3815] ================================================================== 19:02:36 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) close_range(r0, r1, 0x2) 19:02:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:37 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) [ 72.471369][ T3840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.538408][ T3840] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.558802][ T3840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) [ 72.595271][ T3840] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.615335][ T3840] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.679741][ T3844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.738332][ T3844] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.755921][ T3844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) [ 72.803480][ T3844] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.823030][ T3844] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.880376][ T3846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.943846][ T3847] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 72.973949][ T3846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) [ 73.018969][ T3846] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 73.034922][ T3846] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 19:02:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) [ 73.103610][ T3849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.131379][ T3849] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 19:02:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) [ 73.150814][ T3849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) 19:02:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) 19:02:37 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x243, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) sendfile(r8, r7, &(0x7f0000000080)=0xffc9, 0xf0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000000d67) [ 73.279547][ T3855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.303571][ T3855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) 19:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) 19:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) 19:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) 19:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) 19:02:38 executing program 4: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @rand_addr=' \x01\x00'}}}}}}, 0x0) 19:02:38 executing program 4: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @rand_addr=' \x01\x00'}}}}}}, 0x0) 19:02:38 executing program 4: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @rand_addr=' \x01\x00'}}}}}}, 0x0) 19:02:38 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x0, 'freezer'}]}, 0x9) write$cgroup_int(r0, &(0x7f0000000000), 0x34000) 19:02:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009200)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000003380)={0x2, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x2400c004) 19:02:38 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 19:02:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x7fff) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x12, 0x0, 0x20000000, 0x0, 0x2}}) 19:02:38 executing program 4: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @rand_addr=' \x01\x00'}}}}}}, 0x0) [ 74.203568][ T23] kauditd_printk_skb: 37 callbacks suppressed [ 74.203582][ T23] audit: type=1400 audit(1679079758.842:176): avc: denied { write } for pid=3883 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 19:02:38 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x0, 'freezer'}]}, 0x9) write$cgroup_int(r0, &(0x7f0000000000), 0x34000) 19:02:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a101020003000500000002000020d3"]) 19:02:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009200)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000003380)={0x2, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x2400c004) 19:02:38 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') read$nci(r0, 0x0, 0x0) [ 74.248204][ T23] audit: type=1400 audit(1679079758.872:177): avc: denied { setopt } for pid=3885 comm="syz-executor.2" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 19:02:38 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 19:02:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009200)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000003380)={0x2, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x2400c004) 19:02:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x7fff) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x12, 0x0, 0x20000000, 0x0, 0x2}}) 19:02:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009200)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000003380)={0x2, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x2400c004) 19:02:39 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 19:02:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a101020003000500000002000020d3"]) [ 74.299943][ T3896] usb usb9: usbfs: process 3896 (syz-executor.5) did not claim interface 3 before use [ 74.309881][ T23] audit: type=1400 audit(1679079758.932:178): avc: denied { write } for pid=3893 comm="syz-executor.5" name="001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 19:02:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x7fff) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x12, 0x0, 0x20000000, 0x0, 0x2}}) 19:02:39 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 19:02:39 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x0, 'freezer'}]}, 0x9) write$cgroup_int(r0, &(0x7f0000000000), 0x34000) 19:02:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x4}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 19:02:39 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') read$nci(r0, 0x0, 0x0) 19:02:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x0, 0x2}, 0x10) 19:02:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a101020003000500000002000020d3"]) 19:02:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x7fff) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x12, 0x0, 0x20000000, 0x0, 0x2}}) [ 74.430196][ T3910] usb usb9: usbfs: process 3910 (syz-executor.5) did not claim interface 3 before use 19:02:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x0, 0x2}, 0x10) 19:02:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x4}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 19:02:39 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') read$nci(r0, 0x0, 0x0) 19:02:39 executing program 0: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) 19:02:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x0, 0x2}, 0x10) 19:02:39 executing program 0: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) [ 74.517243][ T3928] usb usb9: usbfs: process 3928 (syz-executor.5) did not claim interface 3 before use 19:02:39 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x0, 'freezer'}]}, 0x9) write$cgroup_int(r0, &(0x7f0000000000), 0x34000) 19:02:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a101020003000500000002000020d3"]) 19:02:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x4}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 19:02:39 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') read$nci(r0, 0x0, 0x0) 19:02:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x0, 0x2}, 0x10) 19:02:39 executing program 0: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) 19:02:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x4}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) 19:02:39 executing program 0: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) 19:02:39 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 19:02:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) 19:02:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) [ 74.649103][ T3948] usb usb9: usbfs: process 3948 (syz-executor.5) did not claim interface 3 before use 19:02:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 19:02:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 19:02:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) 19:02:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) 19:02:39 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "f9d795", 0x0, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}, 0x0) 19:02:39 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) 19:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@mpls_getnetconf={0x14, 0x52, 0x605}, 0x14}}, 0x0) [ 74.760019][ T23] audit: type=1400 audit(1679079759.392:179): avc: denied { create } for pid=3961 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.760572][ T23] audit: type=1400 audit(1679079759.392:180): avc: denied { write } for pid=3961 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 19:02:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) 19:02:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 19:02:39 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02b447", 0x10, 0x0, 0x0, @local, @local, {[@hopopts={0x2b, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 19:02:39 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "f9d795", 0x0, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}, 0x0) 19:02:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) 19:02:39 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="b39e3f") 19:02:39 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "f9d795", 0x0, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}, 0x0) 19:02:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) 19:02:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 19:02:39 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="b39e3f") 19:02:39 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02b447", 0x10, 0x0, 0x0, @local, @local, {[@hopopts={0x2b, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 19:02:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3f55, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x107e, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4dca) splice(r0, 0x0, r2, 0x0, 0x1ffe1, 0x0) close(r2) [ 74.898199][ T23] audit: type=1400 audit(1679079759.532:181): avc: denied { create } for pid=3981 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 19:02:39 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "f9d795", 0x0, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}, 0x0) 19:02:39 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 19:02:39 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="b39e3f") 19:02:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="0cedb091a1d86fbdae193e6fb0da6b7eaa748a2e65f79bfa5894888c422f35ac4c0ea5ca1131ea17004e5512a137334bd9db172e3421337de74092ff7094032fa3ea38d11bceec7728db66642f58bf5c0162d28caf88c4eb33912c7bfa7dd5ec3912877be0155143bd5de49267cb41ed5ea6031f7adf7d9744020761747debc2a4e698c1266fb2fc59210c8425c79033748a1be23b132457c6082e5f600a1d0bfd3599a997ed07bdfc6af6b666c8afc70f1bf427d17711a723cbae2f5e76c080bd334b94e91b9c363a9068db8cba68ddda296b88", 0xd4}, {&(0x7f0000000400)="8831cc039da127dee38c4ab0827ef518f37fa28be4704490d4b545fddda66cbdb10159d70b8dd127f81762ea6ff6d8253f3087579fe40f5fbda6484f41253187c329bcbae0717ac1a1f3a773c504a1007bd12d5cee05ee20dd64699e574eb5b81cf7cb13f20ad6bcc5587a115207e52d37ef098e00e19e8ccb9464bb66d416b4655d46e761f6e0978b738edde065f6be06672a413e031b5c82d34d06543ad92db313a2c70f875d99de0aa9290fd6cb8f3a38bf5e1747a6193b063e4c372c3a18e4d919ed79f8fedddaabaa82e37bfbbdcf97a82be617ed29dd6fe68e856463e5985e2243b4371691866d2e7021e9b9e66c92db9d703af7a2bd645ea634175865d186bab5140bb7ad60560e9a0fd1cbc6917f81c324f90ce603e8409687258d64d753ad737fee9d23776ab2d8e8f4d8fb222ffae96978a63867543d821b539269f23a080cec45b389fa7bc4313be75dc7db59a06b001c51633949f4212b6788d371fbad11da89ecafd61dd0dece0083931111c4268f985de76073d1cf393c1ad1a9e43dd6fdbc027399b845f55c3e44d4637f9bb6983c625e42fffebc42d800f1179aefb6836e38c8a9917917188625f12e0169b56846bba972b922d75d310a49777acabeceac4bd5bc263f10680518b140bf3f7d1cd2b85ade3d7e36316c3fe6f061c3242564ecda62f0f6626f9ab6a7a3f642b5aa7f7904f02d714eeb0166512a6f993d11ee25ba47a4fd1fcda4ca55bef3933fdbdc9cea21ea72f1d622f5238d99aee1242e1718e33881e92e752c4b60414964d9479e6433925fdaa95f05801feede2a47e03927f69a9fd16c36efc8a382a3e398a7ad916324e64dda4fafe5f8a85d3d0c28fb34f084f9779f21807c53148791811e19c0651b1bad853abe34946be9cfb360c056ffc35e40c511625a01313cdcbb0d1cbf19e108861b8ec607fe20397b2812fe0351e973c4c1e4d87cc244f7debc718e162c122fd065ce3f41e9fa155bbf3e028002edca74df435f41388009cba06d38166921e2a5e47eba7e0e87a7a174fd6943cd6d1a5f9b282b464d1ba2022841c16fadb0f74b9d49c86aba45bd513c0818570e99568025b691a089eacdb085b80761c085f1344c07bcaf2ed7e00c38d9b97796cc6d566cd1e0c5ba36c595f81158f487cac7064e915bc5a98384fd9cefd825d2620280c363467212fa8b4e643f83f78c5441d3e9c59bc14f5e38b8ef4f550de872bef61ea61640657a6b8137180efe1c311b819c2d8557d0018706801f42902a18f403a15d35e0648f5453485a9927aa3c457993587b5495093d29226f96163ade12436e7956a2619e8b3a987976374c460b9f2b49b84a777056d167a8216533fdf0fdd1e9625053ad20a4f31d2663f4d3bc04b1fa14082676560787a2e0d1cfaf163fe429531dfea93d40ded75bab43cc2a5d379c1942e03dd2267060096a0027c710d2c23bf66b24fa2598f8b28b113071b3b22f00081b54a99b5cd08dc487ff95593a64b8fd6f6e55fddff03398b414029ec2acb7d1277e5bebf9e5ebbbe57e2d36a10539febbeb382f7d15f4c85243b1ed822ab570e1ab389d3c89f9ca9c89740e77b41a5ab5e29d13958b3a77f85b63941914caa4d9145b8fb04e30f1379e1a49f6c979e5991966614d1f84762289f39d63a7dd55ce43b99c3381828fc1490eb2b083211fd739edd6d0cf01f93b212bed921d5e4e4abfdb976293ae67bc46bdaac0acc60c5efe02d7f0806887814faa75388f1ef7bc3c7dd305b3742526531382161354163a62531214a361fab3d73532ceab31513d38256553dcdaac95b690eb411018dc87d71b8e98ff77367c30f82dde110424f0807fba649b78b478dca550f6117039882420490995e7f7e56aa57ad8f5e3c785170fcafa48330106cf749ec7edf205ecca80832cba55996bdcc9ca7f696ff344783d7537966d0262a9c4d6a413ca3f5bae5cbd5544ebb9508dbec0153463493196efd6ec4e03d04365b1d066f9da84da9fa954a10843b8bcfea469db518e22691e170251254456d8250ab701aa1aef5059921ddbb6790ee4031df8784c45707e0ff1dc2626dcea6bf9174a93a95dc4c8b64112af7092ca98d7c75ad84503960de60482f6331193a075524cd36e6f8387108fc52e9edb1e626ccca7da9268e91f788c7581aaba9cd8c61aa3ab244d93efc972bddfc91427f2a055bc35fa5a904cdda98337b965ab336d2ec917416257d2102573d88afe6d8734e0564b0b1a96afdf2ba7ecea66b6a7fca98aa42b13e170c257eda156f476ce302cab3be12fd343bff0f1e4362556c033ec9c8dbb5fda173f9ed56de9217e33d35d7605a41be593044ab98de30972b9e6e6f925ce32d2b78794cec620e7b7e54604737d1eca0103368aa33a8dc32836e934456e144f4a0ea14d941845ee979a89138de1b61afb9b88f7cfa7d4811597581195ac92a6fa531c228668609dd545cf8e315e5d4d37d82446f261e062c969b221be23512b9cb0744752a27aa9331d9313b6f4b0c33ec641adc347b02e9c68711e7c2bfcb140220d4e5d4482a4f5be04b3adc10a729752cb60d4518d30d06eb04b1668fb06b98f4eb59a049f41e6fadee2665836391e9450e42a274caf24c09bb6f76a9f2154f902f1404b4ee41a8edc2e7735d57c511a9528aac97b028a2d5e1c6ebc54bdb7ab5f4e88f15c6ca186b861cbad91df505b97fa0270e69e995ad824548876dda40ab34d534e74dbeedd5f60beee0895b7e9c7518f17fa22ed8659e5cb607024b7cb83bab65e90272f0500b4b4afdd0894c34b17852b864850415e60b7a1abf576a9f8464c13928ed1a2551827ca0fdbd79142f20fd56b31e03bf6a0f52b38e228d68278e7faa4991ec70e1bfc0fb27494bac7779977e6d18259284a14600ea01397585e897ac0be12a0866996c8716d2f4f14e97483216c10efd64e47571ece3b4e93dd1045e358c9a8360a245b6b92149f94d1abcd1533e15b4d2bb5d4c7b9c02f231512c9026b12908c439189d28941cc867772ea06eabde0a980da9b82686c1a8c530874dea3f52b831a516816e5099555e285425607a00eb581780d10e9b261810bd28d6f5325cd3b2e6f5fa20d8d83365b3a3db52b82eb86e905ea01ea067941b4f2e50c71f01eb30520ad90446776bb759eed83e6e862f19c426f0fb720d36121846f4c047b239ed5655cbc91897af4b1d32f1c0548b7894e3df5fce2935f2510b830bd2316263f691d13f539e55f6126b375becccf08fc538a105ffc8236085c8fde657e6b0c6cb62bcb7b0a3c9c8f27065dfbd5556ab11b15296f6bc04b729b52d420f6b2e07d07aca4a555a75f94853ff1a7adc17ccaf42d7587084288e7e67326764851756e03206698057f01dde75dc2f79fd483af096f8e3a13ac4e1be3bbf58ffba8c1935741e40e1abb377a61a495a4af11a67699824d6fcf74584aefe625833c017ef11cd9ae462f7d0246ab321f3c9313c18432980f81f7078f7476a78821cfb95e19fe1edb6652049ba2eb7e6ee8969e4e3a22c1756a47f0c6c44466fa59256da1c3bd4ad34f5f13b7cd64926a0de55f5448f25ddc3a619c3dc84700480a0be2a718483d468bb3cc5ab0b428b253abaa700b0bca8e37ad0569191884439cedd2d0bdb1036719f3bfce4d8d871527b6bfca6c2457d7c1f1b334e2db3b99eccc78ab83d8e5250546fd033d8271bd060031a8807332e587cd2c2ad87c80e38ac675cf98c603dfea1bc30aff805d5af8f9a17abf83642e07ac9dd86066611d81093f5aec46d2e0fb6a62c1388f67dc62a0ea7e0fdbae60b349684f158aa687ed6e5747b09af4eee0836f0829f6bcfb5865984ea9a7f0a167075fa1185874358a4f24a00516bb6b98c2c48d06e761ad73dfb063dff39aa143d26c91efaa5f5d11dec121698c8bd75a74dc45a94987bc02f93322233bcb5bbd02c194c3a0f101be33b39a83b85200e9c7e4d2990285b5748cf669911d323e31912d0d0fa299342343c95d752cb85ad29f23c1deb805082a8550c36dff20121f39c620f0d2fcd41aa3d95e9fd28013684a6ba8e6b60b589e358401fac1cee20798a62214f5b32ee11c2771129e86281f6d2d8d508bf13fb05ace712322d762dc6d52cc678f5fc3d863060e30eb4edf3843482cff67c45cf3d774f176026f414cbcb5d55c8b6487d315806886bc8053b65ba9fdd5547c4e35afea213bde107cf7230c56ef9d1d3344aada0652c90d89a7e7093c88761b6cd45fd2d3aa74a5f67e4411df71c2ddf0a91ba044ba21d8a9bbff09e7f29340040c238438bbebdafaa7cecd2734906f0bf90478253efdea118a3a050740f5bf2e94d2f437cc1cc7d3f8f1565848408aa7852eeb1068aff89990362dcff88e1182cac292038036a123a2c266e80544b35e2d97261381b8d36f7132f19484823c09b979f72251fdafbb74048833f0e6ff156381dd9c4a37085995d3f356d63ca806d98b8d327cdc2cbed524d646a5d4cf8e2d822b8c222689f1569b3b9f59efa58679982d723287c20fd1ec772b083b00b1296c82f7c95c27748849c0f358ce496a8805bd00dbb9a10721e285817955370614aa7e82e83fbefb97bb2d0cd64df7152de6249a89b6f8153544bf6aa3e9949c7514b9bf197c54a160e1054a6fd89f4091949ab01f68818bf3244e1f72991b2d72636b35d3b0daba7e16d7f61df08bc770915321cc2f9e5219eadb1e60b52a4a7db972f94e88885f96bd7f5d40a9eefd863691ca0402513c6bfdc71c7a58eb22608ce4fc900b0efb977f080f328d01b55861ba494f4c13907233c7b4347584fa3d6c137bdaa3fe988259d62136759c73a25aeb6eba7c7639ebc2e002f97070cc4aa3e9025f3536ff5df9e5b5feaaddf9147d46988b4338a82a1dbc2c7156c3c02953f7cd45b29b2b5a3d945ee113939fe6ae6e7db8983e2f0d2e6bd4e80bfd2a87af76cf9e62e1c0754e70d50d6b95e861e21ca2a5c0a29a68ea87959c3610d07933f45485d89631587e71bfd167468774e9052fc189bea0", 0xded}], 0x2) 19:02:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000060000000000000000000000000000000000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000400000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa00006e0000000024ffffffffff0000000000000000f0000000f0000000200100006c696d69740000000000000000000000000000000000000000000001000000008e6f480031121d2600000020020000000000000000000000000000f8ffffffffffffff0000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001100000000000000002f7eb54a6e3000000000000000000000006c6f000000000000000000000000000044fc736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa006b000000000000007000000070000000a0000000415544495400000000000000000000000000000000000000000000000000000008000000000000000000006db6bfa035"]}, 0x2c8) 19:02:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) [ 74.974355][ T23] audit: type=1400 audit(1679079759.562:182): avc: denied { connect } for pid=3981 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.994380][ T23] audit: type=1400 audit(1679079759.562:183): avc: denied { ioctl } for pid=3981 comm="syz-executor.4" path="socket:[19852]" dev="sockfs" ino=19852 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 19:02:39 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="b39e3f") 19:02:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="0cedb091a1d86fbdae193e6fb0da6b7eaa748a2e65f79bfa5894888c422f35ac4c0ea5ca1131ea17004e5512a137334bd9db172e3421337de74092ff7094032fa3ea38d11bceec7728db66642f58bf5c0162d28caf88c4eb33912c7bfa7dd5ec3912877be0155143bd5de49267cb41ed5ea6031f7adf7d9744020761747debc2a4e698c1266fb2fc59210c8425c79033748a1be23b132457c6082e5f600a1d0bfd3599a997ed07bdfc6af6b666c8afc70f1bf427d17711a723cbae2f5e76c080bd334b94e91b9c363a9068db8cba68ddda296b88", 0xd4}, {&(0x7f0000000400)="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", 0xded}], 0x2) 19:02:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2c8) 19:02:39 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02b447", 0x10, 0x0, 0x0, @local, @local, {[@hopopts={0x2b, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 19:02:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000300)}, 0x6eb32a8a29634abd, 0x7f, 0x8, 0x4, 0x3, 0x200, 0x9, 0x0, 0x7, 0x0, 0xff}, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) r5 = syz_clone(0x20000, &(0x7f0000000480)="db71b3fa7c8eaa6463fd6e62bfd1b46dbdc489c0bfe4756de5aa84d79688c9778460f43199a5ea74108c33f6d7771152f2a05f8591386a77c82590e3fb42088e20bd07e1d042eb083afc7926", 0x4c, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="f1a09f198479517ba1fc") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r5, r4, 0x0, 0xfffffffffffffe7a, &(0x7f00000005c0)='\x00@\x113\x1b\xc9\xf9\xd4\x0eA!\xe8\xd8\xe0\x8a]\x00\x00\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 19:02:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="0cedb091a1d86fbdae193e6fb0da6b7eaa748a2e65f79bfa5894888c422f35ac4c0ea5ca1131ea17004e5512a137334bd9db172e3421337de74092ff7094032fa3ea38d11bceec7728db66642f58bf5c0162d28caf88c4eb33912c7bfa7dd5ec3912877be0155143bd5de49267cb41ed5ea6031f7adf7d9744020761747debc2a4e698c1266fb2fc59210c8425c79033748a1be23b132457c6082e5f600a1d0bfd3599a997ed07bdfc6af6b666c8afc70f1bf427d17711a723cbae2f5e76c080bd334b94e91b9c363a9068db8cba68ddda296b88", 0xd4}, {&(0x7f0000000400)="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", 0xded}], 0x2) 19:02:39 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02b447", 0x10, 0x0, 0x0, @local, @local, {[@hopopts={0x2b, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 19:02:39 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 19:02:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 19:02:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000060000000000000000000000000000000000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000400000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa00006e0000000024ffffffffff0000000000000000f0000000f0000000200100006c696d69740000000000000000000000000000000000000000000001000000008e6f480031121d2600000020020000000000000000000000000000f8ffffffffffffff0000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001100000000000000002f7eb54a6e3000000000000000000000006c6f000000000000000000000000000044fc736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa006b000000000000007000000070000000a0000000415544495400000000000000000000000000000000000000000000000000000008000000000000000000006db6bfa035"]}, 0x2c8) 19:02:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="0cedb091a1d86fbdae193e6fb0da6b7eaa748a2e65f79bfa5894888c422f35ac4c0ea5ca1131ea17004e5512a137334bd9db172e3421337de74092ff7094032fa3ea38d11bceec7728db66642f58bf5c0162d28caf88c4eb33912c7bfa7dd5ec3912877be0155143bd5de49267cb41ed5ea6031f7adf7d9744020761747debc2a4e698c1266fb2fc59210c8425c79033748a1be23b132457c6082e5f600a1d0bfd3599a997ed07bdfc6af6b666c8afc70f1bf427d17711a723cbae2f5e76c080bd334b94e91b9c363a9068db8cba68ddda296b88", 0xd4}, {&(0x7f0000000400)="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", 0xded}], 0x2) 19:02:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2c8) 19:02:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 19:02:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 19:02:39 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa2000008) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x280) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa2000008) 19:02:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 19:02:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000300)}, 0x6eb32a8a29634abd, 0x7f, 0x8, 0x4, 0x3, 0x200, 0x9, 0x0, 0x7, 0x0, 0xff}, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) r5 = syz_clone(0x20000, &(0x7f0000000480)="db71b3fa7c8eaa6463fd6e62bfd1b46dbdc489c0bfe4756de5aa84d79688c9778460f43199a5ea74108c33f6d7771152f2a05f8591386a77c82590e3fb42088e20bd07e1d042eb083afc7926", 0x4c, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="f1a09f198479517ba1fc") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r5, r4, 0x0, 0xfffffffffffffe7a, &(0x7f00000005c0)='\x00@\x113\x1b\xc9\xf9\xd4\x0eA!\xe8\xd8\xe0\x8a]\x00\x00\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 19:02:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 19:02:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 19:02:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa2000008) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x280) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa2000008) 19:02:40 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 19:02:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 19:02:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000300)}, 0x6eb32a8a29634abd, 0x7f, 0x8, 0x4, 0x3, 0x200, 0x9, 0x0, 0x7, 0x0, 0xff}, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) r5 = syz_clone(0x20000, &(0x7f0000000480)="db71b3fa7c8eaa6463fd6e62bfd1b46dbdc489c0bfe4756de5aa84d79688c9778460f43199a5ea74108c33f6d7771152f2a05f8591386a77c82590e3fb42088e20bd07e1d042eb083afc7926", 0x4c, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="f1a09f198479517ba1fc") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r5, r4, 0x0, 0xfffffffffffffe7a, &(0x7f00000005c0)='\x00@\x113\x1b\xc9\xf9\xd4\x0eA!\xe8\xd8\xe0\x8a]\x00\x00\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 19:02:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa2000008) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x280) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa2000008) 19:02:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 19:02:40 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa2000008) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x280) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa2000008) 19:02:40 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 19:02:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 19:02:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000300)}, 0x6eb32a8a29634abd, 0x7f, 0x8, 0x4, 0x3, 0x200, 0x9, 0x0, 0x7, 0x0, 0xff}, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,