last executing test programs: 6m7.537282635s ago: executing program 32 (id=1330): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m24.229890777s ago: executing program 33 (id=1985): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00a9bd14656f52d1c87000fedbdf24ac14140f000000000000000000000000000004d60a002b00ac1e"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 5m8.614122085s ago: executing program 34 (id=2312): syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000300)={0xfff, 0x83, 0x4, 0x4, 0x2, 0xfffffff8, 0x8, 0x8}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb080009400000081d060004404e250000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m6.230017531s ago: executing program 35 (id=2358): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) 4m48.985240341s ago: executing program 36 (id=2639): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) 4m39.153036955s ago: executing program 37 (id=2770): sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x46, 0x0, 0x3, 0x3}, 0xc) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 4m12.776185957s ago: executing program 3 (id=3159): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m12.377138809s ago: executing program 3 (id=3170): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffca001}]}) setgid(0x0) 4m11.815266497s ago: executing program 3 (id=3179): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x2000}) 4m11.495299408s ago: executing program 3 (id=3189): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 4m11.201049677s ago: executing program 3 (id=3194): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x2003) accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m10.879431757s ago: executing program 3 (id=3202): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x75fb3000) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001480)=""/4078, 0xfee}], 0x1) 4m10.81675559s ago: executing program 38 (id=3202): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x75fb3000) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001480)=""/4078, 0xfee}], 0x1) 4m9.331770377s ago: executing program 6 (id=3208): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1555}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m8.982164898s ago: executing program 6 (id=3209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4m8.893927911s ago: executing program 6 (id=3211): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 4m8.823357433s ago: executing program 6 (id=3212): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 4m8.466819354s ago: executing program 6 (id=3214): syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000180), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4m6.666155132s ago: executing program 6 (id=3225): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) 4m6.643983182s ago: executing program 39 (id=3225): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) 3m14.028748691s ago: executing program 2 (id=4041): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r0 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) io_uring_enter(r0, 0x2219, 0x20000182, 0x16, 0x0, 0x0) 3m13.908339445s ago: executing program 2 (id=4045): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 3m13.863264196s ago: executing program 2 (id=4046): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x3}, 0x100040, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) 3m13.735091071s ago: executing program 2 (id=4051): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 3m13.544373457s ago: executing program 2 (id=4057): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x200}, 0x106a02, 0x10004, 0x30db, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 3m12.986183244s ago: executing program 2 (id=4067): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) fallocate(r1, 0x0, 0x8001, 0x6) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m12.971390725s ago: executing program 40 (id=4067): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) fallocate(r1, 0x0, 0x8001, 0x6) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m7.270132577s ago: executing program 5 (id=4126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x12, 0x2, 0x0, 0x0, @binary="5eddc49329c010370b651f8355fd"}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0xfffffffffffffda1, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x4e22, 0x8001, 0x0, 0x80}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x3}, 0x70bd29, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21}}]}, 0x170}}, 0x0) 3m7.218094369s ago: executing program 5 (id=4127): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(r0) 3m7.081676023s ago: executing program 5 (id=4128): eventfd2(0x7, 0x801) syz_io_uring_setup(0x681b, &(0x7f00000006c0)={0x0, 0x1, 0x800, 0x3, 0x4000179}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010140100", @ANYRES32=r1], 0x30}}, 0x94) 3m7.034964744s ago: executing program 5 (id=4129): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3m6.535434851s ago: executing program 5 (id=4132): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m6.513431861s ago: executing program 5 (id=4133): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 2m51.49639588s ago: executing program 41 (id=4133): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 2m47.168684049s ago: executing program 0 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x43, &(0x7f0000000140)=ANY=[], 0x0) 2m47.12596374s ago: executing program 0 (id=4395): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2m47.026195623s ago: executing program 0 (id=4396): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c00000027bd700000000000020009001000000001d700000000000003000600000000000200000000000000000000000000000002000100000000000000030e00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}], 0x10, 0x20000000}}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 2m47.020535963s ago: executing program 0 (id=4397): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") io_setup(0x202, &(0x7f0000000200)=0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) fallocate(r1, 0x0, 0x0, 0x1001f0) io_submit(r0, 0x0, &(0x7f0000000540)) 2m46.122636522s ago: executing program 0 (id=4415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="95e75fce2e4a9f1e08b17a4efc38c8dc3af7971dfa854b2fd50196071caf27246c96f805a9c9957421067e1b2b81796d947b50366e4b9d157912edc1d975a85bc98b21172b91ee8b425a49b95581ac5ff9859ac40ac482f266d22e6fdaeb0afcf0d2babfc96706b85eefba43bedcd5167906a2dc3f9a11029463017b7eac11fe9da0db90d39ea0613623a4134c9ade9ad25584c2abe57274e1082c7bed7efa6dabd1c5dc82cf8e71757ac7c9ec5a230e60b4fcd1e53b13de61c620f1abae7e0235daa31ad7258b83b1709024dd9fac718e467ef4ff68ddd0b49a54ad0fd717d60a49fb3922ccc68b3aa01667b246a4a8048f1a64272e8cf885ef14acc42caa11c4ee6d9bc3e10333fbc333a14b9eeee3b1edb11274f978da8eb5c51e698745d3041741c09beb5bc1b4b73a83f7d8fc7b0d6e199a8c8c051cd9272816b0e7d8739d1f37bc0aa9dbed7acc3dbe9c15e81a9c63d85139fd546002af58869d6da76e1081f880265af113c1a2003b04f4fb58a633be5857392f8e9fd7efc5db58f1fe5efdf2bb75e9f536583d86770dc4bebfdc682de52a5c1ffa282bcc0348e78d8ccd2bb33e469242a0b742415b7040218bad07a0f47e14d85d4adede91b633f3549bb58bcb6e683fccc1d08b9a3beabf3f0b33e8bd351571cb02632ffed7452770276e6769c5796960eaacf40b7bf714bcaf2b3eea75e51137e2d9e5fef76eb09a858c100107f7aa52c351020473c4d6ad6cd05c0c552ac8acd5d4fb88213dcb96285845564f2213aa5f7faef8d0afbfae02897adbd7d663adf0cc84349f1a7b67b9eb625a6e0ce5f6cacd7cdebddecc2baa489ad352fef6ee97681fe5616cae7e01fb31079cd91b5d127cfe54bf664ae266a79ef205728ac61458a91deb2b1868ee9e386821edad50951df31b4754c58679af33610712ff6e4845fe60edb51f874afd80587619e7625471e52185f547861167efbd03c985a973e6b21c477b3d125d67c6695c84cd364c05219d6d8c496d5b3e91ca657f6ad32fc24c0a464de95ddfe6c4bc5cd577a8eea6777c98b5e0f9c6ac30134f37ee4b691728e2897664bf8e7407c1b9045687b2aaa2d2581a7d104e825ef63d1bd50c18e342aeb2f1c60c8810ea3332e1ad7a1d65f9d927cdae59dda74c45bf2df2c844b42cbdd0e886caf8fdc29da89d629d4e0734367a44c37ff7d34f8a89fa056be6df79400a68f0901a18e45eb55531f2b1cb096a835050606bb30ea50114b4aa13d79a68db053a4ef9a7673ade61343e7e4fdba0f6e7a726d60839c4f427098778bd33a40220c763a5b06b3e0ae2ff793b86049b75d5cfbcea234eba56cb79ea12adf8838e2d64570809e81618f4dc464b7421b61143d4e3451cc01ea28b136c0e3ccbfdf55f8aa76a4efa06b45ab5c310b63a59cf040cc5c50dccef197ccf9fd3baaabf642542ad2579eb77a591d8a58daa729922ab0111c72e6985d59161a165913c58054c6f18c5da4dcd5e7ce896dca47e7e987231d23f71ce1f49a3adb0dd4c64d01f4f3ed6c8441011bf298edd7439bfa8b4e4a535f536e73882b9d4457733052ba52adf480c08d55781334dc8bce8e3ec05e1155d6076243a887e0207c6ac532aa84ee679b9b1095ec714be1329c2cf6b189bb43cd874833e11410e250b02847bbb714f60113962a8d1da1ed354f49cf183cf4c72ab3f84bd3c00d097e15b6b66072454d1b81c2aeb9371298b661001b8e9d80fcbffa7fced89a2bbf19ef5910ce22aabc2817d84e20c50dba88a02581351bbe504569eaf0119b3c9fe090f16280fef8c57c24666430801de2411b9dc2fb5abac54141437ee402b3a4b8b40c7b9155fbd5f798e98c50aa3c8aea6872ea9e44fb9ca5756a4b34cc950175929afc4cb82cf11b8042d2bf4c04b9c5654c8fd86ff480583f9586049ad74f7f49d1b491e19a333aafcf8a13cd84187ef19055e46233a2ecb6bfe1273573f66acfe9695decced9d6e4baa571b36f81f6cbf867bf857a8c32005f7c98bbadc03c8567f9f539e66ac399a112bdc73df5c2c3f39fec07ef1463461c4eba3d74504b3cd35a659745f678a909d3a136ef28262ebc5eeb65885c084c6c22bff471c3c620178ddbe2327087366e1db4fbde13a417a9687f4895082cabb42790a15d75466bea75b33191e8ab5c2dcb9e3182d04840eab8bfedfab767a1100bc0e82ebf0d10a3c6a5c1902b55efc2b4fe31d7186bfadf6d8fce943037b3aac3b501e0fd7eb718424086ef72418515d590e028c61cd94827ec9d847951e85f347a7c4601f5701142d23c8ac6e7f6e70fef1215202a266373ef4202b6b621382ce339d7aa7182b710baab63c000819385d8f5bed1c0a2a7d2f07109e2d0e3c6af3fac9e7d66cd190a5ca362e70083117b6f31998513c87fe3484f8d45be321d293e5b1b85690326bdf299fc7fd4e09b9461ff0a001ed96ba3b886fd2c0ddafca26b91575b92fb6156e3d9cd13e718e248940be5b45fe326d9179725fff7df6a5f21d5ee2ec3dc5f651f843ea62bb2d63145428e92c4902af2a2a808ccaca3a8019bab4af0f5ff074b2b052b06492a4fc932e370e5101d3c325436ce4015c5aeab4f19e0f107b51bad902a7acc481001cb98b2cc799da4385d6dfee734ec2c752760cd7009571e4bc916d552f0adb84c8fb4886e871d83330c9d8cf1dc182b65cb1292c6dde42691f4d9db27fa5f9fad98c71fb4b202e46d5565a64809356adcc8526df734645b9ef49b1d72157313c675fb346653e2a35ce16a4133cb1696091616468118cef57d01d4e282c7e58dbc20e6c2738a8709691b20263cd92694c1c2d9d5f564c00832c9907750d400b8807e55cb135e279b5320dc5e560f1446958b0441dc2239b7ed2c02fdf1f999a8e228266fdbb0f2c76c4b6d0e9891fc4801907eb992d9cfa7fa9099f8ae7175a67749488ad3612fa25df2a0a3512352a54d0fcdb4a7470537ab181486a7557683d363971d2d9518b11d8ae62532a7780c47926ce63802e57819eb8effe7828109f81368f39dc85a31c70ba7119cba91bdc40d67e3376ba7c149e8de3da857bbeae053fcf9bb32d8c39421c36e1b6fadfa63629ab80d33692b26adec5518998e4b306db87b34141dbc838b821f86c3fdc24830f231365bc3f3f62f1df5181bb1fd95f8383b66ab3f22795c53d79938f92dba9f5ace6ce50d4e2a23c683e63d6aba1aaab898a7b61777eb234a9a5a31c7d767b01ae4488a2b3095afc44f35568225b1f4bcadc6ffeaa9ab356b9033a02ba6c2208331e544b419856ed5698e7d8297dc638f78b9b1a33b5ba3279714bc5c7248d2eaafd6765c90f941cc7db7384c34fde11bb368f73a3c00b2af4a86af24e0e30549754bf16168163d1f14db6e6a5e4d8ce4fb890c93007abc9397bc9436291b83ceb3f483b7618ce200d217d5e4e18706f0e8c85788e3f39e2fac7dce1d6a963f6dedeab2e7f461244c3e3a537fbfb5fc255721aad7a17884acc389f4b60372a12b28849b225975aa50e510248c4a420cc950c853def70083ac1fc1304717b8b88aff095ad1d12743378bd1e8c8a6b681af1f807fc96a938fca0e9d1ba837826d18bfcd1c11b67c7640bcbfdd458e4d52f471482b2d88220fe0f80a4bec9b3bc83b3db695e567bb8017ee68293de7c7b8e2f6cc7c4e2d24b5851242a502545aa63974ed89c9e5f4ec1a786b1574dce0aeadfe0e0e01bfb1c590227cdb7ed1c00232e7d5a2bf276813b0913410480709096515263ec8ddb3834bb7b6d7a66beebc4677d548a48da114a53219223aad72541ea225142615542d9551f57a7b21f154bb983fdd8f23fc1824d6f1f451f0ce2d4c9b72f374057f57598ed5a26fb75222d25d6a0722e19d078494560b0ebe26eb94c8e0eedce9652cbbedafb1e24057b9eff0cc601518efeeb154678d1b276ba5b23631e21e65f2eaa142eb8fe33c095139bc42f9aaf0187fd4e2981b66e8953ae84cc3ead8a531fe95d770bd9f8dcf4f943add0c1f23a73ff50903cc49828373f3a1e8f5c85ec41f67b1276156e88722875febc9ba6840eb497b5fbd6f2cff134ee13b0501a5193f8674aa22ecdc9d0b92e678294ea75f8614d578ff0130d67ca009d7c04c6a5cc3b3f4416fb71a379c3b5a59ea585e3c98fcca25496f72cf6e2500397873f030c8abc9fe759483805cf3f51881b51f57209b5c9a41bf79130d08249f6a099fd69b52ab7616d5350607a2989ce46b8a429e7c34ed3ff0ad44372e5b5a0d179dae20af31288c242a41e59f894ca84059db65fed3b3849369474892a858454418b70f8b3f2274e7b156d9939cf929d68f8a3f28eba66b3fa9282eb86b572a9b1384b5335ee75e2ee999c0636ce7e6444e4f82e3b60c0d07e19a98906c9ebc031fa7535fc6395ad3f24b0e730cfcbac6efa20b9b39a9e0081d6a363207dfa5344df81af9d69707e4f19a07c31c0d4cbb7e1b59fc4641ffb13a3f818cdb01a5a160a7307e2f21658a3d0901ba669fcd2807ea74b22c1d7f478ec31a9307c6a8078d03b1ab4f7f37adca2908e31289f36e78dc4b4106df634275222e5af1f32a3176e4f743083819237f8b45f4edc74e8171a3873c86bbbe2dee3e6b2cd8c755b21f1d8e46330c83abef598abef3a40e9ac8a25362b8635329967e5087b4ad72cda48770c7f44e3eb694ce02d0d285d7694020dbd67d237475b5dea37506906d2f55d6e3ce0e8e161281cc0a8c22627a1c282b09499969f61c45c52e89544bc4dfa97b0b708367ee4d5f9b8a996cccb3c4e2fe68b7b74354724fa7fd44a4ff1b10b9da534e86b98d1c117e93e284f17aa54ccdcd0d91f1fde08a3c725496f6d5f1ed7cb1216cf3e18d8079d3cc59d720c958a0ac4981eb6af81db10cb3935c582bfc174235d98d7457cea15a7a7ec1710058784d2d0afcee549ced77ea1e179ba877a862cffb39cc3fdf80c514d32b41c180fd09dccc073949f9fc2b4fccae13b8ee35677b7de662c8557a79c576b31fb3eea81a586b7c6c066b4d8e8ae87c27fecb915e1d512e07e6b9e37245a036629214d522cd5235fda7c991c637703c8f674fdb73774c9408b97bcd813c01eb0bf771e44318ab4e8eb366b8fa65e62f8a17ba58ca4a72158e105e3b54b7d60c9c2eab1f69df24080b5794a83e22e1a210cc8be279a7da3c3b05d9193b9a4dcec59aaaf8f33ef4e1e9364440270f49bf9c8e2a02012be4f010e78a5a9fef4c8d4b24417050672d79fbc318191a305b05ea3070abf07272ecbf6d332c2419b05e1347cdf7b28befc99591c1f4e3524a13f5cef8736223b402e1dffea4a083f76ac309b3d194a911faeaf67f610d902688ccb278c17b28fe319176430ba691ef89d61ba352f78398ed2df19b700d818c1ecaacb7a05359c7931a363f64309114ebda90db16e254fcb4708d08d84e7448ca67d9771c182af56b597d231f86b3fececdf11ad7080a230ab1e6f7e6ea5a0367ad1b15002a86153eea6e1ce167ee19e4ca52ba1dbb82bdd54f249eaec3195548ca30a62bd75e2d62be9015a77900b8b91b60fd67b8f6db5ea1e0e48c9e422aaafe2b619eb701cd0b047af24ecc5971b3cbb4b9235b9a85eb0c66aca8d3f43b015cf49f4cf0d3df1bb75b6e92a276fd0edacd3ee953b7b5c75eff053060c"}}}, 0xfce) 2m45.447199083s ago: executing program 0 (id=4424): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 2m45.437278223s ago: executing program 42 (id=4424): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 2.744871691s ago: executing program 8 (id=8259): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2.281397216s ago: executing program 8 (id=8261): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xabd4}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 2.016562285s ago: executing program 8 (id=8270): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x3, 0x3, 0x2, 0xffe, 0x1, "e7ffb2133348b0ee5d54ffffffffffffffff00", 0x9, 0x201}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 1.928796208s ago: executing program 8 (id=8284): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/175, 0xaf}], 0x1, 0x9, 0xfffffff6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x2004) 1.713929554s ago: executing program 9 (id=8277): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) 1.647423397s ago: executing program 9 (id=8279): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x8, 0x6011, r0, 0xffffffffffffc000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4c054}, 0x4000) 1.24253349s ago: executing program 7 (id=8285): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1.204973521s ago: executing program 4 (id=8287): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r1, 0x0, r4, 0x0, 0xcc1, 0xc) 1.204799471s ago: executing program 7 (id=8288): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x840, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.204519931s ago: executing program 4 (id=8289): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f00000007c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_lower}, {@fat=@fmask={'fmask', 0x3d, 0x2c}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x9) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r3}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xd, 0x0, &(0x7f0000000000)="c918218ef61002ff4284860186", 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}, 0x1c) 1.075509825s ago: executing program 8 (id=8293): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.029718996s ago: executing program 8 (id=8296): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") clock_gettime(0x0, &(0x7f0000000100)) 808.570424ms ago: executing program 1 (id=8301): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffd}, {0x1, 0x1}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 746.169205ms ago: executing program 9 (id=8302): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r5, 0x1}, 0x8) 745.916966ms ago: executing program 9 (id=8303): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000004380)=""/4124, 0xcde) statx(r0, 0x0, 0x4000, 0x40, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@empty, @in6=@mcast2, 0x4e22, 0xe159, 0x4e21, 0x6, 0x2, 0x80, 0x80, 0x2c, 0x0, r1}, {0x6, 0x5, 0xb33, 0x6ba, 0x6, 0x8001, 0x5, 0x9}, {0xc1, 0x9, 0x6, 0x10000}, 0x8, 0x6e6bbc, 0x1, 0x0, 0x3, 0x2}, {{@in=@loopback, 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x34ff, 0x0, 0x1, 0x8, 0x5, 0x8, 0xc7}}, 0xe8) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x810406, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0078060768445286c2e53fefc3c67421ec827187ebfd4df52ccae39d63824b4bfff9bfeadbb378b88f60ad031fa70ce36604abd4793c74d7490aa127afa788d629ecf8edd1a27f1c02e0e94b6c13665acb0b3e55bbc105b7670eaade79e7b7be76667ecd992349cca987ca0d38d9de67af3571b6"]) 739.459286ms ago: executing program 9 (id=8304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) close(0x3) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010103, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x86, 0x545}, @timestamp={0x8, 0x1d, 0x6, 0x4}, @nop, @timestamp={0x8, 0xa, 0x8, 0x2}, @exp_fastopen={0xfe, 0xe, 0xf989, "dbf57334f9b969d503ec"}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0x7, 0x80000000, 0x3}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x6, @broadcast, 0x3, "16e8ffffff000001"}]}}}}}}}, 0x0) 725.444266ms ago: executing program 9 (id=8305): recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xae31cbdd19173c73, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00\x00\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 682.506677ms ago: executing program 4 (id=8306): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x83}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x66f51723ebf194b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 606.09958ms ago: executing program 4 (id=8307): prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 604.67889ms ago: executing program 4 (id=8308): unshare(0x400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x58d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x44c, &(0x7f00000003c0)="$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") r1 = open(0x0, 0x24040, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x800}, &(0x7f00000000c0), &(0x7f0000000200), 0x0) io_uring_enter(r2, 0x0, 0xe38e, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) finit_module(r1, 0x0, 0x0) 563.005892ms ago: executing program 4 (id=8309): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r3}, 0x38) 537.128302ms ago: executing program 1 (id=8310): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_socket_connect_nvme_tcp() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x60, {0x2, 0x4e20, @rand_addr=0x64010101}, 'batadv0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 478.180754ms ago: executing program 1 (id=8311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) 343.024908ms ago: executing program 7 (id=8312): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 66.545377ms ago: executing program 7 (id=8313): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918ff00000000000000860188a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11, r0, 0x200000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x41, 0x9}}], 0x18}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$packet_int(r4, 0x107, 0x11, 0x0, 0x0) 54.702368ms ago: executing program 1 (id=8314): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 855.039µs ago: executing program 1 (id=8315): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000076d000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000977000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008e7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000092e000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7042, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8804) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, 0x0, 0x0}, 0x20) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x2) 478.16µs ago: executing program 7 (id=8316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 222.209µs ago: executing program 1 (id=8317): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=8318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008814) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 334.441141][ T7842] syz2: Port: 1 Link DOWN [ 334.455898][T19566] netlink: 'syz.4.5401': attribute type 4 has an invalid length. [ 334.465801][ T7845] lo speed is unknown, defaulting to 1000 [ 334.470489][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5399'. [ 334.471674][ T7845] syz2: Port: 1 Link ACTIVE [ 334.489992][ T7842] lo speed is unknown, defaulting to 1000 [ 334.524877][ T7842] lo speed is unknown, defaulting to 1000 [ 334.534696][ T7840] lo speed is unknown, defaulting to 1000 [ 334.540675][ T7842] syz2: Port: 1 Link DOWN [ 334.586756][T19579] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 334.622014][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5410'. [ 334.626511][T19579] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 334.662494][T19579] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 334.675293][T19579] bond5: (slave ip6gre1): making interface the new active one [ 334.683834][T19579] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 334.697882][T19587] 8021q: adding VLAN 0 to HW filter on device team1 [ 334.723791][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5414'. [ 334.820478][ T3727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.840736][ T7833] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.878303][T19607] lo speed is unknown, defaulting to 1000 [ 335.253471][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5430'. [ 335.426718][T19656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5439'. [ 335.441143][T19658] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5440'. [ 335.552925][T19675] lo speed is unknown, defaulting to 1000 [ 335.553806][T19681] netlink: 'syz.7.5451': attribute type 10 has an invalid length. [ 335.570008][T19681] team0: Port device netdevsim1 added [ 335.701925][T19695] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.731210][T19698] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 335.810557][ T6823] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 335.879423][ T3723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.887433][ T3723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.895422][T19711] lo speed is unknown, defaulting to 1000 [ 335.938605][ T6823] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 335.998493][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.242231][T19740] geneve3: entered promiscuous mode [ 336.250108][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.267521][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.284317][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.294139][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.690193][T19775] bond2: entered promiscuous mode [ 337.727627][T19905] syzkaller0: entered promiscuous mode [ 337.733211][T19905] syzkaller0: entered allmulticast mode [ 338.154045][ T28] kauditd_printk_skb: 532 callbacks suppressed [ 338.154060][ T28] audit: type=1400 audit(2000000715.381:6922): avc: denied { create } for pid=19909 comm="syz.1.5550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 338.205517][ T28] audit: type=1400 audit(2000000715.431:6923): avc: denied { create } for pid=19911 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.227262][ T28] audit: type=1400 audit(2000000715.461:6924): avc: denied { create } for pid=19911 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.249437][ T28] audit: type=1400 audit(2000000715.481:6925): avc: denied { create } for pid=19911 comm="syz.1.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.447586][ T28] audit: type=1400 audit(2000000715.671:6926): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.475754][ T28] audit: type=1400 audit(2000000715.701:6927): avc: denied { open } for pid=19917 comm="syz.9.5552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 338.480656][T19916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.529687][T19916] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 338.538610][ T28] audit: type=1400 audit(2000000715.761:6928): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.573928][ T28] audit: type=1400 audit(2000000715.801:6929): avc: denied { create } for pid=19923 comm="syz.1.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.594667][ T3727] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 338.595021][ T28] audit: type=1400 audit(2000000715.801:6930): avc: denied { open } for pid=19923 comm="syz.1.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 338.623967][ T28] audit: type=1400 audit(2000000715.801:6931): avc: denied { create } for pid=19923 comm="syz.1.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.699292][T19939] ip6gre1: entered promiscuous mode [ 338.706585][T19939] ip6gre1: entered allmulticast mode [ 338.715034][ T6823] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 338.818229][T19961] netlink: 'syz.1.5580': attribute type 4 has an invalid length. [ 338.837983][T19961] netlink: 'syz.1.5580': attribute type 4 has an invalid length. [ 338.922462][T19961] geneve3: left promiscuous mode [ 338.938116][ T6823] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.956791][ T6823] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.997987][ T6823] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 339.026166][ T6823] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 339.112845][T19999] netlink: 'syz.1.5592': attribute type 22 has an invalid length. [ 339.120785][T20001] netlink: 'syz.9.5593': attribute type 4 has an invalid length. [ 339.121057][T19999] netlink: 'syz.1.5592': attribute type 22 has an invalid length. [ 339.172052][T20001] ip6gre1: left promiscuous mode [ 339.177824][T20001] ip6gre1: left allmulticast mode [ 339.878519][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 340.442325][T20144] validate_nla: 1 callbacks suppressed [ 340.442334][T20144] netlink: 'syz.9.5660': attribute type 1 has an invalid length. [ 340.457552][T20144] __nla_validate_parse: 10 callbacks suppressed [ 340.457565][T20144] netlink: 63743 bytes leftover after parsing attributes in process `syz.9.5660'. [ 341.589450][T20235] lo speed is unknown, defaulting to 1000 [ 341.739723][T20241] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5701'. [ 341.865124][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5712'. [ 341.878057][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5712'. [ 341.912388][T20265] all: renamed from bridge_slave_1 [ 342.134121][T20277] xt_CT: No such helper "snmp_trap" [ 342.146328][T20277] xt_time: unknown flags 0xc [ 343.169440][ T28] kauditd_printk_skb: 567 callbacks suppressed [ 343.169454][ T28] audit: type=1400 audit(2000000720.401:7499): avc: denied { create } for pid=20337 comm="syz.4.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 343.207756][ T28] audit: type=1400 audit(2000000720.421:7500): avc: denied { open } for pid=20337 comm="syz.4.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 343.234870][ T28] audit: type=1400 audit(2000000720.421:7501): avc: denied { prog_load } for pid=20337 comm="syz.4.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 343.259568][ T28] audit: type=1400 audit(2000000720.441:7502): avc: denied { prog_load } for pid=20337 comm="syz.4.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 343.285300][ T28] audit: type=1400 audit(2000000720.461:7503): avc: denied { create } for pid=20339 comm="syz.4.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 343.310169][ T28] audit: type=1400 audit(2000000720.531:7504): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.336725][ T28] audit: type=1400 audit(2000000720.561:7505): avc: denied { allowed } for pid=20342 comm="syz.9.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 343.364662][ T28] audit: type=1400 audit(2000000720.561:7506): avc: denied { prog_load } for pid=20342 comm="syz.9.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 343.395685][ T28] audit: type=1400 audit(2000000720.591:7507): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.429544][ T28] audit: type=1400 audit(2000000720.611:7508): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.502092][T20358] netlink: 'syz.7.5753': attribute type 1 has an invalid length. [ 343.512163][T20358] netlink: 63743 bytes leftover after parsing attributes in process `syz.7.5753'. [ 343.628174][ T6823] Bluetooth: hci0: Frame reassembly failed (-84) [ 343.675381][T20381] lo speed is unknown, defaulting to 1000 [ 344.136687][T20415] lo speed is unknown, defaulting to 1000 [ 344.534531][T20456] syzkaller0: entered promiscuous mode [ 344.548136][T20456] syzkaller0: entered allmulticast mode [ 344.651504][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5804'. [ 344.672620][T20469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.684238][T20469] netlink: 'syz.4.5804': attribute type 1 has an invalid length. [ 344.695403][T20469] vxlan0: entered promiscuous mode [ 344.703271][T20469] bond7: (slave vxlan0): Enslaving as an active interface with an up link [ 344.714021][ T50] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.733376][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.749304][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.757593][ T50] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.794047][T20477] netlink: 'syz.4.5808': attribute type 1 has an invalid length. [ 344.820188][T20477] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.833036][T20477] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 344.852046][T20477] bond8: (slave vxcan3): making interface the new active one [ 344.864765][T20477] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 344.890665][T20477] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 344.902114][T20477] bond8: (slave vxcan5): Enslaving as a backup interface with an up link [ 345.648451][ T3809] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 345.648493][ T4209] Bluetooth: hci0: command 0x1003 tx timeout [ 346.081885][T20532] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.5830'. [ 346.093939][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'. [ 346.526767][T20545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5836'. [ 346.547516][T20545] bridge4: entered promiscuous mode [ 346.553490][T20545] bridge4: port 1(macvtap1) entered blocking state [ 346.560303][T20545] bridge4: port 1(macvtap1) entered disabled state [ 346.567243][T20545] macvtap1: entered allmulticast mode [ 346.574165][T20545] bridge4: entered allmulticast mode [ 346.580122][T20545] macvtap1: left allmulticast mode [ 346.619540][T20545] bridge4: left allmulticast mode [ 346.627975][T20545] bridge4: left promiscuous mode [ 346.865652][T20570] lo speed is unknown, defaulting to 1000 [ 347.189512][T20594] lo speed is unknown, defaulting to 1000 [ 347.413907][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5863'. [ 348.371298][ T28] kauditd_printk_skb: 437 callbacks suppressed [ 348.371318][ T28] audit: type=1400 audit(2000000725.601:7946): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.423621][ T28] audit: type=1400 audit(2000000725.651:7947): avc: denied { name_bind } for pid=20641 comm="syz.9.5879" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 348.448464][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.694493][ T28] audit: type=1400 audit(2000000725.921:7948): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.735670][ T28] audit: type=1400 audit(2000000725.961:7949): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.763125][ T28] audit: type=1400 audit(2000000725.961:7950): avc: denied { create } for pid=20645 comm="syz.8.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 348.784961][ T28] audit: type=1400 audit(2000000726.001:7951): avc: denied { read } for pid=20647 comm="syz.7.5882" dev="nsfs" ino=4026533049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 348.824621][ T28] audit: type=1400 audit(2000000726.001:7952): avc: denied { open } for pid=20647 comm="syz.7.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.846330][ T28] audit: type=1400 audit(2000000726.001:7953): avc: denied { prog_load } for pid=20647 comm="syz.7.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.865709][ T28] audit: type=1400 audit(2000000726.001:7954): avc: denied { open } for pid=20647 comm="syz.7.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.887872][ T28] audit: type=1400 audit(2000000726.001:7955): avc: denied { create } for pid=20647 comm="syz.7.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 350.026905][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5934'. [ 350.041252][T20767] bond9: entered promiscuous mode [ 350.454770][T20782] netlink: 'syz.4.5940': attribute type 1 has an invalid length. [ 350.469656][T20782] 8021q: adding VLAN 0 to HW filter on device bond10 [ 350.484497][T20782] bond10: (slave ip6gretap3): making interface the new active one [ 350.493781][T20782] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link [ 350.879822][T20833] netlink: 'syz.7.5963': attribute type 1 has an invalid length. [ 350.893791][T20833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.909486][T20833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.917354][T20833] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 350.929848][T20833] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 351.010605][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5968'. [ 351.062136][T20844] bridge5: entered promiscuous mode [ 351.068678][T20844] bridge5: port 1(macvtap1) entered blocking state [ 351.075359][T20844] bridge5: port 1(macvtap1) entered disabled state [ 351.083786][T20844] macvtap1: entered allmulticast mode [ 351.090332][T20844] bridge5: entered allmulticast mode [ 351.096399][T20844] macvtap1: left allmulticast mode [ 351.101719][T20844] bridge5: left allmulticast mode [ 351.107389][T20844] bridge5: left promiscuous mode [ 352.055805][T20923] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 352.084509][T20923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.094837][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6006'. [ 352.117827][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6006'. [ 352.141840][T20923] macsec0: entered promiscuous mode [ 352.147087][T20923] bond5: entered promiscuous mode [ 352.154321][T20923] macsec0: entered allmulticast mode [ 352.159779][T20923] bond5: entered allmulticast mode [ 353.096282][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6020'. [ 353.105990][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6020'. [ 353.345391][T20997] IPv6: sit1: Disabled Multicast RS [ 353.417553][ T28] kauditd_printk_skb: 454 callbacks suppressed [ 353.417568][ T28] audit: type=1400 audit(2000000730.641:8410): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.471653][ T28] audit: type=1400 audit(2000000730.681:8411): avc: denied { write } for pid=21001 comm="syz.8.6038" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=0 [ 353.501705][ T28] audit: type=1400 audit(2000000730.681:8412): avc: denied { allowed } for pid=21001 comm="syz.8.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 353.533883][ T28] audit: type=1400 audit(2000000730.681:8413): avc: denied { map_create } for pid=21001 comm="syz.8.6038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 353.560113][ T28] audit: type=1400 audit(2000000730.691:8414): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.587970][ T28] audit: type=1400 audit(2000000730.731:8415): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.615212][ T28] audit: type=1400 audit(2000000730.761:8416): avc: denied { allowed } for pid=21007 comm="syz.4.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 353.635155][ T28] audit: type=1400 audit(2000000730.761:8417): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.645313][T21010] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6042'. [ 353.682585][ T28] audit: type=1400 audit(2000000730.791:8418): avc: denied { prog_load } for pid=21003 comm="syz.8.6039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 353.714779][ T28] audit: type=1400 audit(2000000730.791:8419): avc: denied { allowed } for pid=21007 comm="syz.4.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 354.391703][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6059'. [ 354.407224][T21049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.422398][T21084] lo speed is unknown, defaulting to 1000 [ 355.920752][T21138] lo speed is unknown, defaulting to 1000 [ 355.954713][T21142] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6098'. [ 356.062648][T21156] netlink: 'syz.9.6104': attribute type 1 has an invalid length. [ 356.078789][T21156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.094964][T21156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.103546][T21156] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.114970][T21156] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 356.169820][T21163] 6: renamed from wg2 [ 356.511603][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6119'. [ 356.764684][ T6579] bridge_slave_1: left allmulticast mode [ 356.771533][ T6579] bridge_slave_1: left promiscuous mode [ 356.792142][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.824064][ T6579] bridge_slave_0: left allmulticast mode [ 356.831443][ T6579] bridge_slave_0: left promiscuous mode [ 356.846441][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.065904][ T6579] bond1 (unregistering): (slave geneve2): Releasing active interface [ 357.121614][ T6579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.131584][ T6579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.141193][ T6579] bond0 (unregistering): Released all slaves [ 357.149005][ T6579] bond1 (unregistering): Released all slaves [ 357.157567][ T6579] bond2 (unregistering): Released all slaves [ 357.191867][ T6579] tipc: Disabling bearer [ 357.197229][ T6579] tipc: Left network mode [ 357.218818][ T6579] hsr_slave_0: left promiscuous mode [ 357.224398][ T6579] hsr_slave_1: left promiscuous mode [ 357.231678][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.240796][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.248391][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.256065][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.271345][ T6579] veth1_macvtap: left promiscuous mode [ 357.276899][ T6579] veth0_macvtap: left promiscuous mode [ 357.291223][ T6579] veth1_vlan: left promiscuous mode [ 357.296574][ T6579] veth0_vlan: left promiscuous mode [ 357.387039][ T6579] team0 (unregistering): Port device team_slave_1 removed [ 357.400646][ T6579] team0 (unregistering): Port device team_slave_0 removed [ 357.417973][T21240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6140'. [ 357.474145][T21240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6140'. [ 357.523674][T21250] lo speed is unknown, defaulting to 1000 [ 357.721002][ T6579] IPVS: stop unused estimator thread 0... [ 357.810170][T21268] lo speed is unknown, defaulting to 1000 [ 358.006438][T21283] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6158'. [ 358.030072][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6158'. [ 358.312860][T21315] lo speed is unknown, defaulting to 1000 [ 358.424081][ T28] kauditd_printk_skb: 395 callbacks suppressed [ 358.424095][ T28] audit: type=1400 audit(2000000991.657:8815): avc: denied { allowed } for pid=21316 comm="syz.4.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 358.460845][ T28] audit: type=1400 audit(2000000991.657:8816): avc: denied { create } for pid=21316 comm="syz.4.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 358.548020][ T28] audit: type=1400 audit(2000000991.777:8817): avc: denied { prog_load } for pid=21322 comm="syz.1.6177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.595193][ T28] audit: type=1400 audit(2000000991.827:8818): avc: denied { prog_load } for pid=21325 comm="syz.1.6178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.651621][ T28] audit: type=1400 audit(2000000991.847:8819): avc: denied { map_create } for pid=21325 comm="syz.1.6178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.703594][ T28] audit: type=1400 audit(2000000991.847:8820): avc: denied { prog_load } for pid=21325 comm="syz.1.6178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.755354][ T28] audit: type=1400 audit(2000000991.877:8821): avc: denied { execmem } for pid=21327 comm="syz.1.6179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 358.806806][ T28] audit: type=1400 audit(2000000991.887:8822): avc: denied { allowed } for pid=21327 comm="syz.1.6179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 358.866181][ T28] audit: type=1400 audit(2000000992.087:8823): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.877623][T21330] syzkaller0: entered promiscuous mode [ 358.896306][T21330] syzkaller0: entered allmulticast mode [ 358.904905][ T28] audit: type=1400 audit(2000000992.097:8824): avc: denied { map_create } for pid=21329 comm="syz.8.6180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 359.024446][T21334] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 359.053221][T21340] netlink: 'syz.9.6184': attribute type 1 has an invalid length. [ 359.105471][T21340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.137292][T21349] bond3: (slave gretap1): making interface the new active one [ 359.151867][T21349] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 359.183997][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6184'. [ 359.199840][T21340] vlan3: entered allmulticast mode [ 359.205012][T21340] bond3: entered allmulticast mode [ 359.210565][T21340] gretap1: entered allmulticast mode [ 359.859675][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6194'. [ 359.886038][T21366] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.960160][T21378] netlink: 'syz.1.6200': attribute type 4 has an invalid length. [ 359.977375][T21378] netlink: 'syz.1.6200': attribute type 4 has an invalid length. [ 360.915974][T21433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.096416][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6233'. [ 361.122496][T21458] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 361.154593][T21458] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 361.168957][T21460] macvlan2: entered promiscuous mode [ 361.174428][T21460] macvlan2: entered allmulticast mode [ 361.180307][T21460] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 361.551366][T21473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6249'. [ 361.804344][T21498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 362.722052][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6263'. [ 362.990890][T21554] lo speed is unknown, defaulting to 1000 [ 363.093334][T21566] 8021q: adding VLAN 0 to HW filter on device .` [ 363.105158][T21566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.123062][ T7842] lo speed is unknown, defaulting to 1000 [ 363.130469][ T7842] syz2: Port: 1 Link ACTIVE [ 363.143411][ T7842] lo speed is unknown, defaulting to 1000 [ 363.173307][T21569] lo speed is unknown, defaulting to 1000 [ 363.452791][ T28] kauditd_printk_skb: 279 callbacks suppressed [ 363.452870][ T28] audit: type=1400 audit(2000000996.687:9104): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.497756][ T28] audit: type=1400 audit(2000000996.727:9105): avc: denied { module_request } for pid=21575 comm="syz.4.6282" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 363.520507][ T28] audit: type=1400 audit(2000000996.727:9106): avc: denied { sys_module } for pid=21575 comm="syz.4.6282" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 363.541928][ T28] audit: type=1400 audit(2000000996.727:9107): avc: denied { module_request } for pid=21575 comm="syz.4.6282" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 363.567312][ T28] audit: type=1400 audit(2000000996.727:9108): avc: denied { sys_module } for pid=21575 comm="syz.4.6282" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 363.600650][ T28] audit: type=1400 audit(2000000996.757:9109): avc: denied { create } for pid=21577 comm="syz.9.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 363.621443][ T28] audit: type=1400 audit(2000000996.757:9110): avc: denied { allowed } for pid=21577 comm="syz.9.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 363.649031][ T28] audit: type=1400 audit(2000000996.757:9111): avc: denied { create } for pid=21577 comm="syz.9.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 363.670914][ T28] audit: type=1400 audit(2000000996.807:9112): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.695347][ T28] audit: type=1400 audit(2000000996.817:9113): avc: denied { read write } for pid=21581 comm="syz.9.6284" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 364.026354][T21599] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6291'. [ 364.087991][T21603] lo speed is unknown, defaulting to 1000 [ 364.682721][T21620] netlink: 'syz.4.6300': attribute type 1 has an invalid length. [ 364.690529][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6310'. [ 364.708944][T21620] 8021q: adding VLAN 0 to HW filter on device bond11 [ 364.728529][T21620] bond11: (slave gretap1): making interface the new active one [ 364.736926][T21620] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 364.753582][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6300'. [ 364.770736][T21620] vlan3: entered allmulticast mode [ 364.776043][T21620] bond11: entered allmulticast mode [ 364.781330][T21620] gretap1: entered allmulticast mode [ 364.947610][T21642] netlink: 'syz.9.6309': attribute type 2 has an invalid length. [ 364.956097][T21642] netlink: 'syz.9.6309': attribute type 2 has an invalid length. [ 365.078470][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 365.333193][T21654] netlink: 'syz.8.6314': attribute type 1 has an invalid length. [ 365.347421][T21654] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.367088][T21654] bond5: (slave gretap1): making interface the new active one [ 365.377552][T21654] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 365.394846][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6314'. [ 365.408058][T21654] vlan3: entered allmulticast mode [ 365.413406][T21654] bond5: entered allmulticast mode [ 365.418952][T21654] gretap1: entered allmulticast mode [ 365.812560][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6324'. [ 365.942793][T21676] netlink: 'syz.7.6325': attribute type 25 has an invalid length. [ 365.961437][T21676] netlink: 'syz.7.6325': attribute type 28 has an invalid length. [ 366.304112][T21697] netlink: 'syz.9.6335': attribute type 1 has an invalid length. [ 366.338561][T21697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.381658][T21697] bond4: (slave dummy0): making interface the new active one [ 366.438775][T21697] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 366.458374][T21702] bond4 (unregistering): (slave dummy0): Releasing active interface [ 366.494629][T21702] bond4 (unregistering): Released all slaves [ 366.801196][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6340'. [ 366.891164][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6342'. [ 367.126752][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6353'. [ 367.445086][T21785] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 367.483964][T21787] lo speed is unknown, defaulting to 1000 [ 367.983587][T21823] syzkaller0: entered promiscuous mode [ 367.990552][T21823] syzkaller0: entered allmulticast mode [ 368.169987][T21837] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6394'. [ 368.196736][T21837] ip6gre2: entered promiscuous mode [ 368.220772][T21837] ip6gre2: entered allmulticast mode [ 368.233732][T21837] netlink: 'syz.8.6394': attribute type 6 has an invalid length. [ 368.250451][T21837] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6394'. [ 368.401565][T21853] netlink: 'syz.8.6402': attribute type 3 has an invalid length. [ 368.409483][T21853] netlink: 'syz.8.6402': attribute type 1 has an invalid length. [ 368.417352][T21853] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.6402'. [ 368.459469][ T28] kauditd_printk_skb: 380 callbacks suppressed [ 368.459484][ T28] audit: type=1400 audit(2000001001.697:9494): avc: denied { prog_load } for pid=21858 comm="syz.9.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.507494][ T28] audit: type=1400 audit(2000001001.717:9495): avc: denied { open } for pid=21858 comm="syz.9.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 368.528586][ T28] audit: type=1400 audit(2000001001.717:9496): avc: denied { prog_load } for pid=21858 comm="syz.9.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.548136][ T28] audit: type=1400 audit(2000001001.717:9497): avc: denied { create } for pid=21858 comm="syz.9.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 368.590281][ T28] audit: type=1400 audit(2000001001.717:9498): avc: denied { create } for pid=21858 comm="syz.9.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 368.613312][ T28] audit: type=1400 audit(2000001001.737:9499): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.639989][ T28] audit: type=1400 audit(2000001001.737:9500): avc: denied { create } for pid=21863 comm="syz.9.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 368.660180][ T28] audit: type=1400 audit(2000001001.767:9501): avc: denied { allowed } for pid=21859 comm="syz.8.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 368.680520][ T28] audit: type=1400 audit(2000001001.777:9502): avc: denied { prog_load } for pid=21859 comm="syz.8.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.700115][ T28] audit: type=1400 audit(2000001001.807:9503): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 369.211397][T21909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21909 comm=syz.1.6426 [ 369.266526][T21909] bond8: (slave gretap1): making interface the new active one [ 369.276528][T21909] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 369.328153][T21918] bond5: entered allmulticast mode [ 369.340487][T21921] bridge6: entered promiscuous mode [ 369.345699][T21921] bridge6: entered allmulticast mode [ 369.356587][T21921] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 369.568753][T21939] : renamed from vlan0 [ 369.666174][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6442'. [ 369.718071][T21958] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6444'. [ 369.727608][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6444'. [ 369.966298][T21981] validate_nla: 1 callbacks suppressed [ 369.966308][T21981] netlink: 'syz.7.6456': attribute type 4 has an invalid length. [ 370.312215][T21994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6461'. [ 371.583709][T22074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6493'. [ 373.477638][ T28] kauditd_printk_skb: 348 callbacks suppressed [ 373.477653][ T28] audit: type=1400 audit(2000001006.707:9852): avc: denied { open } for pid=22146 comm="syz.4.6522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 373.515134][ T28] audit: type=1400 audit(2000001006.737:9853): avc: denied { module_request } for pid=22146 comm="syz.4.6522" kmod="tcp_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 373.620410][ T28] audit: type=1400 audit(2000001006.737:9854): avc: denied { create } for pid=22146 comm="syz.4.6522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 373.662921][ T28] audit: type=1400 audit(2000001006.777:9855): avc: denied { allowed } for pid=22148 comm="syz.4.6523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 373.710370][ T28] audit: type=1400 audit(2000001006.777:9856): avc: denied { create } for pid=22148 comm="syz.4.6523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 373.751821][ T28] audit: type=1400 audit(2000001006.807:9857): avc: denied { open } for pid=22152 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 373.791398][ T28] audit: type=1400 audit(2000001006.817:9858): avc: denied { open } for pid=22152 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 373.837060][ T28] audit: type=1400 audit(2000001006.817:9859): avc: denied { create } for pid=22152 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 373.888337][ T28] audit: type=1400 audit(2000001006.847:9860): avc: denied { prog_load } for pid=22155 comm="syz.4.6536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 373.965327][ T28] audit: type=1400 audit(2000001006.847:9861): avc: denied { prog_load } for pid=22155 comm="syz.4.6536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.037923][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6531'. [ 374.257414][T22189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22189 comm=syz.7.6539 [ 374.272531][T22189] netlink: 'syz.7.6539': attribute type 1 has an invalid length. [ 374.294060][T22189] bond6: (slave gretap1): making interface the new active one [ 374.302236][T22189] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 375.765809][T22256] netlink: 'syz.4.6563': attribute type 1 has an invalid length. [ 375.795711][T22256] 8021q: adding VLAN 0 to HW filter on device bond12 [ 375.811539][T22256] bond12: (slave bridge7): making interface the new active one [ 375.819859][T22256] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 376.332111][ T7836] lo speed is unknown, defaulting to 1000 [ 376.337893][ T6578] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.346489][ T7836] syz2: Port: 1 Link DOWN [ 376.349577][ T6578] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.367646][ T6578] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.388510][ T7838] lo speed is unknown, defaulting to 1000 [ 376.388563][ T6578] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.666337][T22305] netlink: 'syz.9.6584': attribute type 4 has an invalid length. [ 376.718838][T22305] netlink: 'syz.9.6584': attribute type 4 has an invalid length. [ 376.816491][T22313] lo speed is unknown, defaulting to 1000 [ 376.928791][T22317] bond5: left allmulticast mode [ 376.935831][T22317] bond5: left promiscuous mode [ 377.172130][T22333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6597'. [ 378.767122][ T28] kauditd_printk_skb: 444 callbacks suppressed [ 378.767135][ T28] audit: type=1400 audit(2000001011.997:10306): avc: denied { mount } for pid=22422 comm="syz.4.6639" name="/" dev="autofs" ino=81203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=0 [ 378.798546][ T28] audit: type=1400 audit(2000001011.997:10307): avc: denied { mounton } for pid=22422 comm="syz.4.6639" path="/699/file0" dev="tmpfs" ino=3630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 378.828280][ T28] audit: type=1400 audit(2000001012.057:10308): avc: denied { prog_load } for pid=22424 comm="syz.4.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.863887][ T28] audit: type=1400 audit(2000001012.067:10309): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 378.888595][ T28] audit: type=1400 audit(2000001012.087:10310): avc: denied { create } for pid=22426 comm="syz.8.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 378.908598][ T28] audit: type=1400 audit(2000001012.087:10311): avc: denied { create } for pid=22426 comm="syz.8.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 378.928586][ T28] audit: type=1400 audit(2000001012.097:10312): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 378.943600][T22435] netlink: 'syz.4.6645': attribute type 4 has an invalid length. [ 378.953500][ T28] audit: type=1400 audit(2000001012.097:10313): avc: denied { name_bind } for pid=22428 comm="syz.4.6642" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 378.965288][T22435] netlink: 'syz.4.6645': attribute type 4 has an invalid length. [ 378.983985][ T28] audit: type=1400 audit(2000001012.097:10314): avc: denied { name_bind } for pid=22428 comm="syz.4.6642" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 378.984066][ T28] audit: type=1400 audit(2000001012.127:10315): avc: denied { open } for pid=22429 comm="syz.8.6643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 379.036808][ T7838] lo speed is unknown, defaulting to 1000 [ 379.042580][ T7838] syz2: Port: 1 Link ACTIVE [ 379.047177][ T7838] lo speed is unknown, defaulting to 1000 [ 379.054169][ T9] lo speed is unknown, defaulting to 1000 [ 379.059942][ T9] syz2: Port: 1 Link DOWN [ 379.064308][ T9] lo speed is unknown, defaulting to 1000 [ 379.112167][T22447] lo speed is unknown, defaulting to 1000 [ 379.271826][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6656'. [ 379.290197][T22462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.311550][T22468] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6659'. [ 379.692758][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6675'. [ 380.122696][T22528] netlink: 'syz.7.6685': attribute type 1 has an invalid length. [ 380.138294][T22528] bond7: entered promiscuous mode [ 380.145784][T22528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.174444][T22528] bond7: (slave bridge7): making interface the new active one [ 380.192519][T22528] bridge7: entered promiscuous mode [ 380.203586][T22528] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 380.271928][T22537] bridge_slave_0: left allmulticast mode [ 380.282969][T22537] bridge_slave_0: left promiscuous mode [ 380.290663][T22537] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.298936][T22537] bridge_slave_1: left allmulticast mode [ 380.304739][T22537] bridge_slave_1: left promiscuous mode [ 380.310717][T22537] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.321096][T22537] bond0: (slave bond_slave_0): Releasing backup interface [ 380.352847][T22537] bond0: (slave bond_slave_1): Releasing backup interface [ 380.362100][T22537] team0: Port device team_slave_0 removed [ 380.368662][T22537] team0: Port device team_slave_1 removed [ 380.374951][T22537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.396120][T22537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.410821][T22537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.501818][T22540] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6699'. [ 380.612779][T22546] tc_dump_action: action bad kind [ 380.667548][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6694'. [ 380.680388][ T6578] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.689907][ T6578] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.699768][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6694'. [ 380.710461][ T6578] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.719320][ T6578] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.728566][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6694'. [ 380.774244][T22558] ip6gre1: entered promiscuous mode [ 380.788511][T22558] ip6gre1: entered allmulticast mode [ 381.780193][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6735'. [ 382.533162][ T3723] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 382.543506][ T3723] ip6gre1 (unregistering): left promiscuous mode [ 382.634021][ T3723] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 382.705660][ T3723] bridge1 (unregistering): left promiscuous mode [ 382.801592][ T3723] bond0 (unregistering): Released all slaves [ 382.811420][ T3723] bond1 (unregistering): Released all slaves [ 382.824412][ T3723] bond2 (unregistering): Released all slaves [ 382.837705][ T3723] bond3 (unregistering): Released all slaves [ 382.852763][ T3723] bond4 (unregistering): Released all slaves [ 382.940692][ T3723] hsr_slave_0: left promiscuous mode [ 382.950032][ T3723] veth1_macvtap: left promiscuous mode [ 382.955560][ T3723] veth0_macvtap: left promiscuous mode [ 382.963315][ T3723] veth1_vlan: left promiscuous mode [ 382.968660][ T3723] veth0_vlan: left promiscuous mode [ 383.310121][T22685] lo speed is unknown, defaulting to 1000 [ 383.518883][T22709] netlink: 'syz.9.6766': attribute type 4 has an invalid length. [ 383.584865][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6768'. [ 383.595765][T22722] netlink: 'syz.7.6771': attribute type 4 has an invalid length. [ 383.615518][T22722] netlink: 'syz.7.6771': attribute type 4 has an invalid length. [ 383.790100][ T28] kauditd_printk_skb: 440 callbacks suppressed [ 383.790115][ T28] audit: type=1400 audit(2000001017.027:10756): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 383.883998][ T28] audit: type=1400 audit(2000001017.117:10757): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 383.916029][ T28] audit: type=1400 audit(2000001017.147:10758): avc: denied { allowed } for pid=22743 comm="syz.9.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 383.936324][ T28] audit: type=1400 audit(2000001017.147:10759): avc: denied { allowed } for pid=22743 comm="syz.9.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 383.959354][ T28] audit: type=1400 audit(2000001017.147:10760): avc: denied { create } for pid=22743 comm="syz.9.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 383.986600][ T28] audit: type=1400 audit(2000001017.217:10761): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 384.013911][ T28] audit: type=1400 audit(2000001017.217:10762): avc: denied { create } for pid=22745 comm="syz.9.6783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 384.048170][ T28] audit: type=1400 audit(2000001017.277:10763): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 384.229198][ T28] audit: type=1400 audit(2000001017.467:10764): avc: denied { read write } for pid=22747 comm="syz.9.6794" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 384.270753][ T28] audit: type=1400 audit(2000001017.487:10765): avc: denied { map_create } for pid=22747 comm="syz.9.6794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 384.313393][T22752] Q6`Ҙ: renamed from lo [ 384.473810][T22757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22757 comm=syz.8.6787 [ 384.488915][T22757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22757 comm=syz.8.6787 [ 385.031368][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6810'. [ 385.042439][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6810'. [ 385.751217][T22870] bond8: entered promiscuous mode [ 385.766377][T22870] ip6gretap1: entered promiscuous mode [ 385.782304][T22870] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 385.836662][T22870] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 385.848113][T22870] ip6gretap1: left promiscuous mode [ 385.854249][T22870] bond8 (unregistering): Released all slaves [ 386.494223][T22897] syzkaller0: entered promiscuous mode [ 386.499946][T22897] syzkaller0: entered allmulticast mode [ 386.588495][T22907] netlink: 'syz.1.6852': attribute type 1 has an invalid length. [ 386.596981][T22906] netlink: 'syz.9.6851': attribute type 2 has an invalid length. [ 386.608565][T22907] netlink: 'syz.1.6852': attribute type 4 has an invalid length. [ 386.616420][T22907] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6852'. [ 386.716442][T22922] bridge_slave_0: left allmulticast mode [ 386.722359][T22922] bridge_slave_0: left promiscuous mode [ 386.728038][T22922] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.737715][T22922] bridge_slave_1: left allmulticast mode [ 386.743710][T22922] bridge_slave_1: left promiscuous mode [ 386.750600][T22922] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.758998][T22922] .`: (slave bond_slave_0): Releasing backup interface [ 386.770277][T22922] .`: (slave bond_slave_1): Releasing backup interface [ 386.780186][T22922] team0: Port device team_slave_0 removed [ 386.786627][T22922] team0: Port device team_slave_1 removed [ 386.793204][T22922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.805153][T22922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.831515][T22927] macsec1: entered promiscuous mode [ 386.850223][T22927] geneve1: entered promiscuous mode [ 386.860474][T22927] macsec1: entered allmulticast mode [ 386.867228][T22927] geneve1: entered allmulticast mode [ 387.147841][T22965] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 387.165896][T22969] netlink: 'syz.9.6879': attribute type 1 has an invalid length. [ 387.168578][T22964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.209051][T22969] gretap2: entered allmulticast mode [ 387.216373][T22969] bond4: (slave gretap2): making interface the new active one [ 387.224580][T22969] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 388.143888][T23003] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 388.319007][T23023] netlink: 'syz.4.6903': attribute type 10 has an invalid length. [ 388.326992][T23023] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6903'. [ 389.166013][ T28] kauditd_printk_skb: 407 callbacks suppressed [ 389.166029][ T28] audit: type=1400 audit(2000001022.397:11173): avc: denied { mount } for pid=23044 comm="syz.4.6910" name="/" dev="ramfs" ino=82141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 389.269817][ T28] audit: type=1400 audit(2000001022.497:11174): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.324553][ T28] audit: type=1400 audit(2000001022.537:11175): avc: denied { mounton } for pid=23048 comm="syz.9.6911" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 389.381384][ T28] audit: type=1400 audit(2000001022.607:11176): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.430409][ T28] audit: type=1400 audit(2000001022.617:11177): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.462659][ T28] audit: type=1400 audit(2000001022.647:11178): avc: denied { open } for pid=23051 comm="syz.1.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 389.498452][ T28] audit: type=1400 audit(2000001022.647:11179): avc: denied { prog_load } for pid=23051 comm="syz.1.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 389.498973][T23056] Q6`Ҙ speed is unknown, defaulting to 1000 [ 389.600183][ T28] audit: type=1400 audit(2000001022.647:11180): avc: denied { map_create } for pid=23051 comm="syz.1.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 389.700753][ T28] audit: type=1400 audit(2000001022.647:11181): avc: denied { read write } for pid=23030 comm="syz.7.6907" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.730997][ T28] audit: type=1400 audit(2000001022.697:11182): avc: denied { open } for pid=23055 comm="syz.8.6914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 390.066735][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 391.497954][T23194] netlink: 'syz.1.6973': attribute type 13 has an invalid length. [ 391.544685][T23194] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.6973'. [ 391.770532][T23224] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6988'. [ 391.945908][T23244] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6998'. [ 392.016668][T23250] syzkaller0: entered promiscuous mode [ 392.035946][T23250] syzkaller0: entered allmulticast mode [ 392.482983][T23281] Q6`Ҙ: renamed from lo [ 393.497438][T23346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7042'. [ 393.541320][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7042'. [ 393.585319][T23349] Q6`Ҙ speed is unknown, defaulting to 1000 [ 393.867664][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7054'. [ 393.905340][T23381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7056'. [ 394.068217][T23398] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7062'. [ 394.169558][ T28] kauditd_printk_skb: 470 callbacks suppressed [ 394.169571][ T28] audit: type=1400 audit(2000001027.407:11653): avc: denied { module_request } for pid=23404 comm="syz.7.7065" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 394.200330][ T28] audit: type=1400 audit(2000001027.437:11654): avc: denied { sys_module } for pid=23404 comm="syz.7.7065" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 394.222082][ T28] audit: type=1400 audit(2000001027.437:11655): avc: denied { map_create } for pid=23404 comm="syz.7.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.243397][ T28] audit: type=1400 audit(2000001027.437:11656): avc: denied { prog_load } for pid=23404 comm="syz.7.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.265050][ T28] audit: type=1400 audit(2000001027.437:11657): avc: denied { prog_load } for pid=23404 comm="syz.7.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.286702][ T28] audit: type=1400 audit(2000001027.477:11658): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.314520][ T28] audit: type=1400 audit(2000001027.517:11659): avc: denied { mount } for pid=23406 comm="syz.1.7066" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 394.337116][ T28] audit: type=1400 audit(2000001027.517:11660): avc: denied { map } for pid=23408 comm="syz.7.7067" path="socket:[82746]" dev="sockfs" ino=82746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=0 [ 394.362902][ T28] audit: type=1400 audit(2000001027.547:11661): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.388303][ T28] audit: type=1400 audit(2000001027.547:11662): avc: denied { create } for pid=23410 comm="syz.7.7070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 394.850900][T23444] netlink: 'syz.4.7082': attribute type 1 has an invalid length. [ 394.873552][T23444] 8021q: adding VLAN 0 to HW filter on device bond13 [ 394.886880][T23444] vlan0: entered promiscuous mode [ 394.894204][T23444] bond13: entered promiscuous mode [ 394.906763][T23444] bond13: (slave geneve3): making interface the new active one [ 394.914698][T23444] geneve3: entered promiscuous mode [ 394.923456][T23444] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 394.932609][ T6823] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.942249][ T6823] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.950528][ T6823] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.959018][ T6823] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.596446][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7103'. [ 395.728235][T23512] Q6`Ҙ speed is unknown, defaulting to 1000 [ 395.756456][T23514] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7113'. [ 396.095384][T23546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7126'. [ 396.877727][T23587] netlink: 'syz.1.7144': attribute type 21 has an invalid length. [ 397.328579][T23648] Q6`Ҙ speed is unknown, defaulting to 1000 [ 397.522000][T23674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7180'. [ 397.563261][T23674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23674 comm=syz.9.7180 [ 397.871193][T23701] syzkaller0: entered promiscuous mode [ 398.032837][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 398.066456][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 398.086920][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 398.170307][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7197'. [ 399.185675][ T28] kauditd_printk_skb: 436 callbacks suppressed [ 399.185691][ T28] audit: type=1400 audit(2000001032.417:12099): avc: denied { allowed } for pid=23749 comm="syz.7.7211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 399.227231][ T28] audit: type=1400 audit(2000001032.457:12100): avc: denied { create } for pid=23749 comm="syz.7.7211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 399.267098][T23756] netlink: 'syz.7.7213': attribute type 10 has an invalid length. [ 399.286596][T23756] netlink: 55 bytes leftover after parsing attributes in process `syz.7.7213'. [ 399.309254][ T28] audit: type=1400 audit(2000001032.487:12101): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 399.347996][ T28] audit: type=1400 audit(2000001032.487:12102): avc: denied { prog_load } for pid=23753 comm="syz.4.7212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.370280][ T28] audit: type=1400 audit(2000001032.487:12103): avc: denied { map_create } for pid=23753 comm="syz.4.7212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.403753][ T28] audit: type=1400 audit(2000001032.487:12104): avc: denied { prog_load } for pid=23753 comm="syz.4.7212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.427608][ T28] audit: type=1400 audit(2000001032.487:12105): avc: denied { prog_load } for pid=23753 comm="syz.4.7212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.449318][ T28] audit: type=1400 audit(2000001032.487:12106): avc: denied { prog_load } for pid=23753 comm="syz.4.7212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.470943][ T28] audit: type=1400 audit(2000001032.487:12107): avc: denied { prog_load } for pid=23753 comm="syz.4.7212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.472010][T23760] netlink: 'syz.8.7214': attribute type 1 has an invalid length. [ 399.490978][ T28] audit: type=1400 audit(2000001032.497:12108): avc: denied { prog_load } for pid=23755 comm="syz.7.7213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.546140][T23760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.581645][T23760] vlan0: entered promiscuous mode [ 399.586799][T23760] bond6: entered promiscuous mode [ 399.604318][T23760] bond6: (slave geneve2): making interface the new active one [ 399.613173][T23760] geneve2: entered promiscuous mode [ 399.619906][T23760] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 399.629248][ T3727] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.651129][ T3727] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.660781][ T3727] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.671156][ T3727] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.799057][T23787] ------------[ cut here ]------------ [ 399.804551][T23787] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 399.817226][T23787] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.8.7229/23787 [ 399.821357][T23793] netlink: 'syz.1.7231': attribute type 1 has an invalid length. [ 399.828340][T23787] Modules linked in: [ 399.839245][T23787] CPU: 1 UID: 0 PID: 23787 Comm: syz.8.7229 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.851551][T23787] Tainted: [W]=WARN [ 399.855350][T23787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.865582][T23787] RIP: 0010:u32_change+0x1463/0x14d0 [ 399.871571][T23787] Code: 31 ed e9 96 fe ff ff e8 db e0 c1 fc 48 8d 3d 14 19 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 26 68 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 399.885750][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7231'. [ 399.892798][T23787] RSP: 0018:ffffc9000fe035e0 EFLAGS: 00010287 [ 399.906867][T23787] RAX: ffffffff84978045 RBX: ffffc9000fe037f0 RCX: 0000000000000010 [ 399.914900][T23787] RDX: ffffffff867e6826 RSI: 0000000000000020 RDI: ffffffff87209960 [ 399.924336][T23787] RBP: ffffc9000fe036e8 R08: 000188810516d587 R09: 0000000000000000 [ 399.933010][T23787] R10: ffff88810516d500 R11: 0000000000000002 R12: ffff88811be39a00 [ 399.941017][T23787] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88811be39ac0 [ 399.950275][T23787] FS: 00007fab2b06f6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 399.959900][T23787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.966523][T23787] CR2: 0000001b33f1effc CR3: 000000014b7a6000 CR4: 00000000003506f0 [ 399.974590][T23787] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.983855][T23787] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 399.992558][T23787] Call Trace: [ 399.995842][T23787] [ 399.998896][T23787] tc_new_tfilter+0xfc0/0x1200 [ 400.003781][T23787] ? ns_capable+0x7c/0xb0 [ 400.008197][T23787] ? __pfx_tc_new_tfilter+0x10/0x10 [ 400.014773][T23787] rtnetlink_rcv_msg+0x64b/0x720 [ 400.020419][T23787] netlink_rcv_skb+0x123/0x220 [ 400.025258][T23787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 400.030989][T23787] rtnetlink_rcv+0x1c/0x30 [ 400.035476][T23787] netlink_unicast+0x5c0/0x690 [ 400.041628][T23787] netlink_sendmsg+0x5c8/0x6f0 [ 400.046572][T23787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.052586][T23787] ____sys_sendmsg+0x563/0x5b0 [ 400.057373][T23787] ___sys_sendmsg+0x195/0x1e0 [ 400.062173][T23787] __sys_sendmmsg+0x185/0x320 [ 400.066871][T23787] __x64_sys_sendmmsg+0x57/0x70 [ 400.073194][T23787] x64_sys_call+0x27aa/0x3020 [ 400.078021][T23787] do_syscall_64+0x12c/0x370 [ 400.083409][T23787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.089342][T23787] RIP: 0033:0x7fab2c61c819 [ 400.093760][T23787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.115419][T23787] RSP: 002b:00007fab2b06f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.123932][T23787] RAX: ffffffffffffffda RBX: 00007fab2c895fa0 RCX: 00007fab2c61c819 [ 400.131945][T23787] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 400.141971][T23787] RBP: 00007fab2c6b2c91 R08: 0000000000000000 R09: 0000000000000000 [ 400.150003][T23787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.157988][T23787] R13: 00007fab2c896038 R14: 00007fab2c895fa0 R15: 00007fff98d40b28 [ 400.166027][T23787] [ 400.170962][T23787] ---[ end trace 0000000000000000 ]--- [ 400.199308][T23793] 8021q: adding VLAN 0 to HW filter on device bond9 [ 400.213175][T23796] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 400.234123][T23796] bond9: entered allmulticast mode [ 400.249044][T23798] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 400.527040][T23849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23849 comm=syz.9.7255 [ 400.617721][T23867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=23867 comm=syz.1.7263 [ 400.725040][T23881] __nla_validate_parse: 2 callbacks suppressed [ 400.725056][T23881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7269'. [ 400.828950][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7274'. [ 400.838002][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7274'. [ 400.851403][ T3727] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.861382][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7274'. [ 400.875548][ T3727] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.884832][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7274'. [ 400.902775][T23892] Q6`Ҙ speed is unknown, defaulting to 1000 [ 400.911858][ T3727] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.931424][ T3727] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.656268][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7290'. [ 402.117348][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7297'. [ 402.146484][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7297'. [ 402.182164][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7297'. [ 402.211177][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7297'. [ 402.501721][T23966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23966 comm=syz.8.7303 [ 402.674162][T23983] netlink: 'syz.4.7313': attribute type 1 has an invalid length. [ 402.730947][T23983] 8021q: adding VLAN 0 to HW filter on device bond14 [ 402.759787][T23989] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 402.790483][T23989] bond14: entered allmulticast mode [ 402.833396][T23983] bond14: (slave ip6gretap4): Enslaving as an active interface with an up link [ 403.512782][T24036] netlink: 'syz.8.7332': attribute type 10 has an invalid length. [ 403.523389][T24036] bond1: (slave macvlan1): Releasing active interface [ 404.217228][ T28] kauditd_printk_skb: 586 callbacks suppressed [ 404.217282][ T28] audit: type=1400 audit(2000001293.442:12695): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.333860][ T28] audit: type=1400 audit(2000001293.482:12696): avc: denied { prog_load } for pid=24056 comm="syz.4.7342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.399404][T24064] bond15 (unregistering): Released all slaves [ 404.429705][ T28] audit: type=1400 audit(2000001293.482:12697): avc: denied { prog_load } for pid=24056 comm="syz.4.7342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.465257][T24068] .` (unregistering): left promiscuous mode [ 404.480620][T24068] bond_slave_0: left promiscuous mode [ 404.490766][T24068] bond_slave_1: left promiscuous mode [ 404.501845][ T28] audit: type=1400 audit(2000001293.482:12698): avc: denied { prog_load } for pid=24056 comm="syz.4.7342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.504406][T24076] netlink: 'syz.9.7350': attribute type 10 has an invalid length. [ 404.534914][T24068] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.551100][T24068] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.568447][ T28] audit: type=1400 audit(2000001293.502:12699): avc: denied { open } for pid=24059 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 404.590486][T24068] .` (unregistering): Released all slaves [ 404.606730][ T28] audit: type=1400 audit(2000001293.502:12700): avc: denied { map_create } for pid=24059 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.641808][ T28] audit: type=1400 audit(2000001293.502:12701): avc: denied { prog_load } for pid=24059 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.673235][ T28] audit: type=1400 audit(2000001293.502:12702): avc: denied { prog_load } for pid=24059 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.708444][ T28] audit: type=1400 audit(2000001293.502:12703): avc: denied { map_create } for pid=24059 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.736539][ T28] audit: type=1400 audit(2000001293.502:12704): avc: denied { prog_load } for pid=24059 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 405.599415][T24133] syzkaller0: entered promiscuous mode [ 405.606584][T24133] syzkaller0: entered allmulticast mode [ 405.746234][T24144] vlan3: left allmulticast mode [ 405.752148][T24144] bond5: left allmulticast mode [ 405.757268][T24144] gretap1: left allmulticast mode [ 405.770832][T24144] ip6gre2: left promiscuous mode [ 405.783062][T24144] ip6gre2: left allmulticast mode [ 405.829588][T24144] vlan0: left promiscuous mode [ 405.834675][T24144] bond6: left promiscuous mode [ 405.841552][T24144] geneve2: left promiscuous mode [ 405.906349][ T50] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.919795][ T50] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.941783][ T50] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.973303][ T50] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.012683][ T50] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.030595][ T50] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.047252][ T50] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.142610][ T50] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.755885][T24177] Q6`Ҙ speed is unknown, defaulting to 1000 [ 407.101781][T24199] xfrm0: entered promiscuous mode [ 407.258705][T24206] __nla_validate_parse: 6 callbacks suppressed [ 407.258718][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7404'. [ 407.482979][T24215] macvtap1: entered promiscuous mode [ 407.488367][T24215] team0: entered promiscuous mode [ 407.495594][T24215] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 407.509360][T24215] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 407.527507][T24215] team0: Device macvtap1 is already an upper device of the team interface [ 407.546868][T24215] team0: left promiscuous mode [ 407.553753][T24215] netdevsim netdevsim7 netdevsim1: left promiscuous mode [ 407.896177][T24225] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7410'. [ 408.023218][T24236] Q6`Ҙ speed is unknown, defaulting to 1000 [ 408.202232][T24242] Q6`Ҙ speed is unknown, defaulting to 1000 [ 408.454175][T24249] Q6`Ҙ speed is unknown, defaulting to 1000 [ 409.181833][T24300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7443'. [ 409.219296][ T28] kauditd_printk_skb: 354 callbacks suppressed [ 409.219310][ T28] audit: type=1400 audit(2000001298.452:13059): avc: denied { block_suspend } for pid=24296 comm="syz.9.7442" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 409.260218][ T28] audit: type=1400 audit(2000001298.492:13060): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.312550][ T28] audit: type=1400 audit(2000001298.542:13061): avc: denied { open } for pid=24306 comm="syz.9.7444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 409.333544][T24307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7444'. [ 409.349378][ T28] audit: type=1400 audit(2000001298.572:13062): avc: denied { create } for pid=24306 comm="syz.9.7444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 409.372112][ T28] audit: type=1400 audit(2000001298.602:13063): avc: denied { block_suspend } for pid=24304 comm="syz.1.7454" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 409.415860][ T28] audit: type=1400 audit(2000001298.642:13064): avc: denied { open } for pid=24309 comm="syz.1.7445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 409.439619][ T28] audit: type=1400 audit(2000001298.642:13065): avc: denied { open } for pid=24309 comm="syz.1.7445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 409.461860][ T28] audit: type=1400 audit(2000001298.672:13066): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.496928][ T28] audit: type=1400 audit(2000001298.722:13067): avc: denied { create } for pid=24311 comm="syz.9.7446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 409.520611][ T28] audit: type=1400 audit(2000001298.752:13068): avc: denied { create } for pid=24311 comm="syz.9.7446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 409.547175][T24314] bridge0: port 1(gretap0) entered blocking state [ 409.554860][T24314] bridge0: port 1(gretap0) entered disabled state [ 409.561745][T24314] gretap0: entered allmulticast mode [ 409.567730][T24314] gretap0: entered promiscuous mode [ 409.655881][T24320] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7450'. [ 409.676095][T24320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24320 comm=syz.9.7450 [ 409.908052][T24340] 8021q: adding VLAN 0 to HW filter on device .` [ 409.916013][T24340] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.927173][T24340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.995484][T24345] syzkaller0: entered promiscuous mode [ 410.020892][T24345] syzkaller0: entered allmulticast mode [ 410.133476][T24367] xfrm0: entered promiscuous mode [ 410.452688][T24382] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7477'. [ 410.471725][T24382] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7477'. [ 410.488514][T24382] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 410.790039][T24404] xfrm0: entered promiscuous mode [ 410.911818][T24413] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7490'. [ 410.957656][T24416] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 411.018235][T24423] xfrm0: left promiscuous mode [ 411.026872][T24423] bond2: left promiscuous mode [ 411.046537][T24423] bond5: left allmulticast mode [ 411.053587][T24423] bridge6: left promiscuous mode [ 411.071189][T24423] bridge6: left allmulticast mode [ 411.077588][T24423] bond7: left promiscuous mode [ 411.084370][T24423] bridge7: left promiscuous mode [ 411.092643][T24423] ip6gre1: left promiscuous mode [ 411.097638][T24423] ip6gre1: left allmulticast mode [ 411.104224][ T3723] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.122908][ T3723] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.132202][ T3723] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.142124][ T3723] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.805774][T24446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7503'. [ 411.832146][T24449] xfrm0: entered promiscuous mode [ 411.955225][T24456] Q6`Ҙ speed is unknown, defaulting to 1000 [ 412.155659][T24472] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.168905][T24472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.277292][T24482] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7516'. [ 412.295503][T24482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24482 comm=syz.7.7516 [ 412.554960][T24487] Q6`Ҙ speed is unknown, defaulting to 1000 [ 412.661463][T24492] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7520'. [ 412.712279][T24492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24492 comm=syz.9.7520 [ 413.293924][T24532] Q6`Ҙ speed is unknown, defaulting to 1000 [ 414.196822][T24558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7550'. [ 414.210554][T24558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24558 comm=syz.1.7550 [ 414.238361][ T28] kauditd_printk_skb: 358 callbacks suppressed [ 414.244785][ T28] audit: type=1400 audit(2000001303.462:13427): avc: denied { open } for pid=24559 comm="syz.1.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 414.266997][T24560] netlink: 763 bytes leftover after parsing attributes in process `syz.1.7551'. [ 414.290075][ T28] audit: type=1400 audit(2000001303.492:13428): avc: denied { open } for pid=24559 comm="syz.1.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 414.340881][ T28] audit: type=1400 audit(2000001303.492:13429): avc: denied { create } for pid=24559 comm="syz.1.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 414.385593][ T28] audit: type=1400 audit(2000001303.492:13430): avc: denied { bpf } for pid=24559 comm="syz.1.7551" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 414.410128][T24568] netlink: 'syz.1.7556': attribute type 1 has an invalid length. [ 414.418315][ T28] audit: type=1400 audit(2000001303.512:13431): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.448358][T24568] 8021q: adding VLAN 0 to HW filter on device bond10 [ 414.462042][T24568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7556'. [ 414.471141][ T28] audit: type=1400 audit(2000001303.552:13432): avc: denied { allowed } for pid=24562 comm="syz.1.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 414.492889][ T28] audit: type=1400 audit(2000001303.552:13433): avc: denied { create } for pid=24562 comm="syz.1.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 414.513158][T24568] bond10: entered allmulticast mode [ 414.525378][ T28] audit: type=1400 audit(2000001303.602:13434): avc: denied { create } for pid=24565 comm="syz.1.7555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 414.546329][ T28] audit: type=1400 audit(2000001303.602:13435): avc: denied { allowed } for pid=24565 comm="syz.1.7555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 414.567550][ T28] audit: type=1400 audit(2000001303.602:13436): avc: denied { create } for pid=24565 comm="syz.1.7555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 414.613012][T24572] netlink: 'syz.9.7552': attribute type 4 has an invalid length. [ 415.697898][T24606] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 415.697898][T24606] The task syz.9.7568 (24606) triggered the difference, watch for misbehavior. [ 416.028902][T24608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7570'. [ 416.037931][T24608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7570'. [ 416.047408][T24608] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 416.418187][T24633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7582'. [ 416.428555][T24633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7582'. [ 416.448221][T24633] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 416.611158][T24659] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 417.489002][T24685] netlink: 'syz.8.7603': attribute type 4 has an invalid length. [ 417.507148][T24685] netlink: 'syz.8.7603': attribute type 4 has an invalid length. [ 418.494007][T24714] Q6`Ҙ speed is unknown, defaulting to 1000 [ 418.717941][T24717] Q6`Ҙ speed is unknown, defaulting to 1000 [ 418.911337][T24730] xfrm0: left promiscuous mode [ 418.937589][T24730] vlan3: left allmulticast mode [ 418.943234][T24730] bond3: left allmulticast mode [ 418.948272][T24730] gretap1: left allmulticast mode [ 418.953840][T24733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7622'. [ 418.964295][T24730] gretap2: left allmulticast mode [ 418.990535][T24733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24733 comm=syz.1.7622 [ 419.019907][T24738] macvtap0: entered promiscuous mode [ 419.031416][T24738] team0: entered promiscuous mode [ 419.036495][T24738] vlan2: entered promiscuous mode [ 419.041978][T24738] dummy0: entered promiscuous mode [ 419.047361][T24738] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 419.055074][T24738] team0: Device macvtap0 is already an upper device of the team interface [ 419.064522][T24738] team0: left promiscuous mode [ 419.069488][T24738] vlan2: left promiscuous mode [ 419.074321][T24738] dummy0: left promiscuous mode [ 419.254535][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 419.254550][ T28] audit: type=1400 audit(2000001308.482:13694): avc: denied { create } for pid=24755 comm="syz.8.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 419.291124][T24742] Q6`Ҙ speed is unknown, defaulting to 1000 [ 419.297393][ T28] audit: type=1400 audit(2000001308.522:13695): avc: denied { create } for pid=24755 comm="syz.8.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 419.320957][ T28] audit: type=1400 audit(2000001308.552:13696): avc: denied { prog_load } for pid=24741 comm="syz.1.7624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 419.341536][ T28] audit: type=1400 audit(2000001308.552:13697): avc: denied { bpf } for pid=24741 comm="syz.1.7624" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 419.404035][ T28] audit: type=1400 audit(2000001308.632:13698): avc: denied { allowed } for pid=24758 comm="syz.1.7630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 419.439961][ T28] audit: type=1400 audit(2000001308.632:13699): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 419.467240][ T28] audit: type=1400 audit(2000001308.662:13700): avc: denied { create } for pid=24758 comm="syz.1.7630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 419.487444][ T28] audit: type=1400 audit(2000001308.662:13701): avc: denied { allowed } for pid=24760 comm="syz.8.7631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 419.508507][ T28] audit: type=1400 audit(2000001308.662:13702): avc: denied { create } for pid=24760 comm="syz.8.7631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 419.531455][ T28] audit: type=1400 audit(2000001308.662:13703): avc: denied { allowed } for pid=24760 comm="syz.8.7631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 419.587105][T24776] Q6`Ҙ speed is unknown, defaulting to 1000 [ 419.760965][T24785] syzkaller0: entered promiscuous mode [ 419.771594][T24785] syzkaller0: entered allmulticast mode [ 420.315413][T24815] netlink: 'syz.4.7658': attribute type 4 has an invalid length. [ 420.324627][T24815] netlink: 'syz.4.7658': attribute type 4 has an invalid length. [ 420.333802][ T7840] Q6`Ҙ speed is unknown, defaulting to 1000 [ 420.340136][ T7840] syz2: Port: 1 Link ACTIVE [ 420.344780][ T7840] Q6`Ҙ speed is unknown, defaulting to 1000 [ 420.369103][T24819] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.570899][T24861] Q6`Ҙ speed is unknown, defaulting to 1000 [ 420.822256][T24879] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7683'. [ 420.849873][T24881] netlink: 'syz.8.7684': attribute type 1 has an invalid length. [ 420.871780][T24881] 8021q: adding VLAN 0 to HW filter on device bond8 [ 420.879663][T24881] bond7: (slave bond8): making interface the new active one [ 420.887334][T24881] bond7: (slave bond8): Enslaving as an active interface with an up link [ 420.902010][T24881] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 421.305597][T24894] Q6`Ҙ speed is unknown, defaulting to 1000 [ 421.849206][T24909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7695'. [ 421.985385][T24909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7695'. [ 422.149721][T24919] netlink: 'syz.1.7699': attribute type 4 has an invalid length. [ 422.186670][T24919] netlink: 'syz.1.7699': attribute type 4 has an invalid length. [ 422.534118][T24948] netlink: 'syz.7.7712': attribute type 4 has an invalid length. [ 422.545872][T24944] bridge_slave_0: invalid flags given to default FDB implementation [ 422.563955][T24948] netlink: 'syz.7.7712': attribute type 4 has an invalid length. [ 422.642998][T24953] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7714'. [ 423.936905][T25000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7734'. [ 423.982702][T25000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25000 comm=syz.1.7734 [ 424.210388][T25013] netlink: 'syz.1.7740': attribute type 29 has an invalid length. [ 424.220694][T25013] netlink: 'syz.1.7740': attribute type 29 has an invalid length. [ 424.262289][ T28] kauditd_printk_skb: 940 callbacks suppressed [ 424.262301][ T28] audit: type=1400 audit(2000001313.492:14644): avc: denied { create } for pid=25012 comm="syz.1.7740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 424.332668][ T28] audit: type=1400 audit(2000001313.532:14645): avc: denied { create } for pid=25016 comm="syz.7.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 424.475149][T25029] macsec0: left promiscuous mode [ 424.499496][T25033] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7750'. [ 424.513403][T25029] macsec0: left allmulticast mode [ 424.542040][T25029] bond9: left allmulticast mode [ 424.560455][T25029] bond10: left allmulticast mode [ 424.567543][ T28] audit: type=1400 audit(2000001313.532:14646): avc: denied { map_create } for pid=25016 comm="syz.7.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 424.654302][T25033] bond5: entered promiscuous mode [ 424.679265][T25033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.686643][ T28] audit: type=1400 audit(2000001313.532:14647): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 424.713019][ T28] audit: type=1400 audit(2000001313.542:14648): avc: denied { read write } for pid=16518 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 424.737554][ T28] audit: type=1400 audit(2000001313.542:14649): avc: denied { open } for pid=25019 comm="syz.8.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 424.759231][ T28] audit: type=1400 audit(2000001313.542:14650): avc: denied { prog_load } for pid=25019 comm="syz.8.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 424.761142][T25042] syzkaller0: entered promiscuous mode [ 424.779959][ T28] audit: type=1400 audit(2000001313.542:14651): avc: denied { create } for pid=25019 comm="syz.8.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 424.784117][T25042] syzkaller0: entered allmulticast mode [ 424.805755][ T28] audit: type=1400 audit(2000001313.552:14652): avc: denied { open } for pid=25021 comm="syz.7.7746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 424.848695][ T28] audit: type=1400 audit(2000001313.552:14653): avc: denied { open } for pid=25021 comm="syz.7.7746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 426.817698][T25116] Q6`Ҙ speed is unknown, defaulting to 1000 [ 426.895332][T25119] Q6`Ҙ speed is unknown, defaulting to 1000 [ 427.109910][T25127] bond4: option mode: unable to set because the bond device has slaves [ 427.127760][T25127] bond4: (slave veth19): Enslaving as a backup interface with a down link [ 427.154332][T25127] bond4: (slave veth21): Enslaving as a backup interface with a down link [ 427.292137][T25137] syzkaller0: entered promiscuous mode [ 427.297821][T25137] syzkaller0: entered allmulticast mode [ 427.376465][T25141] netlink: 'syz.8.7791': attribute type 4 has an invalid length. [ 427.968784][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7801'. [ 427.987572][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7801'. [ 428.054202][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7802'. [ 428.119062][T25170] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7803'. [ 428.428591][T25177] syzkaller0: entered promiscuous mode [ 428.441761][T25177] syzkaller0: entered allmulticast mode [ 428.779752][T25184] netlink: 'syz.9.7809': attribute type 2 has an invalid length. [ 429.165338][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7815'. [ 429.318933][ T28] kauditd_printk_skb: 301 callbacks suppressed [ 429.318999][ T28] audit: type=1400 audit(2000001318.552:14955): avc: denied { read write } for pid=25205 comm="syz.8.7828" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 429.434296][ T28] audit: type=1400 audit(2000001318.662:14956): avc: denied { prog_load } for pid=25207 comm="syz.9.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 429.521039][ T28] audit: type=1400 audit(2000001318.662:14957): avc: denied { allowed } for pid=25205 comm="syz.8.7828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 429.540822][ T28] audit: type=1400 audit(2000001318.662:14958): avc: denied { create } for pid=25205 comm="syz.8.7828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 429.597149][ T28] audit: type=1400 audit(2000001318.682:14959): avc: denied { prog_load } for pid=25207 comm="syz.9.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 429.729126][ T28] audit: type=1400 audit(2000001318.682:14960): avc: denied { open } for pid=25207 comm="syz.9.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 429.949410][ T28] audit: type=1400 audit(2000001318.682:14961): avc: denied { create } for pid=25207 comm="syz.9.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 430.025618][ T28] audit: type=1400 audit(2000001318.682:14962): avc: denied { create } for pid=25207 comm="syz.9.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 430.076689][ T28] audit: type=1400 audit(2000001318.692:14963): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 430.234878][ T28] audit: type=1400 audit(2000001318.762:14964): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 431.159983][T25238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7829'. [ 431.180408][T25238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7829'. [ 431.403818][T25252] Q6`Ҙ speed is unknown, defaulting to 1000 [ 431.474290][T25262] netlink: 'syz.4.7840': attribute type 4 has an invalid length. [ 431.500166][ T7838] Q6`Ҙ speed is unknown, defaulting to 1000 [ 431.506484][ T7838] syz2: Port: 1 Link DOWN [ 431.512828][ T7838] Q6`Ҙ speed is unknown, defaulting to 1000 [ 431.584400][T25269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7842'. [ 431.652264][T25271] bond8: (slave veth9): Enslaving as an active interface with a down link [ 431.694479][T25271] bond8: (slave veth11): Enslaving as an active interface with a down link [ 431.740903][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7850'. [ 431.749838][T25285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7850'. [ 431.841593][T25295] Q6`Ҙ speed is unknown, defaulting to 1000 [ 431.885426][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7858'. [ 432.613603][T25326] netlink: 'syz.9.7867': attribute type 13 has an invalid length. [ 432.840940][T25336] syzkaller0: entered promiscuous mode [ 432.883926][T25336] syzkaller0: entered allmulticast mode [ 432.940762][T25344] netlink: 'syz.8.7875': attribute type 1 has an invalid length. [ 432.956776][T25344] 8021q: adding VLAN 0 to HW filter on device bond9 [ 432.997835][T25344] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7875'. [ 433.010801][T25344] bond9: (slave dummy0): making interface the new active one [ 433.019436][T25344] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 433.190836][T25363] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7882'. [ 433.225900][T25363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25363 comm=syz.7.7882 [ 433.602102][T25378] Q6`Ҙ speed is unknown, defaulting to 1000 [ 433.890064][T25349] syz.9.7878 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 433.904460][T25349] CPU: 1 UID: 0 PID: 25349 Comm: syz.9.7878 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.904555][T25349] Tainted: [W]=WARN [ 433.904561][T25349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.904572][T25349] Call Trace: [ 433.904579][T25349] [ 433.904586][T25349] __dump_stack+0x1d/0x30 [ 433.904687][T25349] dump_stack_lvl+0x95/0xd0 [ 433.904706][T25349] dump_stack+0x15/0x1b [ 433.904727][T25349] dump_header+0x80/0x240 [ 433.904748][T25349] oom_kill_process+0x295/0x350 [ 433.904769][T25349] out_of_memory+0x97d/0xb80 [ 433.904820][T25349] try_charge_memcg+0x62e/0xa10 [ 433.904912][T25349] obj_cgroup_charge_pages+0x23/0xc0 [ 433.904940][T25349] __memcg_kmem_charge_page+0x9e/0x170 [ 433.904965][T25349] __alloc_frozen_pages_noprof+0x18a/0x360 [ 433.905000][T25349] alloc_pages_mpol+0x1f6/0x260 [ 433.905025][T25349] alloc_pages_noprof+0x8f/0x140 [ 433.905052][T25349] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 433.905156][T25349] __kvmalloc_node_noprof+0x3d4/0x650 [ 433.905200][T25349] ? futex_hash_allocate+0x190/0x9d0 [ 433.905229][T25349] ? futex_hash_allocate+0x190/0x9d0 [ 433.905272][T25349] futex_hash_allocate+0x190/0x9d0 [ 433.905373][T25349] ? cap_task_prctl+0x13f/0x6e0 [ 433.905399][T25349] futex_hash_prctl+0xd8/0xf0 [ 433.905425][T25349] __se_sys_prctl+0xa3d/0x13f0 [ 433.905535][T25349] __x64_sys_prctl+0x67/0x80 [ 433.905559][T25349] x64_sys_call+0x2533/0x3020 [ 433.905604][T25349] do_syscall_64+0x12c/0x370 [ 433.905632][T25349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.905655][T25349] RIP: 0033:0x7f63dbdcc819 [ 433.905672][T25349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.905725][T25349] RSP: 002b:00007f63da81f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 433.905743][T25349] RAX: ffffffffffffffda RBX: 00007f63dc045fa0 RCX: 00007f63dbdcc819 [ 433.905756][T25349] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 433.905769][T25349] RBP: 00007f63dbe62c91 R08: 0000000000000000 R09: 0000000000000000 [ 433.905783][T25349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.905797][T25349] R13: 00007f63dc046038 R14: 00007f63dc045fa0 R15: 00007ffda2d950e8 [ 433.905848][T25349] [ 433.905854][T25349] memory: usage 307200kB, limit 307200kB, failcnt 442 [ 434.155544][T25349] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 434.163841][T25349] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 434.171976][T25349] Memory cgroup stats for /syz9: [ 434.172404][T25349] cache 0 [ 434.181323][T25349] rss 0 [ 434.184138][T25349] shmem 0 [ 434.187139][T25349] mapped_file 0 [ 434.192039][T25349] dirty 0 [ 434.195030][T25349] writeback 0 [ 434.198344][T25349] workingset_refault_anon 2221 [ 434.203196][T25349] workingset_refault_file 0 [ 434.207702][T25349] swap 212992 [ 434.212886][T25349] swapcached 15216640 [ 434.216940][T25349] pgpgin 199661 [ 434.220499][T25349] pgpgout 199653 [ 434.224075][T25349] pgfault 219062 [ 434.227595][T25349] pgmajfault 380 [ 434.231162][T25349] inactive_anon 0 [ 434.234933][T25349] active_anon 32768 [ 434.238755][T25349] inactive_file 0 [ 434.242378][T25349] active_file 0 [ 434.245819][T25349] unevictable 0 [ 434.249280][T25349] hierarchical_memory_limit 314572800 [ 434.254716][T25349] hierarchical_memsw_limit 9223372036854771712 [ 434.260949][T25349] total_cache 0 [ 434.264411][T25349] total_rss 0 [ 434.267691][T25349] total_shmem 0 [ 434.271233][T25349] total_mapped_file 0 [ 434.275226][T25349] total_dirty 0 [ 434.278731][T25349] total_writeback 0 [ 434.282617][T25349] total_workingset_refault_anon 2221 [ 434.288789][T25349] total_workingset_refault_file 0 [ 434.293040][T25399] Q6`Ҙ speed is unknown, defaulting to 1000 [ 434.293807][T25349] total_swap 212992 [ 434.293817][T25349] total_swapcached 15216640 [ 434.293825][T25349] total_pgpgin 199661 [ 434.312536][T25349] total_pgpgout 199653 [ 434.316682][T25349] total_pgfault 219062 [ 434.321356][T25349] total_pgmajfault 380 [ 434.325458][T25349] total_inactive_anon 0 [ 434.329745][T25349] total_active_anon 32768 [ 434.334316][T25349] total_inactive_file 0 [ 434.338638][T25349] total_active_file 0 [ 434.339165][ T28] kauditd_printk_skb: 261 callbacks suppressed [ 434.339177][ T28] audit: type=1400 audit(2000001579.578:15226): avc: denied { map_create } for pid=25398 comm="syz.8.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 434.342637][T25349] total_unevictable 0 [ 434.367568][ T28] audit: type=1400 audit(2000001579.588:15227): avc: denied { prog_load } for pid=25398 comm="syz.8.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 434.368445][T25349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.7878,pid=25348,uid=0 [ 434.406333][T25349] Memory cgroup out of memory: Killed process 25348 (syz.9.7878) total-vm:96212kB, anon-rss:1228kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 434.424339][ T28] audit: type=1400 audit(2000001579.588:15228): avc: denied { prog_load } for pid=25398 comm="syz.8.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 434.469120][ T28] audit: type=1400 audit(2000001579.698:15229): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 434.496921][ T28] audit: type=1400 audit(2000001579.728:15230): avc: denied { name_bind } for pid=25401 comm="syz.8.7895" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 434.520909][ T28] audit: type=1400 audit(2000001579.728:15231): avc: denied { map_create } for pid=25401 comm="syz.8.7895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 434.580568][ T28] audit: type=1400 audit(2000001579.728:15232): avc: denied { prog_load } for pid=25401 comm="syz.8.7895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 434.618459][ T28] audit: type=1400 audit(2000001579.728:15233): avc: denied { bpf } for pid=25401 comm="syz.8.7895" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 434.776071][ T28] audit: type=1400 audit(2000001579.778:15234): avc: denied { read write } for pid=16992 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 434.814623][ T28] audit: type=1400 audit(2000001579.788:15235): avc: denied { name_bind } for pid=25403 comm="syz.4.7898" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 435.147429][T25448] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7914'. [ 435.192404][T25448] bond9: entered promiscuous mode [ 435.208794][T25448] bond9: entered allmulticast mode [ 435.214160][T25448] 8021q: adding VLAN 0 to HW filter on device bond9 [ 435.227184][T25448] erspan1: entered allmulticast mode [ 435.235073][T25448] erspan1: entered promiscuous mode [ 435.339139][T25448] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 435.572977][T25475] netlink: 'syz.8.7923': attribute type 3 has an invalid length. [ 435.763176][T25485] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7927'. [ 435.807640][T25485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25485 comm=syz.7.7927 [ 436.071051][T25494] Q6`Ҙ speed is unknown, defaulting to 1000 [ 436.448328][T25502] syzkaller0: entered promiscuous mode [ 436.462699][T25502] syzkaller0: entered allmulticast mode [ 437.058252][T25518] syzkaller0: entered promiscuous mode [ 437.075089][T25518] syzkaller0: entered allmulticast mode [ 437.171603][T25523] __nla_validate_parse: 1 callbacks suppressed [ 437.171619][T25523] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7942'. [ 437.198048][T25523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25523 comm=syz.9.7942 [ 437.251973][T25530] Q6`Ҙ speed is unknown, defaulting to 1000 [ 437.279012][T25525] netlink: 'syz.8.7943': attribute type 4 has an invalid length. [ 437.286749][T25525] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7943'. [ 437.537032][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7950'. [ 437.557951][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7950'. [ 438.541485][T25599] netlink: 'syz.1.7971': attribute type 13 has an invalid length. [ 438.605163][T25601] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 438.831164][T25613] Q6`Ҙ speed is unknown, defaulting to 1000 [ 439.352849][ T28] kauditd_printk_skb: 282 callbacks suppressed [ 439.352865][ T28] audit: type=1400 audit(2000001584.588:15518): avc: denied { create } for pid=25630 comm="syz.4.7983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 439.398448][ T28] audit: type=1400 audit(2000001584.618:15519): avc: denied { open } for pid=25630 comm="syz.4.7983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 439.438438][ T28] audit: type=1400 audit(2000001584.658:15520): avc: denied { open } for pid=25632 comm="syz.4.7984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 439.478429][ T28] audit: type=1400 audit(2000001584.658:15521): avc: denied { allowed } for pid=25632 comm="syz.4.7984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 439.530362][ T28] audit: type=1400 audit(2000001584.658:15522): avc: denied { create } for pid=25632 comm="syz.4.7984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 439.560317][ T28] audit: type=1400 audit(2000001584.658:15523): avc: denied { execmem } for pid=25632 comm="syz.4.7984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 439.598417][ T28] audit: type=1400 audit(2000001584.828:15524): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 439.658453][T25639] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7987'. [ 439.695788][ T28] audit: type=1400 audit(2000001584.858:15525): avc: denied { create } for pid=25634 comm="syz.8.7985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 439.742991][T25644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7990'. [ 439.751849][ T28] audit: type=1400 audit(2000001584.858:15526): avc: denied { create } for pid=25634 comm="syz.8.7985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 439.789410][ T28] audit: type=1400 audit(2000001584.858:15527): avc: denied { create } for pid=25634 comm="syz.8.7985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 439.816671][T25647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7991'. [ 439.933459][T25665] syzkaller0: entered promiscuous mode [ 439.939422][T25665] syzkaller0: entered allmulticast mode [ 439.945657][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.969272][T25669] netlink: 'syz.4.8002': attribute type 13 has an invalid length. [ 440.064731][T25681] syzkaller0: entered promiscuous mode [ 440.078469][T25681] syzkaller0: entered allmulticast mode [ 440.087236][T25683] Q6`Ҙ speed is unknown, defaulting to 1000 [ 440.135619][T25686] syzkaller0: entered promiscuous mode [ 440.161016][T25686] syzkaller0: entered allmulticast mode [ 440.742596][T25716] Q6`Ҙ speed is unknown, defaulting to 1000 [ 440.751400][T25717] netlink: 'syz.1.8019': attribute type 4 has an invalid length. [ 440.775152][T25720] netlink: 'syz.8.8018': attribute type 13 has an invalid length. [ 440.806812][T25717] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8019'. [ 441.269951][T25749] syz.4.8032 (25749): attempted to duplicate a private mapping with mremap. This is not supported. [ 441.315677][T25746] team_slave_1: Caught tx_queue_len zero misconfig [ 441.399501][T25756] netlink: 'syz.7.8035': attribute type 13 has an invalid length. [ 441.467646][T25761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8036'. [ 441.492681][T25761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.967923][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8046'. [ 442.054397][T25791] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 442.395656][T25815] syzkaller0: entered promiscuous mode [ 442.411408][T25815] syzkaller0: entered allmulticast mode [ 442.508821][T25823] : renamed from vlan0 (while UP) [ 442.643649][T25847] __nla_validate_parse: 1 callbacks suppressed [ 442.643729][T25847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8073'. [ 442.819096][T25861] syzkaller0: entered promiscuous mode [ 442.831133][T25861] syzkaller0: entered allmulticast mode [ 442.940940][T25880] Q6`Ҙ speed is unknown, defaulting to 1000 [ 443.041945][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8091'. [ 443.105907][T25897] syzkaller0: entered promiscuous mode [ 443.111488][T25897] syzkaller0: entered allmulticast mode [ 443.242552][T25905] syzkaller0: entered promiscuous mode [ 443.248172][T25905] syzkaller0: entered allmulticast mode [ 444.112272][T25956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 444.144031][T25961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8119'. [ 444.199601][T25971] ipt_ECN: cannot use operation on non-tcp rule [ 444.243556][T25978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8127'. [ 444.358954][ T28] kauditd_printk_skb: 521 callbacks suppressed [ 444.358968][ T28] audit: type=1400 audit(2000001845.591:16049): avc: denied { prog_load } for pid=25986 comm="syz.7.8131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 444.385364][ T28] audit: type=1400 audit(2000001845.611:16050): avc: denied { create } for pid=25986 comm="syz.7.8131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 444.502407][ T28] audit: type=1400 audit(2000001845.731:16051): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 444.535979][ T28] audit: type=1400 audit(2000001845.761:16052): avc: denied { open } for pid=25990 comm="syz.8.8132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 444.555631][ T28] audit: type=1400 audit(2000001845.761:16053): avc: denied { prog_load } for pid=25990 comm="syz.8.8132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 444.575103][ T28] audit: type=1400 audit(2000001845.761:16054): avc: denied { prog_load } for pid=25990 comm="syz.8.8132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 444.595970][ T28] audit: type=1400 audit(2000001845.761:16055): avc: denied { open } for pid=25990 comm="syz.8.8132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 444.615803][ T28] audit: type=1400 audit(2000001845.831:16056): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 444.645121][ T28] audit: type=1400 audit(2000001845.881:16057): avc: denied { execmem } for pid=25995 comm="syz.8.8134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 444.665310][ T28] audit: type=1400 audit(2000001845.881:16058): avc: denied { allowed } for pid=25995 comm="syz.8.8134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 444.862738][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8140'. [ 444.871937][T26012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.305585][T26029] Q6`Ҙ speed is unknown, defaulting to 1000 [ 445.540076][T26037] syzkaller0: entered promiscuous mode [ 445.545679][T26037] syzkaller0: entered allmulticast mode [ 445.739035][T26051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8153'. [ 445.748570][T26051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8153'. [ 445.785738][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 446.246765][T26074] netlink: 14590 bytes leftover after parsing attributes in process `syz.9.8164'. [ 446.489760][T26104] syzkaller0: entered promiscuous mode [ 446.625410][T26123] syzkaller0: entered promiscuous mode [ 446.637033][T26123] syzkaller0: entered allmulticast mode [ 447.717572][T26154] : port 1(veth0_to_bridge) entered blocking state [ 447.724440][T26154] : port 1(veth0_to_bridge) entered disabled state [ 447.731421][T26154] veth0_to_bridge: entered allmulticast mode [ 447.737744][T26154] veth0_to_bridge: entered promiscuous mode [ 447.746363][T26154] : port 2(veth0_to_team) entered blocking state [ 447.753127][T26154] : port 2(veth0_to_team) entered disabled state [ 447.759841][T26154] veth0_to_team: entered allmulticast mode [ 447.766294][T26154] veth0_to_team: entered promiscuous mode [ 447.799852][ T3809] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 448.171503][T26196] ipip1: entered promiscuous mode [ 448.203286][T26198] Q6`Ҙ speed is unknown, defaulting to 1000 [ 448.336191][T26206] syzkaller0: entered promiscuous mode [ 448.353316][T26206] syzkaller0: entered allmulticast mode [ 448.739743][T26228] syzkaller0: entered promiscuous mode [ 448.778864][T26228] syzkaller0: entered allmulticast mode [ 448.960989][T26236] syzkaller0: entered promiscuous mode [ 448.989245][T26236] syzkaller0: entered allmulticast mode [ 449.384742][ T28] kauditd_printk_skb: 410 callbacks suppressed [ 449.384795][ T28] audit: type=1400 audit(2000001850.611:16469): avc: denied { create } for pid=26262 comm="syz.4.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 449.486502][ T28] audit: type=1400 audit(2000001850.651:16470): avc: denied { module_request } for pid=26262 comm="syz.4.8245" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 449.574843][ T28] audit: type=1400 audit(2000001850.651:16471): avc: denied { sys_module } for pid=26262 comm="syz.4.8245" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 449.641563][T26271] netlink: 'syz.9.8247': attribute type 1 has an invalid length. [ 449.677617][ T28] audit: type=1400 audit(2000001850.651:16472): avc: denied { create } for pid=26262 comm="syz.4.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 449.705914][T26271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.730535][ T28] audit: type=1400 audit(2000001850.651:16473): avc: denied { create } for pid=26262 comm="syz.4.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 449.751374][ T28] audit: type=1400 audit(2000001850.761:16474): avc: denied { module_request } for pid=26266 comm="syz.4.8246" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 449.777576][ T28] audit: type=1400 audit(2000001850.761:16475): avc: denied { sys_module } for pid=26266 comm="syz.4.8246" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 449.805714][T26271] macvlan0: entered promiscuous mode [ 449.812056][T26271] bond6: entered promiscuous mode [ 449.817925][T26271] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 449.825938][ T28] audit: type=1400 audit(2000001850.761:16476): avc: denied { create } for pid=26266 comm="syz.4.8246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 449.851166][ T28] audit: type=1400 audit(2000001850.831:16477): avc: denied { prog_load } for pid=26261 comm="syz.9.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 449.952902][T26271] bond6: left promiscuous mode [ 450.074955][ T28] audit: type=1400 audit(2000001850.831:16478): avc: denied { create } for pid=26261 comm="syz.9.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 451.040922][T26314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8264'. [ 451.225153][T26327] : port 1(veth0_to_bridge) entered blocking state [ 451.246051][T26327] : port 1(veth0_to_bridge) entered disabled state [ 451.264020][T26327] veth0_to_bridge: entered allmulticast mode [ 451.283158][T26327] veth0_to_bridge: entered promiscuous mode [ 451.293895][T26333] : port 2(veth0_to_team) entered blocking state [ 451.311824][T26333] : port 2(veth0_to_team) entered disabled state [ 451.319484][T26333] veth0_to_team: entered allmulticast mode [ 451.325990][T26333] veth0_to_team: entered promiscuous mode [ 451.397295][T26344] syzkaller0: entered promiscuous mode [ 451.414670][T26344] syzkaller0: entered allmulticast mode [ 451.906203][T26357] netlink: 'syz.4.8280': attribute type 1 has an invalid length. [ 451.921288][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8280'. [ 451.935437][T26357] bond15: (slave geneve4): making interface the new active one [ 451.943607][T26357] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 451.952534][ T3727] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.961129][ T3727] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.970626][ T3727] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.979157][ T3727] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 452.167745][T26380] : renamed from vlan0 [ 452.640890][T26403] netlink: 'syz.1.8301': attribute type 3 has an invalid length. [ 452.649348][T26403] netlink: 'syz.1.8301': attribute type 3 has an invalid length. [ 453.283945][T26442] syzkaller0: entered promiscuous mode [ 453.291389][T26442] syzkaller0: entered allmulticast mode [ 453.371843][T26447] ================================================================== [ 453.379928][T26447] BUG: KCSAN: data-race in copy_mm / percpu_counter_add_batch [ 453.387381][T26447] [ 453.389692][T26447] read-write to 0xffff88812b22d5c8 of 8 bytes by task 26440 on cpu 0: [ 453.397822][T26447] percpu_counter_add_batch+0x105/0x130 [ 453.403357][T26447] do_wp_page+0x1416/0x2590 [ 453.407852][T26447] handle_mm_fault+0x8cb/0x3020 [ 453.412696][T26447] do_user_addr_fault+0x3fd/0x1050 [ 453.417809][T26447] exc_page_fault+0x62/0xa0 [ 453.422326][T26447] asm_exc_page_fault+0x26/0x30 [ 453.427168][T26447] rep_movs_alternative+0x4a/0x90 [ 453.432185][T26447] _copy_to_iter+0x141/0xea0 [ 453.436763][T26447] __skb_datagram_iter+0x2f4/0x680 [ 453.441870][T26447] skb_copy_datagram_iter+0x3f/0x120 [ 453.447150][T26447] unix_stream_read_actor+0x43/0x70 [ 453.452355][T26447] unix_stream_read_generic+0x6e9/0x1630 [ 453.457972][T26447] unix_stream_recvmsg+0xff/0x130 [ 453.462988][T26447] sock_recvmsg+0xf5/0x120 [ 453.467392][T26447] ____sys_recvmsg+0xf5/0x280 [ 453.472063][T26447] ___sys_recvmsg+0x11f/0x3b0 [ 453.476733][T26447] __x64_sys_recvmsg+0xd1/0x160 [ 453.481572][T26447] x64_sys_call+0x2b1a/0x3020 [ 453.486242][T26447] do_syscall_64+0x12c/0x370 [ 453.490908][T26447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.496788][T26447] [ 453.499097][T26447] read to 0xffff88812b22d100 of 1664 bytes by task 26447 on cpu 1: [ 453.506971][T26447] copy_mm+0xe1/0x370 [ 453.510943][T26447] copy_process+0xe22/0x20b0 [ 453.515529][T26447] kernel_clone+0x16b/0x5d0 [ 453.520024][T26447] __x64_sys_clone+0x143/0x180 [ 453.524790][T26447] x64_sys_call+0x1222/0x3020 [ 453.529472][T26447] do_syscall_64+0x12c/0x370 [ 453.534057][T26447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.539940][T26447] [ 453.542247][T26447] Reported by Kernel Concurrency Sanitizer on: [ 453.548381][T26447] CPU: 1 UID: 0 PID: 26447 Comm: syz.1.8317 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.559307][T26447] Tainted: [W]=WARN [ 453.563107][T26447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.573150][T26447] ================================================================== [ 453.648151][T26447] Q6`Ҙ speed is unknown, defaulting to 1000 [ 454.490586][ T28] kauditd_printk_skb: 256 callbacks suppressed [ 454.490601][ T28] audit: type=1400 audit(2000001855.721:16735): avc: denied { read write } for pid=10094 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0