last executing test programs: 11m10.406555979s ago: executing program 32 (id=972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) 11m9.91313776s ago: executing program 33 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f323f1800000100112233445500112233445500ff0000", 0xfdef) 10m58.738961946s ago: executing program 5 (id=1219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 10m58.738472946s ago: executing program 5 (id=1220): memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be000311"], 0x7a) 10m58.678667268s ago: executing program 5 (id=1221): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 10m58.663170692s ago: executing program 5 (id=1222): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x805}, @val={0x2, 0x80, 0xc37, 0x8000, 0xffff, 0x7c19}, @ipv4=@icmp={{0x5, 0x4, 0x2, 0x3f, 0x1c, 0x66, 0x0, 0x1, 0x1, 0x0, @multicast2, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x2}}}, 0x2a) 10m58.608082233s ago: executing program 5 (id=1223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000005700)=r1, 0x12) 10m58.560916943s ago: executing program 5 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r0, 0x20, 0x0, 0x4000) 10m43.181232149s ago: executing program 34 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r0, 0x20, 0x0, 0x4000) 7m21.236418362s ago: executing program 6 (id=2840): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00"], 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x2801}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) 7m20.9544231s ago: executing program 6 (id=2847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(0x0, 0x8000000, 0x200) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8040) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) 7m20.078496139s ago: executing program 6 (id=2858): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000cc0)=0x3, 0x12) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @private2}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={r2}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 7m18.783777154s ago: executing program 6 (id=2867): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mount(0x0, 0x0, 0x0, 0x8410, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x21) r0 = socket(0x1e, 0x1, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 7m18.766807068s ago: executing program 6 (id=2868): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 7m18.70620643s ago: executing program 6 (id=2869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00"], 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x2801}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) 7m3.639200572s ago: executing program 35 (id=2869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00"], 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x2801}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) 6m13.710969466s ago: executing program 2 (id=3286): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000240)={&(0x7f00000001c0)=""/88, 0x58}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 6m13.710531687s ago: executing program 2 (id=3287): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x60403) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m13.668558345s ago: executing program 2 (id=3288): ioctl$TIOCMBIS(0xffffffffffffffff, 0x80045440, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) 6m12.622485719s ago: executing program 2 (id=3299): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x60403) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x2, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m12.595446585s ago: executing program 2 (id=3300): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 6m12.516249491s ago: executing program 2 (id=3301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r3) 6m12.254845444s ago: executing program 4 (id=3303): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000180), 0x1000) 6m12.197067786s ago: executing program 4 (id=3304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xdd7c, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000cc0)="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", 0x3c2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 6m12.168212942s ago: executing program 4 (id=3306): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 6m12.099920516s ago: executing program 4 (id=3308): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) syz_usb_connect(0x6, 0x344, &(0x7f0000000680)={{0x12, 0x1, 0x100, 0x24, 0xbe, 0xfc, 0x20, 0xe41, 0x4156, 0xd3cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x332, 0x4, 0x2, 0xd, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x0, 0xe4, 0x48, 0x7f, 0x9, [@uac_as]}}, {{0x9, 0x4, 0x90, 0x31, 0x7, 0x82, 0xb6, 0xe7, 0xb4, [@hid_hid={0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xd7b}}, @uac_control={{0xa, 0x24, 0x1, 0xfff, 0x1d}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x4, 0x3, "b36b409b"}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x30, "aaccd1"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x7, 0x12, 0x19}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x8, 0x10, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0xa7, 0x2, 0x9, [@generic={0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x4, 0x2, 0x96}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x7, 0x7, 0x7}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x8, 0x3, 0xfd}}]}}, {{0x9, 0x4, 0xa, 0x5, 0x9, 0x8f, 0xfc, 0x42, 0xe4, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x61, 0x56, 0x9, 'UN', "ca85db"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9, 0x7, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xf3, 0xa0, 0x0, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x6, "732b51136fc88ca2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x6, 0x9, 0x5, 0x1}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x4, 0x8, 0xfa, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x19f, 0x9, 0xf, 0x0, [@generic={0x75, 0xf, "97fd50a869641fb5c37636cf48aaa404ec22ca3248c5dca0595791288c5f52c86a49e991895dfc10265518af35d19cbd17953b99e9d2667b635b22e881bb38f13f5c397922660092d0fbdf5f58f87b2bb3b67c76669fa72c2af035952a2fc768bd9093bde9da965471e21c7cef418acfa19ada"}]}}, {{0x9, 0x5, 0xf, 0x12, 0x3ff, 0x6, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8, 0x7}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x0, 0x1, 0x80, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x2, 0x18, 0x4, [@generic={0x2, 0x11}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x7, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x42, 0xb1e}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x4, 0xff, [@generic={0xb6, 0x30, "39dd5b2a870817865d3454a09bd04c64463ec64a4d29be85296fbeab9bc120558f76ec6c0c2b0c115707f25ca9be56b29e31076a860fd2cb3f43e2a4fb9e4865325e6bfbfbb10b3dc05e2705cc4551b7f1333353dc7202766c39f0092bdd142e22c07d69746c296190dc8b9d0bd609231c621b1e12dda68e73ae62447e7ab5988af12b88fc5c2592a9c2d1ad713567186b952227f876fb1fbf32fbd860e12c91695d3b9aa8c26549888f747e85a345579b77de24"}, @generic={0xc0, 0x10, "263fe587c8df32be55f96217776638fcc790f917dc8e878e1413aeef2add64b5e9054897fb7a9d3456649e56251d82c12889f3f805c2642fb7597e7eacdf6e6e298d6a15a68e4f70b8c52a736e9385f22eb9037de9032b413930f278b4f6855b773ae5ccb13f1d81c1bcde9a3cfb161d335afaa3c6e0d10e82c336b95186270a32b58e2ebab331247af72ef8cfc43a8273fe2d468c9c2385bd3fb7e2c27b360a3c1f7fcac8c0a36549ec59fcfdf69705711f461180d729da7054e06a3402"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x40, 0x10, 0x15}}]}}, {{0x9, 0x4, 0x72, 0x5e, 0x0, 0xff, 0x0, 0x0, 0x7}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x200, 0xd, 0x4, 0x8, 0x0, 0xe5}, 0xc, &(0x7f0000001040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x0, 0x2}]}, 0x3, [{0xaa, &(0x7f0000001080)=@string={0xaa, 0x3, "e38fccda809cfea463bf87062cc4fa813f8df1059564e73561856e2f42e45d977e12241237ed1165d0568161b508a29079c655a329e4d40155e3283bb293cdb8f76964244b10197894997d3f356eff6d043f622871ef94064c9aeebe54d65e63433aaf721d65f0c87b60e6fa59b3999dd57246182ce671fe3ee17b2289645c382fb978b29e02994cd5f3384fc4db0271dfca03001ef7e7f7c9b41c099a8a14da317318e90cde86b6"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x81d}}, {0x0, 0x0}]}) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) 6m11.280269084s ago: executing program 1 (id=3310): ioctl$TIOCMBIS(0xffffffffffffffff, 0x80045440, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) 6m10.206606533s ago: executing program 1 (id=3316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={0x0, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 6m9.264396366s ago: executing program 1 (id=3321): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x3f) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611078000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) 6m9.023180925s ago: executing program 4 (id=3322): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) 6m8.873409426s ago: executing program 4 (id=3324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b4, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3) ioctl$TCSBRKP(r2, 0x5425, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m8.090313446s ago: executing program 1 (id=3327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000cc0)=0x3, 0x12) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @private2}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={r2}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 6m7.172654944s ago: executing program 1 (id=3334): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) 6m7.063793797s ago: executing program 1 (id=3335): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) 5m56.956050754s ago: executing program 36 (id=3301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r3) 5m53.80019488s ago: executing program 37 (id=3324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b4, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3) ioctl$TCSBRKP(r2, 0x5425, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m51.79395164s ago: executing program 38 (id=3335): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) 2.726414522s ago: executing program 7 (id=6616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="080009000c000b000200440080030180ff0f01001700fd7ee7171538e47e23f03b1785a9d04fbda66780233426f9117dc40b6c2caff19052a90bb20058631e90d897f45907ed301b037ec08b1b29f129333ae123478f6b4c67d9c5bb273c13669eb0abe550d13dfed4035c8d5c98ff86a619d9696eda7504876051e22be6e244bea3c531dac38173ddb978a89b3408ad0a0000004a386b3cdf1007a99e2863362dfe0beae3fbffc838bcef26552915c3ea9e6d37b3af1d20bc5c68cb0d7c6dd0c6d4e655e0c1cba703c6e26f5bdd563c0f25d89afb94d361ea841ab8f032651fa48cf7cba32e466ba6c4413f164969748a9d7f5baf79825a8d590d9c0171f411fc9b407133f430e4e8089757b4ef3c98c030cbe65239f1dc4f8dd25089ffcdeaa78a49a1c9f3da912cbf9d9e0682a284f0c38876495f9139bce0a4714f2ef59664ccb36f8ab28cf89c9f0b65aa2014af51cb09448bef8b"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 2.607628066s ago: executing program 0 (id=6617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="080009000c000b000200440080030180ff0f01001700fd7ee7171538e47e23f03b1785a9d04fbda66780233426f9117dc40b6c2caff19052a90bb20058631e90d897f45907ed301b037ec08b1b29f129333ae123478f6b4c67d9c5bb273c13669eb0abe550d13dfed4035c8d5c98ff86a619d9696eda7504876051e22be6e244bea3c531dac38173ddb978a89b3408ad0a0000004a386b3cdf1007a99e2863362dfe0beae3fbffc838bcef26552915c3ea9e6d37b3af1d20bc5c68cb0d7c6dd0c6d4e655e0c1cba703c6e26f5bdd563c0f25d89afb94d361ea841ab8f032651fa48cf7cba32e466ba6c4413f164969748a9d7f5baf79825a8d590d9c0171f411fc9b407133f430e4e8089757b4ef3c98c030cbe65239f1dc4f8dd25089ffcdeaa78a49a1c9f3da912cbf9d9e0682a284f0c38876495f9139bce0a4714f2ef59664ccb36f8ab28cf89c9f0b65aa2014af51cb09448bef8b"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 2.19694905s ago: executing program 8 (id=6621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 2.103169549s ago: executing program 0 (id=6622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="080009000c000b000200440080030180ff0f01001700fd7ee7171538e47e23f03b1785a9d04fbda66780233426f9117dc40b6c2caff19052a90bb20058631e90d897f45907ed301b037ec08b1b29f129333ae123478f6b4c67d9c5bb273c13669eb0abe550d13dfed4035c8d5c98ff86a619d9696eda7504876051e22be6e244bea3c531dac38173ddb978a89b3408ad0a0000004a386b3cdf1007a99e2863362dfe0beae3fbffc838bcef26552915c3ea9e6d37b3af1d20bc5c68cb0d7c6dd0c6d4e655e0c1cba703c6e26f5bdd563c0f25d89afb94d361ea841ab8f032651fa48cf7cba32e466ba6c4413f164969748a9d7f5baf79825a8d590d9c0171f411fc9b407133f430e4e8089757b4ef3c98c030cbe65239f1dc4f8dd25089ffcdeaa78a49a1c9f3da912cbf9d9e0682a284f0c38876495f9139bce0a4714f2ef59664ccb36f8ab28cf89c9f0b65aa2014af51cb09448bef8b"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 2.088435352s ago: executing program 9 (id=6623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.976101486s ago: executing program 3 (id=6624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.818735828s ago: executing program 3 (id=6625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.75653165s ago: executing program 9 (id=6626): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.738921934s ago: executing program 7 (id=6627): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="080009000c000b000200440080030180ff0f01001700fd7ee7171538e47e23f03b1785a9d04fbda66780233426f9117dc40b6c2caff19052a90bb20058631e90d897f45907ed301b037ec08b1b29f129333ae123478f6b4c67d9c5bb273c13669eb0abe550d13dfed4035c8d5c98ff86a619d9696eda7504876051e22be6e244bea3c531dac38173ddb978a89b3408ad0a0000004a386b3cdf1007a99e2863362dfe0beae3fbffc838bcef26552915c3ea9e6d37b3af1d20bc5c68cb0d7c6dd0c6d4e655e0c1cba703c6e26f5bdd563c0f25d89afb94d361ea841ab8f032651fa48cf7cba32e466ba6c4413f164969748a9d7f5baf79825a8d590d9c0171f411fc9b407133f430e4e8089757b4ef3c98c030cbe65239f1dc4f8dd25089ffcdeaa78a49a1c9f3da912cbf9d9e0682a284f0c38876495f9139bce0a4714f2ef59664ccb36f8ab28cf89c9f0b65aa2014af51cb09448bef8b"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.639698054s ago: executing program 8 (id=6628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.544115674s ago: executing program 3 (id=6629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.543410344s ago: executing program 0 (id=6630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.490468035s ago: executing program 7 (id=6631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.421180959s ago: executing program 8 (id=6632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.248854254s ago: executing program 3 (id=6633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.245472295s ago: executing program 0 (id=6634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.239155137s ago: executing program 9 (id=6635): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32, @ANYRES32=r0], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.202375884s ago: executing program 8 (id=6636): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32, @ANYRES32=r0], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 1.054432264s ago: executing program 3 (id=6637): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32, @ANYRES32=r0], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 989.374697ms ago: executing program 9 (id=6638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 917.278192ms ago: executing program 8 (id=6639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 823.161971ms ago: executing program 0 (id=6640): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 728.872231ms ago: executing program 7 (id=6641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 574.571862ms ago: executing program 9 (id=6642): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 353.563927ms ago: executing program 3 (id=6643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 342.715389ms ago: executing program 7 (id=6644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 196.22513ms ago: executing program 8 (id=6645): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 176.269374ms ago: executing program 0 (id=6646): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="080009000c000b000200440080030180ff0f01001700fd7ee7171538e47e23f03b1785a9d04fbda66780233426f9117dc40b6c2caff19052a90bb20058631e90d897f45907ed301b037ec08b1b29f129333ae123478f6b4c67d9c5bb273c13669eb0abe550d13dfed4035c8d5c98ff86a619d9696eda7504876051e22be6e244bea3c531dac38173ddb978a89b3408ad0a0000004a386b3cdf1007a99e2863362dfe0beae3fbffc838bcef26552915c3ea9e6d37b3af1d20bc5c68cb0d7c6dd0c6d4e655e0c1cba703c6e26f5bdd563c0f25d89afb94d361ea841ab8f032651fa48cf7cba32e466ba6c4413f164969748a9d7f5baf79825a8d590d9c0171f411fc9b407133f430e4e8089757b4ef3c98c030cbe65239f1dc4f8dd25089ffcdeaa78a49a1c9f3da912cbf9d9e0682a284f0c38876495f9139bce0a4714f2ef59664ccb36f8ab28cf89c9f0b65aa2014af51cb09448bef8b"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 162.683836ms ago: executing program 9 (id=6647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 0s ago: executing program 7 (id=6648): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe02bceeb5ffffbfa400000000000007040000f0ffffffb702db000800", @ANYRES32=r0, @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) kernel console output (not intermixed with test programs): entered promiscuous mode [ 482.660627][T18364] macvtap1: entered allmulticast mode [ 482.660645][T18364] batadv0: entered allmulticast mode [ 482.661410][T18364] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 482.849864][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4662'. [ 482.924923][T18376] syzkaller0: entered promiscuous mode [ 482.924947][T18376] syzkaller0: entered allmulticast mode [ 482.945855][T18380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.945944][T18380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.998075][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4668'. [ 483.486252][T18395] xt_hashlimit: size too large, truncated to 1048576 [ 483.486616][T18395] xt_hashlimit: max too large, truncated to 1048576 [ 483.486641][T18395] xt_hashlimit: Unknown mode mask B2F8C500, kernel too old? [ 483.807927][T18411] tipc: Enabled bearer , priority 0 [ 483.813532][T18411] tipc: Resetting bearer [ 483.824808][T18410] tipc: Disabling bearer [ 483.911894][T18416] __nla_validate_parse: 2 callbacks suppressed [ 483.911914][T18416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4679'. [ 484.020976][T18420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.021071][T18420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.029947][ T29] audit: type=1400 audit(1790538825.568:933): avc: denied { create } for pid=18419 comm="syz.3.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 484.063700][T18422] xt_hashlimit: size too large, truncated to 1048576 [ 484.063731][T18422] xt_hashlimit: max too large, truncated to 1048576 [ 484.063741][T18422] xt_hashlimit: Unknown mode mask B2F8C500, kernel too old? [ 484.064918][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4682'. [ 484.115409][ T29] audit: type=1400 audit(1790538825.658:934): avc: denied { create } for pid=18419 comm="syz.3.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 484.125391][T18425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.125574][T18425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.357635][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'. [ 485.560521][T18451] xt_hashlimit: size too large, truncated to 1048576 [ 485.560539][T18451] xt_hashlimit: max too large, truncated to 1048576 [ 485.560548][T18451] xt_hashlimit: Unknown mode mask B2000000, kernel too old? [ 485.570977][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4693'. [ 486.125307][T18470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.126268][T18470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.279055][T18472] syzkaller0: entered promiscuous mode [ 486.279081][T18472] syzkaller0: entered allmulticast mode [ 486.286520][T18474] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4702'. [ 486.405892][T18481] xt_hashlimit: size too large, truncated to 1048576 [ 486.405911][T18481] xt_hashlimit: max too large, truncated to 1048576 [ 486.405923][T18481] xt_hashlimit: Unknown mode mask B2000000, kernel too old? [ 486.419717][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4705'. [ 486.575782][T18487] syzkaller0: entered promiscuous mode [ 486.575805][T18487] syzkaller0: entered allmulticast mode [ 487.119826][T18502] syzkaller0: entered promiscuous mode [ 487.119881][T18502] syzkaller0: entered allmulticast mode [ 487.165963][T18504] netlink: 'syz.7.4715': attribute type 3 has an invalid length. [ 487.203581][T18508] xt_hashlimit: size too large, truncated to 1048576 [ 487.203598][T18508] xt_hashlimit: max too large, truncated to 1048576 [ 487.203609][T18508] xt_hashlimit: Unknown mode mask B2000000, kernel too old? [ 487.211677][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4717'. [ 487.325817][T18514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.325913][T18514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.362609][T18513] syzkaller1: entered promiscuous mode [ 487.362695][T18513] syzkaller1: entered allmulticast mode [ 487.397868][T18518] syzkaller0: entered promiscuous mode [ 487.397954][T18518] syzkaller0: entered allmulticast mode [ 487.455202][T18522] tipc: Enabled bearer , priority 0 [ 487.456423][T18521] tipc: Disabling bearer [ 487.499841][T18528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.500002][T18528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.502846][T18528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.502944][T18528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.513188][ T12] IPVS: starting estimator thread 0... [ 487.529087][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4729'. [ 487.529108][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4729'. [ 487.575253][T18536] xt_hashlimit: size too large, truncated to 1048576 [ 487.575272][T18536] xt_hashlimit: max too large, truncated to 1048576 [ 487.580309][T18537] syzkaller0: entered promiscuous mode [ 487.580329][T18537] syzkaller0: entered allmulticast mode [ 487.600190][T18529] IPVS: using max 2592 ests per chain, 129600 per kthread [ 487.930642][T18556] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 487.935255][ T29] audit: type=1400 audit(1790538829.478:935): avc: denied { create } for pid=18555 comm="syz.9.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 487.936666][ T29] audit: type=1400 audit(1790538829.478:936): avc: denied { ioctl } for pid=18555 comm="syz.9.4739" path="socket:[73792]" dev="sockfs" ino=73792 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 488.039360][T18563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4742'. [ 488.122903][T18566] xt_hashlimit: size too large, truncated to 1048576 [ 488.123784][T18566] xt_hashlimit: max too large, truncated to 1048576 [ 488.450702][T18580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.450796][T18580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.481592][T18582] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 488.616983][T18587] syzkaller1: entered promiscuous mode [ 488.617006][T18587] syzkaller1: entered allmulticast mode [ 488.637787][ T3394] wiimote 0005:057E:0330.0010: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 488.638127][ T3394] wiimote 0005:057E:0330.0010: New device registered [ 488.643446][ T3394] wiimote 0005:057E:0330.0010: detected device: Nintendo Wii Remote Plus (Gen 2) [ 488.645976][ T3394] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input6 [ 488.649429][ T29] audit: type=1400 audit(1790538830.198:937): avc: denied { read } for pid=2970 comm="acpid" name="event4" dev="devtmpfs" ino=924 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 488.649458][ T29] audit: type=1400 audit(1790538830.198:938): avc: denied { open } for pid=2970 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=924 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 488.649486][ T29] audit: type=1400 audit(1790538830.198:939): avc: denied { ioctl } for pid=2970 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=924 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 488.650341][ T3394] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input7 [ 488.657033][ T3394] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input5 [ 488.660235][T18590] wiimote 0005:057E:0330.0010: Device removed [ 488.669426][T18591] fido_id[18591]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 488.836223][T18599] lo: entered allmulticast mode [ 488.838575][T18598] lo: left allmulticast mode [ 488.900342][T18609] xt_hashlimit: size too large, truncated to 1048576 [ 488.900361][T18609] xt_hashlimit: max too large, truncated to 1048576 [ 488.939446][T18613] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 489.025050][ T29] audit: type=1400 audit(1790538830.568:940): avc: denied { listen } for pid=18618 comm="syz.9.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.697842][T18623] syzkaller1: entered promiscuous mode [ 489.697878][T18623] syzkaller1: entered allmulticast mode [ 489.789289][T18625] __nla_validate_parse: 2 callbacks suppressed [ 489.789308][T18625] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4768'. [ 489.889835][T18638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.891330][T18638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.951656][T18652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.015662][T18654] syzkaller1: entered promiscuous mode [ 490.015678][T18654] syzkaller1: entered allmulticast mode [ 490.139791][T18658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4781'. [ 490.565091][T18675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.596936][T18677] syzkaller1: entered promiscuous mode [ 490.596953][T18677] syzkaller1: entered allmulticast mode [ 490.775673][T18689] xt_hashlimit: size too large, truncated to 1048576 [ 490.775711][T18689] xt_hashlimit: max too large, truncated to 1048576 [ 490.887541][T18698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.934841][T18701] syzkaller1: entered promiscuous mode [ 490.934941][T18701] syzkaller1: entered allmulticast mode [ 490.994834][ T37] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 490.995294][ T37] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 491.224869][T18722] xt_hashlimit: size too large, truncated to 1048576 [ 491.224887][T18722] xt_hashlimit: max too large, truncated to 1048576 [ 491.384607][T18729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.403632][T18731] syzkaller1: entered promiscuous mode [ 491.403648][T18731] syzkaller1: entered allmulticast mode [ 491.503128][T18735] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.503307][T18735] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.538359][T18735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.540552][T18735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.600909][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.601753][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.601791][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.601864][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.626664][T18741] syzkaller0: entered promiscuous mode [ 491.626685][T18741] syzkaller0: entered allmulticast mode [ 491.714784][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4820'. [ 491.742951][ T37] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 491.743313][ T37] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 491.790297][T18754] xt_hashlimit: size too large, truncated to 1048576 [ 491.790393][T18754] xt_hashlimit: max too large, truncated to 1048576 [ 491.937492][T18759] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4824'. [ 491.969148][T18761] syzkaller1: entered promiscuous mode [ 491.969171][T18761] syzkaller1: entered allmulticast mode [ 492.077619][ T29] audit: type=1400 audit(1790538833.618:941): avc: denied { append } for pid=18767 comm="syz.7.4828" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 492.568671][T18781] xt_hashlimit: size too large, truncated to 1048576 [ 492.568688][T18781] xt_hashlimit: max too large, truncated to 1048576 [ 492.678448][T14528] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 492.678779][T14528] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 492.961415][T18798] syzkaller1: entered promiscuous mode [ 492.961440][T18798] syzkaller1: entered allmulticast mode [ 493.131213][T18812] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.156845][T18814] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4846'. [ 493.167151][T18816] xt_hashlimit: size too large, truncated to 1048576 [ 493.167167][T18816] xt_hashlimit: max too large, truncated to 1048576 [ 493.310077][ T29] audit: type=1326 audit(1790538834.858:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18823 comm="syz.9.4850" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0a9b6e159 code=0x0 [ 493.439675][T18829] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4851'. [ 493.677525][T18835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.677924][T18835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.763170][ T29] audit: type=1400 audit(1790538835.308:943): avc: denied { getopt } for pid=18831 comm="syz.7.4852" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 493.906956][T18844] syzkaller0: entered promiscuous mode [ 493.906975][T18844] syzkaller0: entered allmulticast mode [ 493.980506][T18850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 494.012111][T18856] xt_hashlimit: size too large, truncated to 1048576 [ 494.012151][T18856] xt_hashlimit: max too large, truncated to 1048576 [ 494.076163][T18860] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 494.129847][ T29] audit: type=1400 audit(1790538835.678:944): avc: denied { write } for pid=18859 comm="syz.0.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 494.196509][T18863] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4864'. [ 494.316456][T18873] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4869'. [ 494.450310][T18889] xt_hashlimit: size too large, truncated to 1048576 [ 494.450327][T18889] xt_hashlimit: max too large, truncated to 1048576 [ 494.570937][T18893] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4875'. [ 495.315999][T18908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4880'. [ 495.403466][T18919] xt_hashlimit: size too large, truncated to 1048576 [ 495.403498][T18919] xt_hashlimit: max too large, truncated to 1048576 [ 495.461019][T18924] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4886'. [ 495.501159][T18928] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 495.601897][T18934] netlink: 'syz.0.4889': attribute type 6 has an invalid length. [ 495.601918][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 496.079439][T18955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4897'. [ 496.255971][T18965] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.304915][T18969] xt_hashlimit: size too large, truncated to 1048576 [ 496.304933][T18969] xt_hashlimit: max too large, truncated to 1048576 [ 496.357329][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4904'. [ 496.487342][T18974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 496.713792][T18993] xt_hashlimit: size too large, truncated to 1048576 [ 496.713811][T18993] xt_hashlimit: max too large, truncated to 1048576 [ 496.754496][T18998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 496.757044][T18999] tipc: Enabling of bearer rejected, failed to enable media [ 496.791059][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4915'. [ 497.030713][ T29] audit: type=1400 audit(1790538838.578:945): avc: denied { ioctl } for pid=19027 comm="syz.8.4928" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 497.551454][T19055] xt_hashlimit: size too large, truncated to 1048576 [ 497.551466][T19055] xt_hashlimit: max too large, truncated to 1048576 [ 497.602519][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'. [ 497.878882][ T29] audit: type=1400 audit(1790538839.418:946): avc: denied { sys_module } for pid=19066 comm="syz.9.4944" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 497.968088][T19079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.993064][T19081] xt_hashlimit: size too large, truncated to 1048576 [ 497.993076][T19081] xt_hashlimit: max too large, truncated to 1048576 [ 498.043666][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4950'. [ 498.097080][ T29] audit: type=1400 audit(1790538839.638:947): avc: denied { create } for pid=19083 comm="syz.3.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.098078][ T29] audit: type=1400 audit(1790538839.638:948): avc: denied { ioctl } for pid=19083 comm="syz.3.4951" path="socket:[76842]" dev="sockfs" ino=76842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.098352][ T29] audit: type=1400 audit(1790538839.638:949): avc: denied { bind } for pid=19083 comm="syz.3.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.098520][ T29] audit: type=1400 audit(1790538839.638:950): avc: denied { write } for pid=19083 comm="syz.3.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.101652][ T29] audit: type=1400 audit(1790538839.648:951): avc: denied { read } for pid=19083 comm="syz.3.4951" path="socket:[76842]" dev="sockfs" ino=76842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 498.337553][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4957'. [ 498.337578][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4957'. [ 498.419549][T19103] xt_policy: output policy not valid in PREROUTING and INPUT [ 499.216655][T19123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.217203][T19123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.414283][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.415054][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.629953][ T29] audit: type=1400 audit(1790538841.178:952): avc: denied { connect } for pid=19142 comm="syz.7.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 499.687113][ T29] audit: type=1326 audit(1790538841.228:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.7.4979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09f7d8e159 code=0x0 [ 500.010126][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.010297][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.485523][T19184] __nla_validate_parse: 4 callbacks suppressed [ 500.485540][T19184] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4993'. [ 501.218725][T19206] tipc: Enabled bearer , priority 0 [ 501.234772][T19205] tipc: Disabling bearer [ 501.256278][T19214] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5007'. [ 501.460488][T19230] netlink: 'syz.8.5013': attribute type 1 has an invalid length. [ 501.487141][T19237] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5018'. [ 501.490112][T19230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.548915][T19238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.560625][T19238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.568599][T19230] bond1: (slave erspan1): making interface the new active one [ 501.584305][T19230] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 501.660201][T19253] syzkaller1: entered promiscuous mode [ 501.660223][T19253] syzkaller1: entered allmulticast mode [ 501.782000][T19261] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 501.954777][T19271] syzkaller0: entered promiscuous mode [ 501.954799][T19271] syzkaller0: entered allmulticast mode [ 502.040858][T19278] netlink: 'syz.7.5035': attribute type 1 has an invalid length. [ 502.050811][T19278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.133118][T19289] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 502.204671][T19295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5043'. [ 502.317855][T19304] syzkaller0: entered promiscuous mode [ 502.317876][T19304] syzkaller0: entered allmulticast mode [ 502.421034][T19312] netlink: 'syz.0.5050': attribute type 1 has an invalid length. [ 502.437235][T19312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.477677][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5054'. [ 502.488382][T19321] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 502.489318][T19321] syzkaller0: entered promiscuous mode [ 502.489334][T19321] syzkaller0: entered allmulticast mode [ 502.500671][T19323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5055'. [ 502.550986][T19329] syzkaller0: entered promiscuous mode [ 502.551005][T19329] syzkaller0: entered allmulticast mode [ 502.608184][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5062'. [ 502.656812][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5067'. [ 502.711368][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.747770][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.751762][T19343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.783139][T19343] batadv0: left allmulticast mode [ 502.809466][T19352] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 502.810327][T19352] syzkaller0: entered promiscuous mode [ 502.810422][T19352] syzkaller0: entered allmulticast mode [ 502.832817][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.832918][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.832951][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.832983][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.834763][T19365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5073'. [ 502.924200][T19373] syzkaller1: entered promiscuous mode [ 502.924223][T19373] syzkaller1: entered allmulticast mode [ 502.950446][T19379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5080'. [ 503.210202][T19414] syzkaller1: entered promiscuous mode [ 503.210282][T19414] syzkaller1: entered allmulticast mode [ 503.221477][T19402] geneve2: entered promiscuous mode [ 503.223357][T19417] syzkaller0: entered promiscuous mode [ 503.223449][T19417] syzkaller0: entered allmulticast mode [ 503.388100][T19435] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 503.388298][T19435] syzkaller0: entered promiscuous mode [ 503.388398][T19435] syzkaller0: entered allmulticast mode [ 503.426298][T19438] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 503.436308][T19438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.478212][T19445] syzkaller0: entered promiscuous mode [ 503.478235][T19445] syzkaller0: entered allmulticast mode [ 503.953177][T19478] syzkaller0: entered promiscuous mode [ 503.953193][T19478] syzkaller0: entered allmulticast mode [ 504.017859][T19480] syzkaller0: entered promiscuous mode [ 504.017891][T19480] syzkaller0: entered allmulticast mode [ 504.086505][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.086668][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.129170][T19486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.131354][T19486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.156776][T19496] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.189220][ T224] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.190829][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.190874][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.190911][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.264997][ T29] audit: type=1326 audit(1790538845.808:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.3.5137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f182d9de159 code=0x0 [ 504.311501][T19510] syzkaller0: entered promiscuous mode [ 504.311517][T19510] syzkaller0: entered allmulticast mode [ 504.392346][T19515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.392456][T19515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.481695][T19525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.481833][T19525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.112647][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.112760][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.218914][T19557] syzkaller0: entered promiscuous mode [ 505.219048][T19557] syzkaller0: entered allmulticast mode [ 505.470294][ T29] audit: type=1326 audit(1790538847.018:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19573 comm="syz.0.5167" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae8b7e159 code=0x0 [ 505.576115][ T29] audit: type=1400 audit(1790538847.118:956): avc: denied { create } for pid=19579 comm="syz.9.5169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 505.699373][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.699463][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.853360][T19594] syzkaller0: entered promiscuous mode [ 505.853435][T19594] syzkaller0: entered allmulticast mode [ 505.855254][T19594] tipc: Enabling of bearer rejected, failed to enable media [ 505.956470][T19598] syzkaller0: entered promiscuous mode [ 505.956494][T19598] syzkaller0: entered allmulticast mode [ 506.071513][T19602] __nla_validate_parse: 1 callbacks suppressed [ 506.071532][T19602] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5179'. [ 506.076599][T19604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.076769][T19604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.141259][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5181'. [ 506.141287][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5181'. [ 506.253935][T19616] syzkaller0: entered promiscuous mode [ 506.253959][T19616] syzkaller0: entered allmulticast mode [ 506.256280][T19616] tipc: Enabling of bearer rejected, failed to enable media [ 506.328673][T19622] syzkaller0: entered promiscuous mode [ 506.328704][T19622] syzkaller0: entered allmulticast mode [ 506.355232][T19626] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5191'. [ 506.520402][T19640] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.520569][T19640] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.567787][ T29] audit: type=1326 audit(1790538848.108:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.7.5201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09f7d8e159 code=0x0 [ 506.568750][T19640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.573962][T19640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.629046][ T595] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.629129][ T595] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.629164][ T595] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.629210][ T595] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.703513][T19658] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5205'. [ 506.791319][ T29] audit: type=1400 audit(1790538848.338:958): avc: denied { ioctl } for pid=19663 comm="syz.8.5208" path="socket:[80774]" dev="sockfs" ino=80774 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 506.843452][T19668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5210'. [ 506.866742][T19672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.867022][T19672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.170148][T19676] syzkaller0: entered promiscuous mode [ 507.170239][T19676] syzkaller0: entered allmulticast mode [ 507.403793][T19684] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5217'. [ 507.465171][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5222'. [ 507.493754][T19698] syzkaller1: entered promiscuous mode [ 507.493774][T19698] syzkaller1: entered allmulticast mode [ 507.555485][T19704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.555575][T19704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.598816][ T29] audit: type=1326 audit(1790538849.138:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.0.5229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae8b7e159 code=0x0 [ 507.709902][T19720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5234'. [ 507.734647][T19723] netlink: 'syz.8.5235': attribute type 10 has an invalid length. [ 507.734794][T19723] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.784342][T19723] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.784384][T19723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.786242][T19723] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 507.831257][T19730] syzkaller1: entered promiscuous mode [ 507.831354][T19730] syzkaller1: entered allmulticast mode [ 507.983270][T19739] netlink: 'syz.8.5243': attribute type 1 has an invalid length. [ 508.072418][T19742] syzkaller0: entered promiscuous mode [ 508.072459][T19742] syzkaller0: entered allmulticast mode [ 508.076553][T19742] tipc: Enabling of bearer rejected, failed to enable media [ 508.547344][T19756] syzkaller1: entered promiscuous mode [ 508.547420][T19756] syzkaller1: entered allmulticast mode [ 508.588042][ T29] audit: type=1400 audit(1790538850.128:960): avc: denied { setopt } for pid=19765 comm="syz.7.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.588347][ T29] audit: type=1400 audit(1790538850.128:961): avc: denied { ioctl } for pid=19765 comm="syz.7.5256" path="socket:[82071]" dev="sockfs" ino=82071 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.600685][T19764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.600875][T19764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.708142][T19775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.708281][T19775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.745987][ T29] audit: type=1326 audit(1790538850.288:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19779 comm="syz.0.5262" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae8b7e159 code=0x0 [ 509.278757][T19790] netlink: 'syz.8.5265': attribute type 1 has an invalid length. [ 509.380600][T19802] syzkaller1: entered promiscuous mode [ 509.380619][T19802] syzkaller1: entered allmulticast mode [ 509.604370][T19806] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 509.626826][T19808] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 509.785906][T19819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.786088][T19819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.073222][ T29] audit: type=1326 audit(1790538851.618:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.9.5283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0a9b6e159 code=0x0 [ 510.328165][T19832] syzkaller1: entered promiscuous mode [ 510.328188][T19832] syzkaller1: entered allmulticast mode [ 510.442061][T19834] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 510.518437][T19836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5287'. [ 510.612211][ T12] bridge_slave_1: left allmulticast mode [ 510.612314][ T12] bridge_slave_1: left promiscuous mode [ 510.612465][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.613675][ T12] bridge_slave_0: left allmulticast mode [ 510.613695][ T12] bridge_slave_0: left promiscuous mode [ 510.613842][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.867080][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.868791][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.871913][ T12] bond0 (unregistering): Released all slaves [ 510.905179][T19853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.905309][T19853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.925586][ T12] tipc: Disabling bearer [ 510.927247][ T12] tipc: Left network mode [ 510.934300][T19855] netlink: 'syz.9.5295': attribute type 1 has an invalid length. [ 510.941031][T19855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.973138][ T12] hsr_slave_0: left promiscuous mode [ 510.973750][ T12] hsr_slave_1: left promiscuous mode [ 510.976537][ T12] veth1_macvtap: left promiscuous mode [ 510.976561][ T12] veth0_macvtap: left promiscuous mode [ 510.976616][ T12] veth1_vlan: left promiscuous mode [ 510.976656][ T12] veth0_vlan: left promiscuous mode [ 511.040966][ T12] team0 (unregistering): Port device team_slave_1 removed [ 511.043378][ T12] team0 (unregistering): Port device team_slave_0 removed [ 511.052538][ T51] smc: removing ib device syz0 [ 511.076703][ T1525] infiniband syz0: ib_query_port failed (-19) [ 511.098703][T19859] syzkaller1: entered promiscuous mode [ 511.098727][T19859] syzkaller1: entered allmulticast mode [ 511.246443][T19865] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 511.311524][T19867] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5299'. [ 511.391927][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.392095][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.457790][ T29] audit: type=1326 audit(1790538852.988:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.8.5305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a877de159 code=0x0 [ 511.544888][T19892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5310'. [ 512.122767][T19896] geneve2: entered promiscuous mode [ 512.123552][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.123628][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.123741][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.123783][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.182220][T19911] syzkaller0: entered promiscuous mode [ 512.182243][T19911] syzkaller0: entered allmulticast mode [ 512.286731][T19919] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5321'. [ 513.117249][T19945] syzkaller0: entered promiscuous mode [ 513.117281][T19945] syzkaller0: entered allmulticast mode [ 513.122067][T19945] tipc: Enabled bearer , priority 0 [ 513.124266][T19945] tipc: Resetting bearer [ 513.130544][T19944] tipc: Resetting bearer [ 513.138637][T19944] tipc: Disabling bearer [ 513.163560][ T29] audit: type=1326 audit(1790538854.708:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19946 comm="syz.3.5333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f182d9de159 code=0x0 [ 513.220391][T19949] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5334'. [ 513.321652][T19961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.321735][T19961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.856138][T19971] netlink: 'syz.8.5342': attribute type 4 has an invalid length. [ 514.052855][ T29] audit: type=1400 audit(1790538855.588:966): avc: denied { open } for pid=19978 comm="syz.3.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 514.061399][ T29] audit: type=1400 audit(1790538855.588:967): avc: denied { kernel } for pid=19978 comm="syz.3.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 514.520714][T19984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5346'. [ 514.622915][T19999] netlink: 'syz.0.5353': attribute type 4 has an invalid length. [ 514.743957][T20007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.744069][T20007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.407573][T20017] netlink: 'syz.3.5360': attribute type 5 has an invalid length. [ 515.407594][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5360'. [ 515.706607][ T29] audit: type=1400 audit(1790538857.248:968): avc: denied { execute } for pid=20022 comm="syz.0.5363" path="/407/file1" dev="tmpfs" ino=2088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 515.747727][T20037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 516.298131][T20044] netlink: 'syz.3.5371': attribute type 5 has an invalid length. [ 516.298165][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5371'. [ 516.524961][T20059] netlink: 'syz.7.5378': attribute type 1 has an invalid length. [ 517.460296][T20082] syzkaller0: entered promiscuous mode [ 517.460332][T20082] syzkaller0: entered allmulticast mode [ 517.463851][T20082] tipc: Enabled bearer , priority 0 [ 517.465716][T20081] tipc: Resetting bearer [ 517.468750][T20081] tipc: Disabling bearer [ 517.895854][ T29] audit: type=1326 audit(1790538859.438:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.8.5390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a877de159 code=0x0 [ 518.877972][T20129] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 518.878157][T20129] syzkaller0: entered promiscuous mode [ 518.878184][T20129] syzkaller0: entered allmulticast mode [ 518.904853][T20133] netlink: 'syz.3.5405': attribute type 1 has an invalid length. [ 519.049517][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.049582][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.049676][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.049711][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.840610][T20154] netlink: 'syz.9.5414': attribute type 4 has an invalid length. [ 520.069320][T20169] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 520.071071][T20169] syzkaller0: entered promiscuous mode [ 520.071092][T20169] syzkaller0: entered allmulticast mode [ 520.084424][T20174] syzkaller0: entered promiscuous mode [ 520.084451][T20174] syzkaller0: entered allmulticast mode [ 520.236648][T20176] syzkaller0: entered promiscuous mode [ 520.236670][T20176] syzkaller0: entered allmulticast mode [ 520.238023][T20176] tipc: Enabled bearer , priority 0 [ 520.240693][T20175] tipc: Resetting bearer [ 520.287468][T20175] tipc: Disabling bearer [ 520.386640][T20193] netlink: 'syz.9.5426': attribute type 4 has an invalid length. [ 520.570998][T20211] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 520.571255][T20211] syzkaller0: entered promiscuous mode [ 520.571273][T20211] syzkaller0: entered allmulticast mode [ 520.617403][ T29] audit: type=1326 audit(1790538862.158:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20212 comm="syz.9.5433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0a9b6e159 code=0x0 [ 520.655011][T20214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5425'. [ 520.770965][T20222] syzkaller0: entered promiscuous mode [ 520.770988][T20222] syzkaller0: entered allmulticast mode [ 520.773165][T20222] tipc: Enabled bearer , priority 0 [ 520.773941][T20221] tipc: Resetting bearer [ 520.776071][T20221] tipc: Disabling bearer [ 521.066485][T20228] syzkaller0: entered promiscuous mode [ 521.066510][T20228] syzkaller0: entered allmulticast mode [ 521.427220][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.429439][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.229566][T20286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5455'. [ 522.353490][T20292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.801499][ T29] audit: type=1326 audit(1790538864.348:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20301 comm="syz.0.5464" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ae8b7e159 code=0x0 [ 522.836616][T20306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.836705][T20306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.015193][T20325] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5473'. [ 523.072548][T20331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.172476][T20343] netlink: 'syz.8.5480': attribute type 4 has an invalid length. [ 523.196636][ T1525] wiimote 0005:057E:0330.0014: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 523.196785][ T1525] wiimote 0005:057E:0330.0014: New device registered [ 523.197195][T20344] wiimote 0005:057E:0330.0014: Device removed [ 523.225741][T20341] netlink: 'syz.3.5477': attribute type 6 has an invalid length. [ 523.233726][T20346] fido_id[20346]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 523.403945][T20359] tipc: Enabled bearer , priority 0 [ 523.404797][T20358] tipc: Disabling bearer [ 523.468095][T20361] syzkaller0: entered promiscuous mode [ 523.468111][T20361] syzkaller0: entered allmulticast mode [ 523.652315][T20369] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 523.652537][T20369] syzkaller0: entered promiscuous mode [ 523.652556][T20369] syzkaller0: entered allmulticast mode [ 524.261172][ T1525] wiimote 0005:057E:0330.0014: detected device: Nintendo Wii Remote Plus (Gen 2) [ 524.304293][ T1525] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0014/input/input9 [ 524.305989][ T1525] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0014/input/input10 [ 524.307310][ T1525] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0014/input/input8 [ 524.606290][ T29] audit: type=1326 audit(1790538866.098:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.7.5501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09f7d8e159 code=0x0 [ 525.413348][T20424] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5510'. [ 525.452944][T20430] syzkaller0: entered promiscuous mode [ 525.452963][T20430] syzkaller0: entered allmulticast mode [ 525.596709][T20434] loop7: detected capacity change from 0 to 1024 [ 525.597047][T20434] ext4: Unknown parameter 'nouser_xattr' [ 526.178311][T20438] syzkaller0: entered promiscuous mode [ 526.178476][T20438] syzkaller0: entered allmulticast mode [ 526.196511][T20438] tipc: Enabling of bearer rejected, failed to enable media [ 526.288823][T20444] sch_tbf: burst 128 is lower than device syzkaller0 mtu (1514) ! [ 526.297373][T20444] syzkaller0: entered promiscuous mode [ 526.297395][T20444] syzkaller0: entered allmulticast mode [ 526.371524][T20455] syzkaller0: entered promiscuous mode [ 526.371545][T20455] syzkaller0: entered allmulticast mode [ 526.726879][T20477] syzkaller0: entered promiscuous mode [ 526.726979][T20477] syzkaller0: entered allmulticast mode [ 526.734266][T20477] tipc: Enabling of bearer rejected, failed to enable media [ 527.126096][T20487] loop7: detected capacity change from 0 to 1024 [ 527.126506][T20487] ext4: Unknown parameter 'nouser_xattr' [ 527.269954][T20490] syzkaller0: entered promiscuous mode [ 527.270030][T20490] syzkaller0: entered allmulticast mode [ 527.315059][T20494] syzkaller0: entered promiscuous mode [ 527.315167][T20494] syzkaller0: entered allmulticast mode [ 528.585112][T20529] syzkaller0: entered promiscuous mode [ 528.585133][T20529] syzkaller0: entered allmulticast mode [ 528.716315][T20540] syzkaller0: entered promiscuous mode [ 528.716349][T20540] syzkaller0: entered allmulticast mode [ 529.436084][T20566] syzkaller0: entered promiscuous mode [ 529.436109][T20566] syzkaller0: entered allmulticast mode [ 529.506921][T20567] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5563'. [ 529.646886][T20573] syzkaller0: entered promiscuous mode [ 529.646901][T20573] syzkaller0: entered allmulticast mode [ 529.682488][T20575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.858873][T20591] loop9: detected capacity change from 0 to 1024 [ 529.861229][T20591] ext4: Unknown parameter 'nouser_xattr' [ 529.940852][T20600] loop7: detected capacity change from 0 to 1024 [ 529.941283][T20600] ext4: Unknown parameter 'nouser_xattr' [ 531.224184][T20613] tipc: Enabled bearer , priority 0 [ 531.224960][T20613] tipc: Resetting bearer [ 531.228539][T20612] tipc: Disabling bearer [ 531.439805][T20631] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5590'. [ 531.988832][T20632] netlink: 'syz.7.5591': attribute type 6 has an invalid length. [ 532.014247][ T3349] wiimote 0005:057E:0330.0015: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 532.014376][ T3349] wiimote 0005:057E:0330.0015: New device registered [ 532.014706][T20651] wiimote 0005:057E:0330.0015: Device removed [ 532.065559][T20653] fido_id[20653]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 532.488034][T20658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.488135][T20658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.651748][T20676] syzkaller0: entered promiscuous mode [ 532.651847][T20676] syzkaller0: entered allmulticast mode [ 532.652918][T20676] tipc: Enabled bearer , priority 0 [ 532.653351][T20675] tipc: Resetting bearer [ 532.657248][T20675] tipc: Disabling bearer [ 533.086586][ T3349] wiimote 0005:057E:0330.0015: detected device: Nintendo Wii Remote Plus (Gen 2) [ 533.088716][ T3349] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0015/input/input12 [ 533.135092][ T3349] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0015/input/input13 [ 533.137432][ T3349] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0015/input/input11 [ 533.996385][T20721] tipc: Enabled bearer , priority 0 [ 533.997138][T20720] tipc: Disabling bearer [ 534.022845][T20726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.022928][T20726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.467320][T20738] loop7: detected capacity change from 0 to 1024 [ 534.468000][T20738] ext4: Unknown parameter 'nouser_xattr' [ 535.110629][T20754] tipc: Enabled bearer , priority 0 [ 535.111667][T20753] tipc: Disabling bearer [ 535.395146][T20766] loop7: detected capacity change from 0 to 1024 [ 535.395598][T20766] ext4: Unknown parameter 'nouser_xattr' [ 536.448638][T20781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.448826][T20781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.815522][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5642'. [ 537.912725][T20825] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5650'. [ 538.019873][T20834] loop9: detected capacity change from 0 to 1024 [ 538.021591][T20834] ext4: Unknown parameter 'nouser_xattr' [ 538.282142][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5654'. [ 538.961375][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5655'. [ 539.053610][T20847] loop9: detected capacity change from 0 to 1024 [ 539.053934][T20847] ext4: Unknown parameter 'nouser_xattr' [ 539.832014][T20863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5661'. [ 542.042604][T20910] syzkaller0: entered promiscuous mode [ 542.042705][T20910] syzkaller0: entered allmulticast mode [ 542.045551][T20910] tipc: Enabled bearer , priority 0 [ 542.048136][T20910] tipc: Resetting bearer [ 542.097130][T20909] tipc: Resetting bearer [ 542.103953][T20909] tipc: Disabling bearer [ 542.874037][T20946] loop7: detected capacity change from 0 to 128 [ 542.876553][T20946] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 542.876774][T20946] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.878048][ T29] audit: type=1400 audit(1790538884.418:973): avc: denied { write } for pid=20945 comm="syz.7.5684" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.878546][ T29] audit: type=1400 audit(1790538884.418:974): avc: denied { read write open } for pid=20945 comm="syz.7.5684" path="/274/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 543.020735][T17665] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.055323][T20951] loop7: detected capacity change from 0 to 1024 [ 543.059421][T20951] ext4: Unknown parameter 'nouser_xattr' [ 543.183266][T20956] loop9: detected capacity change from 0 to 1024 [ 543.183676][T20956] ext4: Unknown parameter 'nouser_xattr' [ 544.365690][T20965] loop8: detected capacity change from 0 to 1024 [ 544.366067][T20965] ext4: Unknown parameter 'nouser_xattr' [ 544.542427][T20973] loop9: detected capacity change from 0 to 1024 [ 544.542872][T20973] ext4: Unknown parameter 'nouser_xattr' [ 545.681204][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5694'. [ 547.402752][T21048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.402854][T21048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.678739][T21059] syzkaller0: entered promiscuous mode [ 547.678762][T21059] syzkaller0: entered allmulticast mode [ 547.902491][T21066] loop7: detected capacity change from 0 to 1024 [ 547.902920][T21066] ext4: Unknown parameter 'nouser_xattr' [ 548.927168][T21094] tipc: Enabled bearer , priority 0 [ 548.928636][T21094] tipc: Resetting bearer [ 548.941291][T21089] tipc: Disabling bearer [ 549.161958][T21101] syzkaller0: entered promiscuous mode [ 549.161993][T21101] syzkaller0: entered allmulticast mode [ 549.257928][T21106] syzkaller0: entered promiscuous mode [ 549.257944][T21106] syzkaller0: entered allmulticast mode [ 549.344000][T21108] syzkaller0: entered promiscuous mode [ 549.344106][T21108] syzkaller0: entered allmulticast mode [ 549.414031][T21115] loop7: detected capacity change from 0 to 128 [ 549.419284][T21115] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 549.439485][T21115] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.443026][ T29] audit: type=1400 audit(1790538890.988:975): avc: denied { write } for pid=21114 comm="syz.7.5728" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.358155][T17665] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.461353][T21150] syzkaller0: entered promiscuous mode [ 550.461387][T21150] syzkaller0: entered allmulticast mode [ 550.571022][T21158] tipc: Enabled bearer , priority 0 [ 550.573677][T21158] tipc: Resetting bearer [ 550.574495][T21157] tipc: Disabling bearer [ 550.768011][T21179] loop7: detected capacity change from 0 to 1024 [ 550.789531][T21179] ext4: Unknown parameter 'nouser_xattr' [ 550.857676][T21182] loop8: detected capacity change from 0 to 128 [ 550.934449][T21187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5747'. [ 550.946834][T21182] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 550.947731][T21182] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.979326][ T29] audit: type=1400 audit(1790538892.528:976): avc: denied { write } for pid=21181 comm="syz.8.5746" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 551.544847][T12691] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.598630][T21202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.618335][T21202] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 551.825799][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5759'. [ 551.919592][T21222] loop8: detected capacity change from 0 to 1024 [ 551.921936][T21222] ext4: Unknown parameter 'nouser_xattr' [ 552.179231][T21230] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5760'. [ 552.693915][T21239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.888358][T21245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.950255][T21257] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5770'. [ 553.296996][T21258] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.297044][T21258] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.297110][T21258] bridge_slave_0: entered allmulticast mode [ 553.297732][T21258] bridge_slave_0: entered promiscuous mode [ 553.303291][T21258] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.303326][T21258] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.303557][T21258] bridge_slave_1: entered allmulticast mode [ 553.304345][T21258] bridge_slave_1: entered promiscuous mode [ 553.325710][T21258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.326858][T21258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.345510][T21258] team0: Port device team_slave_0 added [ 553.348112][T21258] team0: Port device team_slave_1 added [ 553.382599][T21258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.382615][T21258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.382660][T21258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.385098][T21258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.385110][T21258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.385147][T21258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.451715][T21258] hsr_slave_0: entered promiscuous mode [ 553.452155][T21258] hsr_slave_1: entered promiscuous mode [ 553.452397][T21258] debugfs: 'hsr0' already exists in 'hsr' [ 553.452413][T21258] Cannot create hsr debugfs directory [ 553.751404][T21258] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.875817][T21258] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.060922][T21258] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.127866][T21258] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.231049][T21258] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 554.234216][T21258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.234986][T21258] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 554.238591][T21258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.239765][T21258] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 554.249300][T21258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.250388][T21258] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 554.256272][T21258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.315400][T21258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.362514][T21258] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.374524][T21258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 554.374589][T21258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.378592][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.378696][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.380506][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.380538][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.572344][T21258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.823204][T21339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.850262][T21347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.852034][T21347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.877861][T21346] loop9: detected capacity change from 0 to 128 [ 554.891773][T21346] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 554.893384][T21346] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.895881][ T29] audit: type=1400 audit(1790538896.438:977): avc: denied { write } for pid=21343 comm="syz.9.5782" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.961828][T21258] veth0_vlan: entered promiscuous mode [ 554.966179][T21258] veth1_vlan: entered promiscuous mode [ 554.992443][T21258] veth0_macvtap: entered promiscuous mode [ 554.999094][T21258] veth1_macvtap: entered promiscuous mode [ 555.018807][T21258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.031137][T21258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.070136][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.070183][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.070230][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.070265][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.198139][T14277] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 555.233001][T21362] tipc: Started in network mode [ 555.233031][T21362] tipc: Node identity aa949041ed1a, cluster identity 4711 [ 555.233098][T21362] tipc: Enabled bearer , priority 0 [ 555.234085][T21362] tipc: Resetting bearer [ 555.264796][T21361] tipc: Disabling bearer [ 555.428415][T21371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.428559][T21371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.135498][T21397] tipc: Enabled bearer , priority 0 [ 556.136328][T21397] tipc: Resetting bearer [ 556.240432][T21396] tipc: Disabling bearer [ 556.372898][T21416] syzkaller0: entered promiscuous mode [ 556.372919][T21416] syzkaller0: entered allmulticast mode [ 556.373863][T21416] tipc: Enabled bearer , priority 0 [ 556.375698][T21415] tipc: Resetting bearer [ 556.412706][T21415] tipc: Disabling bearer [ 557.153797][T21434] loop7: detected capacity change from 0 to 1024 [ 557.154176][T21434] ext4: Unknown parameter 'nouser_xattr' [ 557.372885][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.373062][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.515778][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5807'. [ 559.031047][T21464] tipc: Enabled bearer , priority 0 [ 559.031880][T21464] tipc: Resetting bearer [ 559.083082][T21463] tipc: Disabling bearer [ 559.338689][T21470] netlink: 'syz.9.5815': attribute type 6 has an invalid length. [ 559.557976][T21486] loop8: detected capacity change from 0 to 128 [ 559.584468][T21486] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 559.584657][T21486] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.589722][ T29] audit: type=1400 audit(1790538901.128:978): avc: denied { write } for pid=21485 comm="syz.8.5820" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 559.677851][T21258] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 560.192124][T21503] loop7: detected capacity change from 0 to 1024 [ 560.197341][T21503] ext4: Unknown parameter 'nouser_xattr' [ 561.216350][T21522] syzkaller0: entered promiscuous mode [ 561.216373][T21522] syzkaller0: entered allmulticast mode [ 561.217545][T21522] tipc: Enabled bearer , priority 0 [ 561.244626][T21522] tipc: Resetting bearer [ 561.397452][T21520] tipc: Resetting bearer [ 561.474026][T21520] tipc: Disabling bearer [ 561.647956][T21526] tipc: Enabling of bearer rejected, failed to enable media [ 561.722136][T21540] loop7: detected capacity change from 0 to 1024 [ 561.722542][T21540] ext4: Unknown parameter 'nouser_xattr' [ 562.728121][T21572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5837'. [ 562.798064][T21576] syzkaller0: entered promiscuous mode [ 562.798087][T21576] syzkaller0: entered allmulticast mode [ 562.801946][T21576] tipc: Enabled bearer , priority 0 [ 562.804210][T21576] tipc: Resetting bearer [ 562.848784][T21575] tipc: Resetting bearer [ 562.863893][T21575] tipc: Disabling bearer [ 562.918592][T21579] tipc: Enabling of bearer rejected, failed to enable media [ 562.949836][T21590] geneve3: entered promiscuous mode [ 562.970285][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.971399][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.971458][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.971549][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.033213][T21596] loop7: detected capacity change from 0 to 1024 [ 563.033908][T21596] ext4: Unknown parameter 'nouser_xattr' [ 563.130230][T21601] loop8: detected capacity change from 0 to 1024 [ 563.130676][T21601] ext4: Unknown parameter 'nouser_xattr' [ 563.322979][T21607] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5845'. [ 564.316302][T21598] netlink: 'syz.9.5847': attribute type 6 has an invalid length. [ 565.055563][T21623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 565.208695][T21625] tipc: Enabling of bearer rejected, failed to enable media [ 566.184462][T21660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.213655][T21659] netlink: 'syz.7.5863': attribute type 1 has an invalid length. [ 566.223226][T21659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.416075][T21663] tipc: Enabling of bearer rejected, failed to enable media [ 566.458710][T21676] loop9: detected capacity change from 0 to 1024 [ 566.481924][T21676] ext4: Unknown parameter 'nouser_xattr' [ 567.523303][T21696] syzkaller0: entered promiscuous mode [ 567.523324][T21696] syzkaller0: entered allmulticast mode [ 567.525023][T21692] tipc: Enabled bearer , priority 0 [ 567.525991][T21692] tipc: Resetting bearer [ 567.527400][T21690] tipc: Resetting bearer [ 567.527944][T21690] tipc: Disabling bearer [ 568.052830][T21712] netlink: 'syz.9.5876': attribute type 6 has an invalid length. [ 568.078065][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5877'. [ 568.234148][T21721] tipc: Enabling of bearer rejected, failed to enable media [ 568.602954][T21742] netlink: 'syz.7.5880': attribute type 6 has an invalid length. [ 569.252830][T21775] geneve2: entered promiscuous mode [ 569.254388][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.254475][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.254581][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.254640][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.340416][ T1525] wiimote 0005:057E:0330.0016: item fetching failed at offset 26/27 [ 569.340573][ T1525] wiimote 0005:057E:0330.0016: HID parse failed [ 569.340611][ T1525] wiimote 0005:057E:0330.0016: probe with driver wiimote failed with error -22 [ 569.447194][T21783] syzkaller0: entered promiscuous mode [ 569.447222][T21783] syzkaller0: entered allmulticast mode [ 569.450206][T21783] tipc: Enabled bearer , priority 0 [ 569.452843][T21783] tipc: Resetting bearer [ 569.456134][T21782] tipc: Resetting bearer [ 569.462778][T21785] loop7: detected capacity change from 0 to 1024 [ 569.466855][T21785] ext4: Unknown parameter 'nouser_xattr' [ 569.467478][T21782] tipc: Disabling bearer [ 571.000529][T21821] geneve2: entered promiscuous mode [ 571.021586][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.021630][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.021731][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.021767][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.851506][T21842] netlink: 'syz.7.5904': attribute type 6 has an invalid length. [ 572.482367][T21857] loop9: detected capacity change from 0 to 1024 [ 572.485122][T21857] ext4: Unknown parameter 'nouser_xattr' [ 572.825686][T21863] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5907'. [ 573.527446][T21877] loop9: detected capacity change from 0 to 1024 [ 573.583845][T21877] ext4: Unknown parameter 'nouser_xattr' [ 575.242705][T21923] loop7: detected capacity change from 0 to 1024 [ 575.247512][T21923] ext4: Unknown parameter 'nouser_xattr' [ 575.749535][T21934] geneve2: entered promiscuous mode [ 576.120876][T21942] tipc: Enabled bearer , priority 0 [ 576.137090][T21942] syzkaller0: entered promiscuous mode [ 576.137111][T21942] syzkaller0: entered allmulticast mode [ 576.149345][T21942] tipc: Resetting bearer [ 576.159319][T21941] tipc: Resetting bearer [ 576.162597][T21941] tipc: Disabling bearer [ 576.306168][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5932'. [ 576.404853][T21957] syzkaller0: entered promiscuous mode [ 576.404876][T21957] syzkaller0: entered allmulticast mode [ 576.673940][T21961] loop9: detected capacity change from 0 to 1024 [ 576.689603][T21961] ext4: Unknown parameter 'nouser_xattr' [ 576.953729][T21971] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5934'. [ 577.256738][T21974] geneve3: entered promiscuous mode [ 577.388153][T21976] loop7: detected capacity change from 0 to 1024 [ 577.396442][T21976] ext4: Unknown parameter 'nouser_xattr' [ 577.653603][T21987] loop8: detected capacity change from 0 to 1024 [ 577.656128][T21987] ext4: Unknown parameter 'nouser_xattr' [ 577.917089][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5943'. [ 577.920381][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5943'. [ 578.048229][T21992] syzkaller0: entered promiscuous mode [ 578.048342][T21992] syzkaller0: entered allmulticast mode [ 578.429842][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 579.252553][T22009] geneve3: entered promiscuous mode [ 579.295206][T22013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.295388][T22013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.300390][T22002] tipc: Enabling of bearer rejected, failed to enable media [ 580.435138][T22051] tipc: Enabled bearer , priority 0 [ 580.435645][T22051] syzkaller0: entered promiscuous mode [ 580.435665][T22051] syzkaller0: entered allmulticast mode [ 580.438114][T22051] tipc: Resetting bearer [ 580.443190][T22050] tipc: Resetting bearer [ 580.517268][T22050] tipc: Disabling bearer [ 580.564411][T22056] loop7: detected capacity change from 0 to 1024 [ 580.564763][T22056] ext4: Unknown parameter 'nouser_xattr' [ 580.729184][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5960'. [ 580.945886][T22063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5961'. [ 581.386117][T22076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.386610][T22076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.515423][T22081] loop7: detected capacity change from 0 to 1024 [ 581.515918][T22081] ext4: Unknown parameter 'nouser_xattr' [ 582.277804][T22091] netlink: 'syz.0.5969': attribute type 6 has an invalid length. [ 582.617040][T22109] geneve3: entered promiscuous mode [ 582.619749][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.619861][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.619901][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.619953][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.505973][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5978'. [ 583.620997][T22135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.622541][T22135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.788015][T22143] loop8: detected capacity change from 0 to 1024 [ 583.790343][T22143] ext4: Unknown parameter 'nouser_xattr' [ 583.803921][T22145] loop7: detected capacity change from 0 to 1024 [ 583.812058][T22145] ext4: Unknown parameter 'nouser_xattr' [ 585.000906][T22153] loop8: detected capacity change from 0 to 1024 [ 585.001313][T22153] ext4: Unknown parameter 'nouser_xattr' [ 585.003446][T22154] tipc: Enabled bearer , priority 0 [ 585.003735][T22154] syzkaller0: entered promiscuous mode [ 585.003750][T22154] syzkaller0: entered allmulticast mode [ 585.150000][T22154] tipc: Resetting bearer [ 585.165694][T22152] tipc: Resetting bearer [ 585.166344][T22152] tipc: Disabling bearer [ 586.370063][T22177] loop9: detected capacity change from 0 to 1024 [ 586.371867][T22177] ext4: Unknown parameter 'nouser_xattr' [ 586.489034][T22185] loop8: detected capacity change from 0 to 1024 [ 586.490706][T22185] ext4: Unknown parameter 'nouser_xattr' [ 587.399990][T22180] netlink: 'syz.7.5987': attribute type 6 has an invalid length. [ 587.669965][T22182] tipc: Enabling of bearer rejected, failed to enable media [ 588.486147][T22201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5996'. [ 588.531090][T22208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.532486][T22208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.654354][T22209] tipc: Enabled bearer , priority 0 [ 588.654906][T22209] syzkaller0: entered promiscuous mode [ 588.654927][T22209] syzkaller0: entered allmulticast mode [ 588.678547][T22209] tipc: Resetting bearer [ 588.694386][T22207] tipc: Resetting bearer [ 588.706815][T22207] tipc: Disabling bearer [ 588.723748][T22216] syzkaller0: entered promiscuous mode [ 588.723831][T22216] syzkaller0: entered allmulticast mode [ 588.934064][T22211] netlink: 'syz.8.6001': attribute type 6 has an invalid length. [ 588.946400][T22225] loop7: detected capacity change from 0 to 1024 [ 588.965333][T22225] ext4: Unknown parameter 'nouser_xattr' [ 588.982888][T22227] loop9: detected capacity change from 0 to 1024 [ 588.984946][T22227] ext4: Unknown parameter 'nouser_xattr' [ 590.033517][T22244] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6010'. [ 590.940241][T22251] loop8: detected capacity change from 0 to 1024 [ 590.940370][T22253] netlink: 'syz.0.6014': attribute type 3 has an invalid length. [ 590.940386][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 590.943765][T22251] ext4: Unknown parameter 'nouser_xattr' [ 592.017088][T22280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.021312][T22280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.219691][T22273] netlink: 'syz.7.6022': attribute type 6 has an invalid length. [ 592.540958][T22291] netlink: 'syz.3.6027': attribute type 3 has an invalid length. [ 592.540976][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 592.775058][T22295] loop7: detected capacity change from 0 to 1024 [ 592.775429][T22295] ext4: Unknown parameter 'nouser_xattr' [ 594.105680][T22308] loop7: detected capacity change from 0 to 1024 [ 594.106950][T22308] ext4: Unknown parameter 'nouser_xattr' [ 595.339844][T22316] loop9: detected capacity change from 0 to 1024 [ 595.340286][T22316] ext4: Unknown parameter 'nouser_xattr' [ 595.998180][T22325] netlink: 'syz.3.6037': attribute type 3 has an invalid length. [ 595.998201][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6037'. [ 596.003751][T22323] loop8: detected capacity change from 0 to 1024 [ 596.013073][T22323] ext4: Unknown parameter 'nouser_xattr' [ 596.357307][T22333] loop9: detected capacity change from 0 to 1024 [ 596.357644][T22333] ext4: Unknown parameter 'nouser_xattr' [ 596.384722][T22303] netlink: 'syz.0.6031': attribute type 6 has an invalid length. [ 597.647586][T22353] loop9: detected capacity change from 0 to 1024 [ 597.647950][T22353] ext4: Unknown parameter 'nouser_xattr' [ 597.912227][T22354] netlink: 'syz.7.6042': attribute type 6 has an invalid length. [ 599.018499][T22368] loop9: detected capacity change from 0 to 1024 [ 599.041208][T22368] ext4: Unknown parameter 'nouser_xattr' [ 599.233148][T22373] loop7: detected capacity change from 0 to 1024 [ 599.233712][T22373] ext4: Unknown parameter 'nouser_xattr' [ 599.530002][T22375] netlink: 'syz.3.6047': attribute type 6 has an invalid length. [ 600.322222][T22359] netlink: 'syz.8.6044': attribute type 6 has an invalid length. [ 600.925522][T22425] netlink: 'syz.0.6061': attribute type 3 has an invalid length. [ 600.925544][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6061'. [ 600.978467][T22415] netlink: 'syz.7.6056': attribute type 6 has an invalid length. [ 601.059846][T22432] loop9: detected capacity change from 0 to 1024 [ 601.061901][T22432] ext4: Unknown parameter 'nouser_xattr' [ 601.268589][T22437] netlink: 'syz.7.6065': attribute type 3 has an invalid length. [ 601.268609][T22437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6065'. [ 601.698295][T22430] netlink: 'syz.0.6064': attribute type 6 has an invalid length. [ 601.757794][T22442] netlink: 'syz.8.6059': attribute type 6 has an invalid length. [ 601.995402][T22449] netlink: 'syz.9.6068': attribute type 3 has an invalid length. [ 601.995432][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6068'. [ 602.052552][T22452] netlink: 'syz.8.6069': attribute type 3 has an invalid length. [ 602.052573][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6069'. [ 602.373009][T22463] loop8: detected capacity change from 0 to 1024 [ 602.373422][T22463] ext4: Unknown parameter 'nouser_xattr' [ 603.325810][T22476] netlink: 'syz.9.6072': attribute type 6 has an invalid length. [ 603.359300][T22481] loop7: detected capacity change from 0 to 1024 [ 603.359716][T22481] ext4: Unknown parameter 'nouser_xattr' [ 603.608510][T22483] netlink: 'syz.8.6077': attribute type 3 has an invalid length. [ 603.608536][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6077'. [ 603.629020][T22477] netlink: 'syz.3.6075': attribute type 6 has an invalid length. [ 605.124962][T22498] netlink: 'syz.7.6079': attribute type 6 has an invalid length. [ 605.238723][T22512] netlink: 'syz.0.6083': attribute type 3 has an invalid length. [ 605.238745][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6083'. [ 605.292387][T22515] loop9: detected capacity change from 0 to 1024 [ 605.322388][T22515] ext4: Unknown parameter 'nouser_xattr' [ 605.504500][T22521] netlink: 'syz.7.6086': attribute type 3 has an invalid length. [ 605.504561][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6086'. [ 605.511583][T22497] netlink: 'syz.8.6080': attribute type 6 has an invalid length. [ 606.028176][T22528] loop8: detected capacity change from 0 to 1024 [ 606.054385][T22528] ext4: Unknown parameter 'nouser_xattr' [ 606.217891][T22535] netlink: 'syz.7.6090': attribute type 3 has an invalid length. [ 606.217911][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6090'. [ 606.229497][T22534] netlink: 'syz.9.6091': attribute type 3 has an invalid length. [ 606.229516][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6091'. [ 606.330414][T22536] netlink: 'syz.0.6085': attribute type 6 has an invalid length. [ 606.396922][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6092'. [ 606.503756][T22544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6094'. [ 606.510739][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6095'. [ 606.597383][T22551] loop7: detected capacity change from 0 to 1024 [ 606.599081][T22551] ext4: Unknown parameter 'nouser_xattr' [ 607.214568][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'. [ 607.262156][T22562] loop8: detected capacity change from 0 to 1024 [ 607.287994][T22562] ext4: Unknown parameter 'nouser_xattr' [ 607.529800][T22566] loop7: detected capacity change from 0 to 1024 [ 607.530140][T22566] ext4: Unknown parameter 'nouser_xattr' [ 608.101927][T22569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6102'. [ 608.717783][T22577] validate_nla: 5 callbacks suppressed [ 608.717802][T22577] netlink: 'syz.9.6103': attribute type 6 has an invalid length. [ 608.953829][T22588] netlink: 'syz.7.6107': attribute type 3 has an invalid length. [ 608.953850][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6107'. [ 609.703340][T22585] netlink: 'syz.8.6106': attribute type 6 has an invalid length. [ 610.419348][T22592] netlink: 'syz.3.6108': attribute type 6 has an invalid length. [ 610.537400][T22599] netlink: 'syz.0.6110': attribute type 6 has an invalid length. [ 611.059348][T22610] netlink: 'syz.8.6111': attribute type 6 has an invalid length. [ 611.120900][T22595] netlink: 'syz.7.6109': attribute type 6 has an invalid length. [ 611.175142][T22624] loop9: detected capacity change from 0 to 1024 [ 611.175542][T22624] ext4: Unknown parameter 'nouser_xattr' [ 611.339813][T22616] netlink: 'syz.0.6113': attribute type 6 has an invalid length. [ 611.428680][T22631] loop7: detected capacity change from 0 to 1024 [ 611.430359][T22631] ext4: Unknown parameter 'nouser_xattr' [ 611.849749][T22636] netlink: 'syz.8.6118': attribute type 3 has an invalid length. [ 611.849770][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6118'. [ 612.139029][T22641] loop9: detected capacity change from 0 to 1024 [ 612.139681][T22641] ext4: Unknown parameter 'nouser_xattr' [ 612.579971][T22646] loop8: detected capacity change from 0 to 1024 [ 612.632399][T22646] ext4: Unknown parameter 'nouser_xattr' [ 613.611657][T22652] syzkaller0: entered promiscuous mode [ 613.611689][T22652] syzkaller0: entered allmulticast mode [ 613.648543][T22652] tipc: Enabled bearer , priority 0 [ 613.662058][T22651] tipc: Resetting bearer [ 613.682946][T22651] tipc: Disabling bearer [ 614.217431][T22664] loop7: detected capacity change from 0 to 1024 [ 614.237031][T22664] ext4: Unknown parameter 'nouser_xattr' [ 614.292826][T22660] netlink: 'syz.8.6125': attribute type 6 has an invalid length. [ 614.350803][T22667] netlink: 'syz.3.6119': attribute type 6 has an invalid length. [ 614.500340][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6126'. [ 614.884269][T22650] netlink: 'syz.9.6122': attribute type 6 has an invalid length. [ 615.335910][T22681] netlink: 'syz.7.6129': attribute type 6 has an invalid length. [ 615.604645][T22684] netlink: 'syz.0.6128': attribute type 6 has an invalid length. [ 615.615596][T22686] loop7: detected capacity change from 0 to 1024 [ 615.640223][T22686] ext4: Unknown parameter 'nouser_xattr' [ 616.700165][T22705] loop9: detected capacity change from 0 to 1024 [ 616.700582][T22705] ext4: Unknown parameter 'nouser_xattr' [ 616.805548][T22708] netlink: 'syz.7.6133': attribute type 6 has an invalid length. [ 617.053053][T22714] netlink: 'syz.0.6132': attribute type 6 has an invalid length. [ 617.282592][T22720] netlink: 'syz.3.6137': attribute type 3 has an invalid length. [ 617.282623][T22720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6137'. [ 617.478237][T22725] netlink: 'syz.7.6139': attribute type 3 has an invalid length. [ 617.478258][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6139'. [ 617.634220][T22733] netlink: 'syz.0.6143': attribute type 3 has an invalid length. [ 617.634240][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6143'. [ 617.728789][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6144'. [ 617.933912][T22741] syzkaller0: entered promiscuous mode [ 617.933935][T22741] syzkaller0: entered allmulticast mode [ 617.935644][T22741] tipc: Enabled bearer , priority 0 [ 617.936582][T22741] tipc: Resetting bearer [ 617.975687][T22740] tipc: Resetting bearer [ 618.007713][T22740] tipc: Disabling bearer [ 619.316353][T22727] validate_nla: 2 callbacks suppressed [ 619.316374][T22727] netlink: 'syz.8.6140': attribute type 6 has an invalid length. [ 619.430307][T22751] netlink: 'syz.7.6148': attribute type 6 has an invalid length. [ 620.381730][T22776] netlink: 'syz.9.6151': attribute type 6 has an invalid length. [ 620.402988][T22778] tipc: Enabling of bearer rejected, failed to enable media [ 621.021236][T22791] netlink: 'syz.0.6153': attribute type 6 has an invalid length. [ 621.268465][T22800] syzkaller0: entered promiscuous mode [ 621.268487][T22800] syzkaller0: entered allmulticast mode [ 621.284497][T22800] tipc: Enabled bearer , priority 0 [ 621.285993][T22800] tipc: Resetting bearer [ 621.302258][T22799] tipc: Resetting bearer [ 621.417709][T22799] tipc: Disabling bearer [ 621.557528][T22806] loop8: detected capacity change from 0 to 1024 [ 621.557918][T22806] ext4: Unknown parameter 'nouser_xattr' [ 621.862850][T22811] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6160'. [ 622.633867][T22823] netlink: 'syz.3.6162': attribute type 6 has an invalid length. [ 622.715201][T22828] tipc: Enabled bearer , priority 0 [ 622.791050][T22830] netlink: 'syz.0.6157': attribute type 6 has an invalid length. [ 622.797591][T22827] tipc: Disabling bearer [ 623.150154][T22838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.150244][T22838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.425279][T22856] syzkaller0: entered promiscuous mode [ 623.425341][T22856] syzkaller0: entered allmulticast mode [ 623.426476][T22856] tipc: Enabled bearer , priority 0 [ 623.427301][T22856] tipc: Resetting bearer [ 623.468110][T22855] tipc: Resetting bearer [ 623.476407][T22855] tipc: Disabling bearer [ 623.553411][T22826] netlink: 'syz.8.6164': attribute type 6 has an invalid length. [ 623.953783][T22870] netlink: 'syz.7.6175': attribute type 3 has an invalid length. [ 623.953805][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6175'. [ 624.205936][T22871] netlink: 'syz.9.6171': attribute type 6 has an invalid length. [ 624.386015][T22881] syzkaller0: entered promiscuous mode [ 624.386039][T22881] syzkaller0: entered allmulticast mode [ 624.465570][T22874] netlink: 'syz.7.6176': attribute type 6 has an invalid length. [ 624.926748][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6179'. [ 624.945131][T22904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.946385][T22904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.443433][T22930] loop9: detected capacity change from 0 to 1024 [ 626.455899][T22930] ext4: Unknown parameter 'nouser_xattr' [ 626.504584][T22914] netlink: 'syz.0.6187': attribute type 6 has an invalid length. [ 626.878272][T22942] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6195'. [ 627.886770][T22956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.886881][T22956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.879464][T22974] netlink: 'syz.7.6188': attribute type 6 has an invalid length. [ 630.166716][T22993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.181953][T22993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.871959][T22990] netlink: 'syz.7.6207': attribute type 6 has an invalid length. [ 631.556184][T23011] netlink: 'syz.0.6212': attribute type 6 has an invalid length. [ 632.338345][T23020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.338520][T23020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.043747][T22985] netlink: 'syz.8.6206': attribute type 6 has an invalid length. [ 633.906280][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6220'. [ 633.947302][T23040] netlink: 'syz.7.6219': attribute type 6 has an invalid length. [ 634.527999][T23060] netlink: 'syz.8.6224': attribute type 6 has an invalid length. [ 634.623754][T23070] tipc: Enabled bearer , priority 0 [ 634.623992][T23070] syzkaller0: entered promiscuous mode [ 634.624013][T23070] syzkaller0: entered allmulticast mode [ 634.648449][T23069] tipc: Resetting bearer [ 634.652305][T23073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.652459][T23073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.669620][T23069] tipc: Disabling bearer [ 634.732593][T23080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.732686][T23080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.534690][T23107] syzkaller0: entered promiscuous mode [ 637.534740][T23107] syzkaller0: entered allmulticast mode [ 637.618034][T23095] netlink: 'syz.9.6232': attribute type 6 has an invalid length. [ 637.842587][T23114] tipc: Enabled bearer , priority 0 [ 637.843919][T23114] tipc: Resetting bearer [ 637.845096][T23113] tipc: Disabling bearer [ 637.846879][T23115] tipc: Enabled bearer , priority 0 [ 637.847132][T23115] syzkaller0: entered promiscuous mode [ 637.847200][T23115] syzkaller0: entered allmulticast mode [ 637.849754][T23112] tipc: Resetting bearer [ 637.857986][T23112] tipc: Disabling bearer [ 638.277521][T23126] syzkaller0: entered promiscuous mode [ 638.277543][T23126] syzkaller0: entered allmulticast mode [ 638.703745][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6242'. [ 638.833701][T23137] netlink: 'syz.8.6246': attribute type 6 has an invalid length. [ 640.209583][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6248'. [ 640.388057][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.388187][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.312668][T23172] tipc: Enabled bearer , priority 0 [ 641.313363][T23172] syzkaller0: entered promiscuous mode [ 641.313379][T23172] syzkaller0: entered allmulticast mode [ 641.663670][T23171] tipc: Resetting bearer [ 641.667951][T23171] tipc: Disabling bearer [ 648.280705][T23227] tipc: Enabled bearer , priority 0 [ 648.282173][T23227] tipc: Resetting bearer [ 648.410004][T23225] tipc: Disabling bearer [ 654.732294][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6280'. [ 655.288770][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6283'. [ 655.822560][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6286'. [ 660.603063][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6301'. [ 661.993548][T23395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6303'. [ 665.198335][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6312'. [ 665.270055][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6314'. [ 665.833449][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6319'. [ 666.327204][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6317'. [ 670.089760][T23500] syzkaller0: entered promiscuous mode [ 670.089780][T23500] syzkaller0: entered allmulticast mode [ 671.115290][T23505] netlink: 'syz.9.6332': attribute type 1 has an invalid length. [ 671.129668][T23505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 672.278813][ T728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.726212][ T728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.950187][ T728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.938424][T23513] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.938461][T23513] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.938569][T23513] bridge_slave_0: entered allmulticast mode [ 673.963219][T23513] bridge_slave_0: entered promiscuous mode [ 673.971828][ T728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.974120][T23513] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.974157][T23513] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.974313][T23513] bridge_slave_1: entered allmulticast mode [ 673.974857][T23513] bridge_slave_1: entered promiscuous mode [ 674.353899][T23513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.483456][T23513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.491547][T23513] team0: Port device team_slave_0 added [ 675.513005][T23513] team0: Port device team_slave_1 added [ 675.544534][T23513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.544550][T23513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.544581][T23513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.547859][T23513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.547875][T23513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.547916][T23513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.724116][ T728] bridge_slave_1: left promiscuous mode [ 675.724278][ T728] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.724883][ T728] bridge_slave_0: left allmulticast mode [ 675.724898][ T728] bridge_slave_0: left promiscuous mode [ 675.724991][ T728] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.151564][T23585] netlink: 'syz.3.6345': attribute type 1 has an invalid length. [ 676.179073][ T29] audit: type=1400 audit(1790539017.718:979): avc: denied { write } for pid=23568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.243948][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6343'. [ 676.274042][ T29] audit: type=1400 audit(1790539017.818:980): avc: denied { write } for pid=23590 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.405567][ T728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.422931][ T728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.423871][ T728] bond0 (unregistering): Released all slaves [ 676.427610][ T728] bond1 (unregistering): Released all slaves [ 676.430951][ T728] bond2 (unregistering): Released all slaves [ 676.433130][ T728] bond3 (unregistering): Released all slaves [ 676.435705][ T728] bond4 (unregistering): Released all slaves [ 676.476471][T23513] hsr_slave_0: entered promiscuous mode [ 676.477948][T23513] hsr_slave_1: entered promiscuous mode [ 676.478222][T23513] debugfs: 'hsr0' already exists in 'hsr' [ 676.478237][T23513] Cannot create hsr debugfs directory [ 676.507085][T23585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.508475][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 676.522996][ T728] tipc: Left network mode [ 676.566037][ T728] hsr_slave_0: left promiscuous mode [ 676.566850][ T728] hsr_slave_1: left promiscuous mode [ 676.567257][ T728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.567653][ T728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.652836][ T728] team0 (unregistering): Port device team_slave_1 removed [ 677.657057][ T728] team0 (unregistering): Port device team_slave_0 removed [ 679.263913][ T29] audit: type=1400 audit(1790539020.808:981): avc: denied { write } for pid=23611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.458994][ T29] audit: type=1400 audit(1790539021.998:982): avc: denied { write } for pid=23642 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.485490][T23641] syzkaller0: entered promiscuous mode [ 680.485516][T23641] syzkaller0: entered allmulticast mode [ 680.568530][T23645] netlink: 'syz.3.6355': attribute type 1 has an invalid length. [ 680.578537][T23645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.606675][ T728] IPVS: stop unused estimator thread 0... [ 680.762450][T23513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 680.790329][T23513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 680.792455][T23513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.803769][T23513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.804375][T23513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.820217][T23513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.820793][T23513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.826956][T23513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.918376][T23513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.937771][T23513] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.024007][T23513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 681.024044][T23513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.276142][ T728] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.276184][ T728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.279137][ T728] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.279164][ T728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.793181][T23665] syzkaller0: entered promiscuous mode [ 681.793592][T23665] syzkaller0: entered allmulticast mode [ 681.825677][T23665] tipc: Enabled bearer , priority 0 [ 681.837641][T23665] tipc: Resetting bearer [ 681.846114][T23664] tipc: Resetting bearer [ 681.862983][T23664] tipc: Disabling bearer [ 682.332546][ T29] audit: type=1400 audit(1790539023.878:983): avc: denied { write } for pid=23667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.366106][T23513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.599042][ T29] audit: type=1400 audit(1790539024.058:984): avc: denied { write } for pid=23698 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.145217][T23513] veth0_vlan: entered promiscuous mode [ 683.150951][T23513] veth1_vlan: entered promiscuous mode [ 683.184411][T23513] veth0_macvtap: entered promiscuous mode [ 683.208627][T23513] veth1_macvtap: entered promiscuous mode [ 683.235801][T23513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.290796][T23513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.335607][ T29] audit: type=1400 audit(1790539024.878:985): avc: denied { write } for pid=23706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.359738][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.359779][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.359901][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.359932][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.417230][T23738] netlink: 'syz.3.6367': attribute type 1 has an invalid length. [ 684.419046][ T29] audit: type=1400 audit(1790539025.958:986): avc: denied { write } for pid=23737 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.584754][T23738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 686.471545][ T29] audit: type=1400 audit(1790539028.018:987): avc: denied { write } for pid=23747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.888075][ T29] audit: type=1400 audit(1790539028.428:988): avc: denied { write } for pid=23769 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.711510][T23782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6371'. [ 689.095732][T23799] netlink: 'syz.7.6378': attribute type 1 has an invalid length. [ 689.106082][T23799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.336768][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6376'. [ 691.833526][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6381'. [ 692.238844][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6383'. [ 692.453719][T23852] netlink: 'syz.7.6389': attribute type 1 has an invalid length. [ 692.465324][T23852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 694.031131][T17069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.138198][T17069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.197513][T17069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.266463][T17069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.458286][T17069] bridge_slave_1: left allmulticast mode [ 694.458309][T17069] bridge_slave_1: left promiscuous mode [ 694.458464][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.486586][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.654826][T17069] bond2 (unregistering): (slave erspan1): Releasing backup interface [ 695.622591][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6394'. [ 695.806563][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.807297][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.807708][T17069] bond0 (unregistering): Released all slaves [ 695.810722][T17069] bond1 (unregistering): Released all slaves [ 695.813424][T17069] bond2 (unregistering): Released all slaves [ 695.816044][T17069] bond3 (unregistering): Released all slaves [ 695.818787][T17069] bond4 (unregistering): Released all slaves [ 695.821801][T17069] bond5 (unregistering): Released all slaves [ 696.066465][T23912] netlink: 'syz.9.6400': attribute type 1 has an invalid length. [ 696.093756][T23914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6398'. [ 696.131825][T23912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 696.139643][T17069] tipc: Left network mode [ 696.172240][T17069] hsr_slave_0: left promiscuous mode [ 696.172816][T17069] hsr_slave_1: left promiscuous mode [ 696.173930][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.175001][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.283093][T17069] team0 (unregistering): Port device team_slave_1 removed [ 696.299840][T17069] team0 (unregistering): Port device team_slave_0 removed [ 696.538594][ T29] audit: type=1400 audit(1790539037.998:989): avc: denied { write } for pid=23918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.689104][ T29] audit: type=1400 audit(1790539038.228:990): avc: denied { write } for pid=23936 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.622467][T23868] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.622507][T23868] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.622624][T23868] bridge_slave_0: entered allmulticast mode [ 697.626301][T23868] bridge_slave_0: entered promiscuous mode [ 697.749810][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 697.763633][T23868] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.763665][T23868] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.763777][T23868] bridge_slave_1: entered allmulticast mode [ 697.764445][T23868] bridge_slave_1: entered promiscuous mode [ 697.820865][T23868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.840596][T23868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.867424][T23868] team0: Port device team_slave_0 added [ 697.875711][T23868] team0: Port device team_slave_1 added [ 697.892582][T23868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.892599][T23868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.892631][T23868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.893163][T23868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.893175][T23868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.893250][T23868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.910576][T23868] hsr_slave_0: entered promiscuous mode [ 697.910957][T23868] hsr_slave_1: entered promiscuous mode [ 698.120252][ T29] audit: type=1400 audit(1790539039.668:991): avc: denied { write } for pid=23958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.165559][ T29] audit: type=1400 audit(1790539039.708:992): avc: denied { write } for pid=23973 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.247351][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 698.681645][T23868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.701744][T23868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.706569][T23868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 698.730179][T23868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.734475][T23868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.755458][T23868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.788454][T23868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.803546][T23868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.897115][ T29] audit: type=1400 audit(1790539040.438:993): avc: denied { write } for pid=23979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.937865][T23868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.958796][T24001] netlink: 'syz.7.6410': attribute type 1 has an invalid length. [ 699.008033][ T29] audit: type=1400 audit(1790539040.548:994): avc: denied { write } for pid=24002 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.043051][T24001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 699.060139][T23868] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.077697][T23868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.077734][T23868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.236683][ T728] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.236730][ T728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.241922][ T728] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.241977][ T728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.785296][T24038] syzkaller0: entered promiscuous mode [ 700.785348][T24038] syzkaller0: entered allmulticast mode [ 701.045841][ T29] audit: type=1400 audit(1790539042.588:995): avc: denied { write } for pid=24021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.046560][T23868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.087151][ T29] audit: type=1400 audit(1790539042.628:996): avc: denied { write } for pid=24058 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.364815][T23868] veth0_vlan: entered promiscuous mode [ 701.396035][T23868] veth1_vlan: entered promiscuous mode [ 701.496733][T23868] veth0_macvtap: entered promiscuous mode [ 701.510141][T23868] veth1_macvtap: entered promiscuous mode [ 701.557050][T23868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.584453][T23868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.691354][ T29] audit: type=1400 audit(1790539043.238:997): avc: denied { write } for pid=24065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.746203][T17069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.749227][ T728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.809187][T17069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.809288][T17069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.872210][ T29] audit: type=1400 audit(1790539043.418:998): avc: denied { write } for pid=24079 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.762288][ T29] audit: type=1400 audit(1790539044.308:999): avc: denied { write } for pid=24086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.925998][ T29] audit: type=1400 audit(1790539044.468:1000): avc: denied { write } for pid=24104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.972857][T24107] netlink: 'syz.3.6422': attribute type 1 has an invalid length. [ 703.048067][ T595] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.231221][ T595] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.269811][ T29] audit: type=1400 audit(1790539045.818:1001): avc: denied { write } for pid=24109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.240411][ T595] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.281800][ T29] audit: type=1400 audit(1790539046.828:1002): avc: denied { write } for pid=24138 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.409940][ T595] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.972995][ T595] bridge_slave_1: left allmulticast mode [ 705.973022][ T595] bridge_slave_1: left promiscuous mode [ 705.973195][ T595] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.976750][ T595] bridge_slave_0: left allmulticast mode [ 705.976773][ T595] bridge_slave_0: left promiscuous mode [ 705.976940][ T595] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.404078][ T595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.405118][ T595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.405699][ T595] bond0 (unregistering): Released all slaves [ 707.407573][ T595] bond1 (unregistering): Released all slaves [ 707.425314][ T595] bond2 (unregistering): Released all slaves [ 707.428502][ T595] bond3 (unregistering): Released all slaves [ 707.487184][ T595] tipc: Left network mode [ 707.515784][ T595] hsr_slave_0: left promiscuous mode [ 707.523425][ T595] hsr_slave_1: left promiscuous mode [ 707.523989][ T595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.526892][ T595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.031174][ T595] team0 (unregistering): Port device team_slave_1 removed [ 708.076926][ T595] team0 (unregistering): Port device team_slave_0 removed [ 708.382550][ T29] audit: type=1400 audit(1790539049.928:1003): avc: denied { write } for pid=24172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.627643][ T29] audit: type=1400 audit(1790539050.168:1004): avc: denied { write } for pid=24195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.683265][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 710.419691][T24110] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.419729][T24110] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.419824][T24110] bridge_slave_0: entered allmulticast mode [ 710.420353][T24110] bridge_slave_0: entered promiscuous mode [ 710.449211][T24110] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.449246][T24110] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.449403][T24110] bridge_slave_1: entered allmulticast mode [ 710.450007][T24110] bridge_slave_1: entered promiscuous mode [ 710.464294][T24110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.465390][T24110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.476378][T24110] team0: Port device team_slave_0 added [ 710.477317][T24110] team0: Port device team_slave_1 added [ 710.877694][T24110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.877709][T24110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.877738][T24110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.887633][T24110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.887648][T24110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.887688][T24110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.956691][T24110] hsr_slave_0: entered promiscuous mode [ 710.963403][T24110] hsr_slave_1: entered promiscuous mode [ 710.963758][T24110] debugfs: 'hsr0' already exists in 'hsr' [ 710.963773][T24110] Cannot create hsr debugfs directory [ 711.044034][ T29] audit: type=1400 audit(1790539052.588:1005): avc: denied { write } for pid=24208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.138486][ T29] audit: type=1400 audit(1790539052.678:1006): avc: denied { write } for pid=24239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.235355][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 711.469733][ T29] audit: type=1400 audit(1790539053.008:1007): avc: denied { write } for pid=24245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.545711][ T29] audit: type=1400 audit(1790539053.088:1008): avc: denied { write } for pid=24257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.588239][T24110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 711.599390][T24110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.600456][T24110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 711.602480][T24110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.603080][T24110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 711.604717][T24110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.608122][T24110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 711.612020][T24110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.772373][T24228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6441'. [ 711.782873][T24110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.807351][T24110] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.811170][T23911] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.811205][T23911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.814823][T23911] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.814852][T23911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.966076][T24280] netlink: 'syz.7.6446': attribute type 1 has an invalid length. [ 712.003394][T24280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 712.079725][ T29] audit: type=1400 audit(1790539053.618:1009): avc: denied { write } for pid=24266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.338185][ T29] audit: type=1400 audit(1790539053.878:1010): avc: denied { write } for pid=24294 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.404572][T24110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.608000][T24110] veth0_vlan: entered promiscuous mode [ 712.610812][T24110] veth1_vlan: entered promiscuous mode [ 712.630279][T24110] veth0_macvtap: entered promiscuous mode [ 712.633551][T24110] veth1_macvtap: entered promiscuous mode [ 712.652054][T24110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.661046][T24110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.679047][T23911] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.679221][T23911] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.679264][T23911] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.679300][T23911] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.742009][ T29] audit: type=1400 audit(1790539054.288:1011): avc: denied { write } for pid=24314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.855939][ T29] audit: type=1400 audit(1790539054.398:1012): avc: denied { write } for pid=24336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.340791][T24356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6449'. [ 713.417386][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6421'. [ 713.758511][ T29] audit: type=1400 audit(1790539055.298:1013): avc: denied { write } for pid=24340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.796132][ T29] audit: type=1400 audit(1790539055.338:1014): avc: denied { write } for pid=24367 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.948680][T24385] netlink: 'syz.0.6457': attribute type 1 has an invalid length. [ 715.806440][T24403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.806630][T24403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.130201][T24411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6460'. [ 719.425589][T24440] syzkaller0: entered promiscuous mode [ 719.425613][T24440] syzkaller0: entered allmulticast mode [ 725.880889][T24490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.887968][T24490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.221585][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6492'. [ 730.542823][T24545] netlink: 'syz.0.6497': attribute type 1 has an invalid length. [ 730.663965][T24545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 730.675610][T24547] bond1: (slave erspan1): making interface the new active one [ 730.683268][T24547] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 731.447816][T24559] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 731.447950][ T29] audit: type=1400 audit(1790539072.988:1015): avc: denied { relabelfrom } for pid=24552 comm="syz.8.6500" name="NETLINK" dev="sockfs" ino=104596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 731.447979][ T29] audit: type=1400 audit(1790539072.988:1016): avc: denied { mac_admin } for pid=24552 comm="syz.8.6500" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.448003][ T29] audit: type=1400 audit(1790539072.988:1017): avc: denied { relabelto } for pid=24552 comm="syz.8.6500" name="NETLINK" dev="sockfs" ino=104596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 731.957589][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6503'. [ 732.822175][T24599] netlink: 'syz.8.6512': attribute type 1 has an invalid length. [ 732.945628][T24599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.001033][T24601] bond1: (slave erspan1): making interface the new active one [ 733.004241][T24601] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 737.311957][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6520'. [ 738.432485][T24651] syzkaller0: entered promiscuous mode [ 738.432582][T24651] syzkaller0: entered allmulticast mode [ 739.457966][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6526'. [ 750.628963][ C0] ================================================================== [ 750.629012][ C0] BUG: KCSAN: data-race in ktime_get_with_offset / timekeeping_update_from_shadow [ 750.629061][ C0] [ 750.629067][ C0] write to 0xffffffff895f6508 of 320 bytes by interrupt on cpu 1: [ 750.629088][ C0] timekeeping_update_from_shadow+0x448/0x480 [ 750.629124][ C0] __timekeeping_advance+0xb36/0xcf0 [ 750.629158][ C0] update_wall_time+0x21/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 750.629189][ C0] tick_do_update_jiffies64+0x169/0x1c0 [ 750.629222][ C0] tick_nohz_handler+0x88/0x380 [ 750.629252][ C0] __hrtimer_run_queues+0x1f8/0x510 [ 750.629278][ C0] hrtimer_interrupt+0x27b/0x860 [ 750.629303][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 750.629333][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 750.629368][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 750.629395][ C0] kcsan_setup_watchpoint+0x42b/0x4a0 [ 750.629432][ C0] futex_private_hash_put+0x1e/0xe0 [ 750.629462][ C0] futex_wait_setup+0x327/0x3e0 [ 750.629486][ C0] __futex_wait+0xa9/0x260 [ 750.629508][ C0] futex_wait+0x98/0x1c0 [ 750.629531][ C0] do_futex+0x391/0x460 [ 750.629569][ C0] __se_sys_futex+0x2f6/0x370 [ 750.629602][ C0] __x64_sys_futex+0x78/0x90 [ 750.629634][ C0] x64_sys_call+0x22e2/0x2550 [ 750.629661][ C0] do_syscall_64+0x112/0x360 [ 750.629685][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.629711][ C0] [ 750.629716][ C0] read to 0xffffffff895f6528 of 8 bytes by interrupt on cpu 0: [ 750.629736][ C0] ktime_get_with_offset+0x150/0x260 [ 750.629768][ C0] netif_receive_skb_list_internal+0x1b4/0x5e0 [ 750.629799][ C0] napi_complete_done+0x19c/0x3f0 [ 750.629827][ C0] virtnet_poll+0x1b16/0x1fb0 [ 750.629856][ C0] __napi_poll+0x61/0x300 [ 750.629882][ C0] net_rx_action+0x456/0x930 [ 750.629909][ C0] handle_softirqs+0xcc/0x2a0 [ 750.629935][ C0] __irq_exit_rcu+0x44/0xe0 [ 750.629959][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 750.629995][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 750.630020][ C0] preempt_schedule_irq+0x27/0x50 [ 750.630051][ C0] raw_irqentry_exit_cond_resched+0x49/0x60 [ 750.630085][ C0] irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 750.630107][ C0] irqentry_exit+0x7d/0x610 [ 750.630138][ C0] asm_common_interrupt+0x26/0x40 [ 750.630161][ C0] __tsan_unaligned_write2+0x115/0x190 [ 750.630188][ C0] sk_alloc+0x45/0x3e0 [ 750.630211][ C0] inet_create+0x3cb/0x790 [ 750.630244][ C0] __sock_create+0x2e5/0x580 [ 750.630273][ C0] sock_create_kern+0x38/0x50 [ 750.630306][ C0] smc_create+0x3ea/0x480 [ 750.630334][ C0] __sock_create+0x2e5/0x580 [ 750.630366][ C0] __sys_socket+0xaf/0x180 [ 750.630398][ C0] __x64_sys_socket+0x3f/0x50 [ 750.630429][ C0] x64_sys_call+0x246e/0x2550 [ 750.630459][ C0] do_syscall_64+0x112/0x360 [ 750.630484][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.630509][ C0] [ 750.630514][ C0] value changed: 0x000a039ad8340096 -> 0x000a9c315863645c [ 750.630530][ C0] [ 750.630535][ C0] Reported by Kernel Concurrency Sanitizer on: [ 750.630555][ C0] CPU: 0 UID: 0 PID: 25128 Comm: syz.3.6643 Not tainted syzkaller #0 PREEMPT(lazy) [ 750.630587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 750.630601][ C0] ================================================================== [ 751.147680][T10673] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.181790][T10673] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.222514][T10673] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.261158][T10673] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.322162][T10673] bridge_slave_1: left allmulticast mode [ 751.322184][T10673] bridge_slave_1: left promiscuous mode [ 751.322330][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.323622][T10673] bridge_slave_0: left allmulticast mode [ 751.323643][T10673] bridge_slave_0: left promiscuous mode [ 751.323755][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.380370][T10673] bond1 (unregistering): (slave erspan1): Releasing active interface [ 751.410803][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.411977][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.412771][T10673] bond0 (unregistering): Released all slaves [ 751.414435][T10673] bond1 (unregistering): Released all slaves [ 751.451924][T10673] tipc: Left network mode [ 751.454600][T10673] hsr_slave_0: left promiscuous mode [ 751.454964][T10673] hsr_slave_1: left promiscuous mode [ 751.455306][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.455322][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.455746][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.455762][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.458440][T10673] veth1_macvtap: left promiscuous mode [ 751.458465][T10673] veth0_macvtap: left promiscuous mode [ 751.458598][T10673] veth1_vlan: left promiscuous mode [ 751.458635][T10673] veth0_vlan: left promiscuous mode [ 751.550199][ T29] audit: type=1400 audit(1790539093.098:1018): avc: denied { write } for pid=25150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.574080][ T29] audit: type=1400 audit(1790539093.118:1019): avc: denied { write } for pid=25161 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.604722][T10673] team0 (unregistering): Port device team_slave_1 removed [ 751.613880][T10673] team0 (unregistering): Port device team_slave_0 removed [ 751.636723][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.711447][ T29] audit: type=1400 audit(1790539093.258:1020): avc: denied { write } for pid=25164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.750518][ T29] audit: type=1400 audit(1790539093.298:1021): avc: denied { write } for pid=25175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.783133][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 751.854041][ T29] audit: type=1400 audit(1790539093.398:1022): avc: denied { write } for pid=25178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.892507][ T29] audit: type=1400 audit(1790539093.438:1023): avc: denied { write } for pid=25189 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.925033][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 751.938386][T10673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.973013][T10673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.006214][ T29] audit: type=1400 audit(1790539093.548:1024): avc: denied { write } for pid=25192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.036001][T10673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.049575][ T29] audit: type=1400 audit(1790539093.588:1025): avc: denied { write } for pid=25203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.059753][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 752.092598][T10673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.151759][T10673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.192711][T10673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.226867][ T29] audit: type=1400 audit(1790539093.768:1026): avc: denied { write } for pid=25210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.262915][T10673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.266443][ T29] audit: type=1400 audit(1790539093.808:1027): avc: denied { write } for pid=25221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.303434][ T3024] 8021q: adding VLAN 0 to HW filter on device eth25 [ 752.320569][T10673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.403408][T10673] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.421614][ T3024] 8021q: adding VLAN 0 to HW filter on device eth26 [ 752.451975][T10673] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.502214][T10673] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.530202][ T3024] 8021q: adding VLAN 0 to HW filter on device eth27 [ 752.552202][T10673] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.617412][T10673] bridge_slave_1: left allmulticast mode [ 752.617437][T10673] bridge_slave_1: left promiscuous mode [ 752.617570][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.618339][T10673] bridge_slave_0: left allmulticast mode [ 752.618360][T10673] bridge_slave_0: left promiscuous mode [ 752.618573][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.660646][T10673] bridge_slave_1: left allmulticast mode [ 752.660670][T10673] bridge_slave_1: left promiscuous mode [ 752.660811][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.661529][T10673] bridge_slave_0: left allmulticast mode [ 752.661549][T10673] bridge_slave_0: left promiscuous mode [ 752.661685][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.694456][T10673] bridge_slave_1: left allmulticast mode [ 752.694478][T10673] bridge_slave_1: left promiscuous mode [ 752.694615][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.702140][T10673] bridge_slave_0: left allmulticast mode [ 752.702160][T10673] bridge_slave_0: left promiscuous mode [ 752.702365][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.795057][T10673] bond1 (unregistering): (slave erspan1): Releasing active interface [ 752.810022][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.811138][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.811927][T10673] bond0 (unregistering): Released all slaves [ 752.813693][T10673] bond1 (unregistering): Released all slaves [ 752.850791][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.851971][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.852657][T10673] bond0 (unregistering): Released all slaves [ 752.883929][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.885129][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.886130][T10673] bond0 (unregistering): Released all slaves [ 752.887514][ T3024] 8021q: adding VLAN 0 to HW filter on device eth28 [ 752.936811][T10673] hsr_slave_0: left promiscuous mode [ 752.937173][T10673] hsr_slave_1: left promiscuous mode [ 752.937735][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.937752][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.938037][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.938125][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.945764][T10673] hsr_slave_0: left promiscuous mode [ 752.949809][T10673] hsr_slave_1: left promiscuous mode [ 752.950340][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.950355][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.957635][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.957657][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.979800][T10673] hsr_slave_0: left promiscuous mode [ 752.985226][T10673] hsr_slave_1: left promiscuous mode [ 752.985795][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.985810][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.991387][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.991404][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.012956][T10673] veth1_macvtap: left promiscuous mode [ 753.012992][T10673] veth0_macvtap: left promiscuous mode [ 753.013425][T10673] veth1_vlan: left promiscuous mode [ 753.013515][T10673] veth0_vlan: left promiscuous mode [ 753.025511][T10673] veth1_macvtap: left promiscuous mode [ 753.025537][T10673] veth0_macvtap: left promiscuous mode [ 753.025599][T10673] veth1_vlan: left promiscuous mode [ 753.025691][T10673] veth0_vlan: left promiscuous mode [ 753.038675][T10673] veth1_macvtap: left promiscuous mode [ 753.038780][T10673] veth0_macvtap: left promiscuous mode [ 753.038988][T10673] veth1_vlan: left promiscuous mode [ 753.039050][T10673] veth0_vlan: left promiscuous mode [ 753.181465][T10673] team0 (unregistering): Port device team_slave_1 removed [ 753.183515][T10673] team0 (unregistering): Port device team_slave_0 removed [ 753.230244][T10673] team0 (unregistering): Port device team_slave_1 removed [ 753.232144][T10673] team0 (unregistering): Port device team_slave_0 removed [ 753.280108][T10673] team0 (unregistering): Port device team_slave_1 removed [ 753.282320][T10673] team0 (unregistering): Port device team_slave_0 removed [ 753.307208][ T3024] 8021q: adding VLAN 0 to HW filter on device eth29 [ 753.424242][ T3024] 8021q: adding VLAN 0 to HW filter on device eth30 [ 753.531954][ T3024] 8021q: adding VLAN 0 to HW filter on device eth31 [ 753.638175][ T3024] 8021q: adding VLAN 0 to HW filter on device eth32 [ 753.739478][ T3024] 8021q: adding VLAN 0 to HW filter on device eth33 [ 753.840296][ T3024] 8021q: adding VLAN 0 to HW filter on device eth34 [ 753.962229][ T3024] 8021q: adding VLAN 0 to HW filter on device eth36 [ 754.062159][ T3024] 8021q: adding VLAN 0 to HW filter on device eth35