last executing test programs: 8m42.13684225s ago: executing program 32 (id=2394): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) listen(r0, 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@jqfmt_vfsold}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) 8m38.325621676s ago: executing program 4 (id=2415): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 8m31.874785203s ago: executing program 4 (id=2419): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r3, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000940)=r0) r4 = syz_pidfd_open(r2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) process_madvise(r4, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0xe0}}, './file1\x00'}) bpf$PROG_LOAD(0x23, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x4b0400) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, 0x0, 0x101, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x24000084) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048012}, 0xc890) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4100000000000000010006"], 0x44}, 0x1, 0x1000000}, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'trusted.', 'ext4\x00'}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x267, &(0x7f0000000e40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 8m27.33948157s ago: executing program 4 (id=2422): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 8m22.568003251s ago: executing program 4 (id=2427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=local=']) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x5, 0x1, [0x40]}, 0xa) 8m18.681471012s ago: executing program 4 (id=2432): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 8m15.401492971s ago: executing program 4 (id=2434): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 7m57.53806477s ago: executing program 33 (id=2434): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 7m57.475718838s ago: executing program 0 (id=2458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7m56.662520931s ago: executing program 0 (id=2460): socket(0xa, 0x3, 0xff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0xa, "00f2ff1701049b14c8d423dbb3ce00"}) r2 = dup3(r1, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1'}, 0xb) 7m55.668762849s ago: executing program 0 (id=2466): socket(0xa, 0x3, 0xff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0xa, "00f2ff1701049b14c8d423dbb3ce00"}) r2 = dup3(r1, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1'}, 0xb) 7m54.517781718s ago: executing program 0 (id=2468): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m50.345317194s ago: executing program 0 (id=2469): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7m48.422571074s ago: executing program 0 (id=2472): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 7m33.250705912s ago: executing program 34 (id=2472): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 6m11.395320345s ago: executing program 5 (id=2617): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x40, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 6m8.052178421s ago: executing program 5 (id=2624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x40, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 6m7.473896s ago: executing program 5 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=local=']) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x5, 0x1, [0x40]}, 0xa) 6m6.550330082s ago: executing program 5 (id=2627): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 6m2.292104832s ago: executing program 5 (id=2632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x40, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 6m0.627901982s ago: executing program 5 (id=2637): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5m45.462627791s ago: executing program 35 (id=2637): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5m3.916574128s ago: executing program 6 (id=2719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x40, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 5m1.460957124s ago: executing program 6 (id=2723): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 4m55.177185545s ago: executing program 6 (id=2737): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20c200a2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574008000000c0007800800060000000000050005000a0000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r4, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendfile(r5, r4, 0x0, 0xfeff) 4m55.139449197s ago: executing program 6 (id=2738): r0 = socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x81, &(0x7f00000004c0)}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x10, 0x1fe, 0x6}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x800) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 4m51.738051932s ago: executing program 6 (id=2743): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4m48.073595446s ago: executing program 6 (id=2748): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4m32.949606793s ago: executing program 36 (id=2748): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1m22.314282145s ago: executing program 9 (id=6397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="06003400c5f3000008004a000bec0f001800490004ac0f0009ac0f"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 1m22.299142992s ago: executing program 9 (id=6398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$kcm(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20040000) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a1", 0xa}], 0x1}, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7f5a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x2c000010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m22.276542598s ago: executing program 9 (id=6399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}}}}, 0x3e) 1m22.226935988s ago: executing program 9 (id=6400): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m22.174506608s ago: executing program 9 (id=6401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x1354, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1328, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x1314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1118, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "de73cb2c96b0810ac05ac2a0765481f7831247feb9264e3d4d2c934fe4c9e65d84227dad2d1edcd4c693f596308bcbf95f289bb8804a6f20b73fb2880c97efa9d5d5a224e76d1e13fa3dda9e38"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "1f4facbd72b403f6ab7267b858fa037a8a2935334056d853507d9bfd6ed8246f845f03051539ce64297a771622baaf31e9c450c1f2c2fbe39823e61f6308ddfa"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x1e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "b545f6d53b618c47c3c0827d4c29ab53958fa2e33a9fec39329e9161303753ffe13e119c029eeb1a1fdfa2c08ecfade7cae40a157f"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x67, 0x1, "a668a585359f34a5f5dc63dfba6498d055090d6a472cbd8df999cc511c50772af167476bef331c3caf93ebc2d68d4ad2b01371b7e0ca0ba3853503268538e7071b956ff33f8def4aa658b9d2736b1b6b067d4e8d27bfc365192a3cad14f80c62972fb7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0x60, 0x1, "8448917ad237b9bbbc9845d61858826c9c1b061cc8dcbc3437f46f5005883f3a0b092992ad99adc9e9bdedee5fca8645290d83a83360b5cd37b79563fb4bf9856bdb483b9cca77b2b1d0c97f8dd287e39f850c683c8c2bda293ff84e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x13c0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x11efa, 0x8000000000000000, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x8000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000340), 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0xe984, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 1m22.174239388s ago: executing program 9 (id=6402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10000, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m22.174152498s ago: executing program 37 (id=6402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10000, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.954450406s ago: executing program 1 (id=8842): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x140) 1.896888886s ago: executing program 1 (id=8844): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.798096846s ago: executing program 1 (id=8849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x401, 0x4) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 985.68963ms ago: executing program 8 (id=8898): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) 975.742078ms ago: executing program 7 (id=8899): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, 0x0, 0x2f8}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78) 933.42996ms ago: executing program 1 (id=8900): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000800) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x540e12b13473b52f) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000000000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e}, 0x20) 933.20771ms ago: executing program 7 (id=8901): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) recvmsg$can_raw(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e80)=""/211, 0xd3}], 0x1}, 0x2) 870.717238ms ago: executing program 8 (id=8903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000010d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) 859.015146ms ago: executing program 1 (id=8906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 849.157134ms ago: executing program 8 (id=8907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000080), &(0x7f00000005c0)=@udp, 0x1}, 0x20) 782.775931ms ago: executing program 8 (id=8908): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 782.633831ms ago: executing program 8 (id=8909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x2004000) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) close(r1) 782.493251ms ago: executing program 1 (id=8910): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 754.355365ms ago: executing program 8 (id=8913): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x20000841) 727.45318ms ago: executing program 2 (id=8915): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r2, 0x4, r2}, 0x10) 662.433678ms ago: executing program 2 (id=8917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000010d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) 630.424092ms ago: executing program 2 (id=8918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x140) 559.505648ms ago: executing program 7 (id=8920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, 0x0, 0xcfa4) 466.28842ms ago: executing program 2 (id=8922): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 438.527565ms ago: executing program 7 (id=8923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 392.429376ms ago: executing program 2 (id=8924): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 392.078776ms ago: executing program 7 (id=8925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x2004000) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) close(r1) 391.651726ms ago: executing program 2 (id=8926): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x33fe0, 0x0) 333.619004ms ago: executing program 7 (id=8928): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x6, 0x2, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 212.485891ms ago: executing program 3 (id=8932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x140) 118.823993ms ago: executing program 3 (id=8933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 58.970571ms ago: executing program 3 (id=8934): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00cafcab6332"], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r9) 52.84844ms ago: executing program 3 (id=8935): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x8, &(0x7f0000000640), 0x4) 559.97µs ago: executing program 3 (id=8936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x870}}, 0x0) 0s ago: executing program 3 (id=8937): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x1c, 0x15, 0x1, 0x0, 0x25dfdbfc, {0xa}, [@nested={0x6, 0xbd, 0x0, 0x1, [@generic="c12e"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003e40)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4040) kernel console output (not intermixed with test programs): .5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1039.287064][T22738] syzkaller0: entered promiscuous mode [ 1039.294134][T22738] syzkaller0: entered allmulticast mode [ 1039.301906][T22709] dummy0 speed is unknown, defaulting to 1000 [ 1039.364350][T22709] chnl_net:caif_netlink_parms(): no params data found [ 1039.412128][T22709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.419414][T22709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.426721][T22709] bridge_slave_0: entered allmulticast mode [ 1039.433352][T22709] bridge_slave_0: entered promiscuous mode [ 1039.439980][T22709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.447170][T22709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.454549][T22709] bridge_slave_1: entered allmulticast mode [ 1039.461154][T22709] bridge_slave_1: entered promiscuous mode [ 1039.481606][T22709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.492744][T22709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.513029][T22709] team0: Port device team_slave_0 added [ 1039.519497][T22709] team0: Port device team_slave_1 added [ 1039.536166][T22709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.543161][T22709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.569663][T22709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.581029][T22709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.587971][T22709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.614251][T22709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.642612][T22709] hsr_slave_0: entered promiscuous mode [ 1039.648564][T22709] hsr_slave_1: entered promiscuous mode [ 1039.654440][T22709] debugfs: 'hsr0' already exists in 'hsr' [ 1039.660208][T22709] Cannot create hsr debugfs directory [ 1039.721778][T22709] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.762261][T22776] syzkaller0: entered promiscuous mode [ 1039.767773][T22776] syzkaller0: entered allmulticast mode [ 1039.780595][T22709] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.833800][T22709] bridge0: port 3(netdevsim1) entered disabled state [ 1039.843363][T22709] netdevsim netdevsim8 netdevsim1 (unregistering): left allmulticast mode [ 1039.852125][T22709] netdevsim netdevsim8 netdevsim1 (unregistering): left promiscuous mode [ 1039.860731][T22709] bridge0: port 3(netdevsim1) entered disabled state [ 1039.868202][T22709] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.918698][T22709] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.995438][T22709] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1040.006072][T22709] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1040.021295][T22709] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1040.031685][T22709] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1040.058030][T22709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.065105][T22709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.072511][T22709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.079545][T22709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.109411][T22709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.123323][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.131662][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.148936][T22803] __nla_validate_parse: 16 callbacks suppressed [ 1040.148961][T22803] netlink: 496 bytes leftover after parsing attributes in process `syz.9.5410'. [ 1040.152257][T22709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.180763][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.187855][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.199149][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.206259][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.289899][T22709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.396830][T22832] netlink: 1047 bytes leftover after parsing attributes in process `syz.9.5419'. [ 1040.432914][T22842] syzkaller0: entered promiscuous mode [ 1040.438603][T22842] syzkaller0: entered allmulticast mode [ 1040.487092][T22709] veth0_vlan: entered promiscuous mode [ 1040.498773][T22709] veth1_vlan: entered promiscuous mode [ 1040.525980][T22855] 9pnet_virtio: no channels available for device syz [ 1040.532174][T22709] veth0_macvtap: entered promiscuous mode [ 1040.545999][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5427'. [ 1040.556522][T22709] veth1_macvtap: entered promiscuous mode [ 1040.576403][T22709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.585150][T22709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.625783][T22868] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5429'. [ 1042.057749][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.091870][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.110518][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.133191][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.289207][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 1042.302459][T23046] openvswitch: netlink: Flow key attr not present in new flow. [ 1042.371079][T23051] syzkaller0: entered promiscuous mode [ 1042.386878][T23051] syzkaller0: entered allmulticast mode [ 1042.442579][T23070] syzkaller0: entered promiscuous mode [ 1042.448176][T23070] syzkaller0: entered allmulticast mode [ 1042.483072][T23066] dummy0 speed is unknown, defaulting to 1000 [ 1042.649734][T23102] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5471'. [ 1042.703420][T23110] 9pnet_virtio: no channels available for device syz [ 1042.867763][T23134] syzkaller0: entered promiscuous mode [ 1042.873424][T23134] syzkaller0: entered allmulticast mode [ 1042.909780][ T28] audit: type=1400 audit(1772721571.918:276): avc: denied { create } for pid=23141 comm="syz.7.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1042.937219][ T28] audit: type=1400 audit(1772721571.918:277): avc: denied { write } for pid=23141 comm="syz.7.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1043.053091][ T28] audit: type=1400 audit(1772721572.068:278): avc: denied { ioctl } for pid=23159 comm="syz.2.5498" path="socket:[65932]" dev="sockfs" ino=65932 ioctlcmd=0x54e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1043.186401][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5505'. [ 1043.204945][T23172] syzkaller0: entered promiscuous mode [ 1043.211689][T23172] syzkaller0: entered allmulticast mode [ 1043.444226][T23213] netlink: 'syz.8.5524': attribute type 10 has an invalid length. [ 1043.469656][T23213] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5524'. [ 1043.486175][T23213] veth1_macvtap: entered allmulticast mode [ 1043.504890][T23213] bridge0: port 3(veth1_macvtap) entered blocking state [ 1043.536480][T23213] bridge0: port 3(veth1_macvtap) entered disabled state [ 1043.545642][T23213] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1043.715494][ T58] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1043.832738][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5558'. [ 1043.842930][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5558'. [ 1043.982862][T23315] syzkaller0: entered promiscuous mode [ 1043.991118][T23315] syzkaller0: entered allmulticast mode [ 1044.000122][T23317] netlink: 'syz.8.5570': attribute type 11 has an invalid length. [ 1044.027977][T23319] syzkaller0: entered promiscuous mode [ 1044.033886][T23319] syzkaller0: entered allmulticast mode [ 1044.746206][T23338] syzkaller0: entered promiscuous mode [ 1044.751768][T23338] syzkaller0: entered allmulticast mode [ 1046.636269][T23244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.749973][T23361] __nla_validate_parse: 1 callbacks suppressed [ 1046.749990][T23361] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5588'. [ 1046.754338][T23359] syzkaller0: entered promiscuous mode [ 1046.771813][T23359] syzkaller0: entered allmulticast mode [ 1046.845233][T23373] syzkaller0: entered promiscuous mode [ 1046.850808][T23373] syzkaller0: entered allmulticast mode [ 1046.908925][T23378] syzkaller0: entered promiscuous mode [ 1046.914641][T23378] syzkaller0: entered allmulticast mode [ 1046.969131][T23380] syzkaller0: entered promiscuous mode [ 1046.976398][T23380] syzkaller0: entered allmulticast mode [ 1047.030863][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1047.031073][T23391] syzkaller0: entered promiscuous mode [ 1047.045676][T23391] syzkaller0: entered allmulticast mode [ 1047.218472][T23404] syzkaller0: entered promiscuous mode [ 1047.224062][T23404] syzkaller0: entered allmulticast mode [ 1047.395561][T23418] syzkaller0: entered promiscuous mode [ 1047.401318][T23418] syzkaller0: entered allmulticast mode [ 1047.502635][T23426] syzkaller0: entered promiscuous mode [ 1047.508215][T23426] syzkaller0: entered allmulticast mode [ 1048.011806][T23449] syzkaller0: entered promiscuous mode [ 1048.017349][T23449] syzkaller0: entered allmulticast mode [ 1048.138349][T23453] syzkaller0: entered promiscuous mode [ 1048.144007][T23453] syzkaller0: entered allmulticast mode [ 1048.239511][ T28] audit: type=1400 audit(1772721577.248:279): avc: denied { ioctl } for pid=23458 comm="syz.2.5631" path="socket:[66531]" dev="sockfs" ino=66531 ioctlcmd=0x8b28 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1048.311035][T23470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5636'. [ 1048.353305][T23473] syzkaller0: entered promiscuous mode [ 1048.366522][T23473] syzkaller0: entered allmulticast mode [ 1048.401469][T23477] syzkaller0: entered promiscuous mode [ 1048.407137][T23477] syzkaller0: entered allmulticast mode [ 1048.493254][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5641'. [ 1048.631968][T23502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5651'. [ 1048.664807][T23505] syzkaller0: entered promiscuous mode [ 1048.670418][T23505] syzkaller0: entered allmulticast mode [ 1048.890633][T23511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23511 comm=syz.2.5655 [ 1048.905016][T23511] netlink: 'syz.2.5655': attribute type 10 has an invalid length. [ 1048.916820][T23511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.928635][T23511] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1048.943458][T23511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.951510][T23511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.959452][T23511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.967491][T23511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.984320][T23511] bond0: (slave batadv0): Releasing backup interface [ 1049.212041][T23526] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5662'. [ 1049.295048][T23536] syzkaller0: entered promiscuous mode [ 1049.300749][T23536] syzkaller0: entered allmulticast mode [ 1049.309138][T23537] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5666'. [ 1049.491072][T23547] syzkaller0: entered promiscuous mode [ 1049.496601][T23547] syzkaller0: entered allmulticast mode [ 1049.763833][T23567] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5681'. [ 1049.791637][T23569] syzkaller0: entered promiscuous mode [ 1049.797232][T23569] syzkaller0: entered allmulticast mode [ 1049.977436][T23382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.994332][T23520] netlink: 'syz.2.5659': attribute type 1 has an invalid length. [ 1050.002697][T23520] netlink: 'syz.2.5659': attribute type 2 has an invalid length. [ 1050.015834][T23577] syzkaller0: entered promiscuous mode [ 1050.022607][T23577] syzkaller0: entered allmulticast mode [ 1050.102394][T23591] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5692'. [ 1050.217914][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1050.382958][ T28] audit: type=1400 audit(1772721579.398:280): avc: denied { ioctl } for pid=23640 comm="syz.3.5713" path="socket:[67855]" dev="sockfs" ino=67855 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1050.416277][T23645] netlink: 16098 bytes leftover after parsing attributes in process `syz.8.5714'. [ 1051.428319][T23768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1051.705460][T23800] syzkaller0: entered promiscuous mode [ 1051.711488][T23800] syzkaller0: entered allmulticast mode [ 1051.760097][T23802] syzkaller0: entered promiscuous mode [ 1051.765732][T23802] syzkaller0: entered allmulticast mode [ 1052.053540][T23824] syzkaller0: entered promiscuous mode [ 1052.059180][T23824] syzkaller0: entered allmulticast mode [ 1052.074145][T23824] __nla_validate_parse: 3 callbacks suppressed [ 1052.074160][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5754'. [ 1052.093788][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5754'. [ 1052.150286][T23834] syzkaller0: entered promiscuous mode [ 1052.155783][T23834] syzkaller0: entered allmulticast mode [ 1052.293866][T23852] syzkaller0: entered promiscuous mode [ 1052.299461][T23852] syzkaller0: entered allmulticast mode [ 1052.653464][T23913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.661010][T23913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.668516][T23913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.678283][T23913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.979892][T23927] netlink: 'syz.3.5803': attribute type 2 has an invalid length. [ 1052.987789][T23927] netlink: 'syz.3.5803': attribute type 1 has an invalid length. [ 1053.169469][T23602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1053.217571][T23934] netlink: 'syz.9.5806': attribute type 39 has an invalid length. [ 1053.268791][T23943] netlink: 'syz.7.5811': attribute type 11 has an invalid length. [ 1053.277060][T23943] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5811'. [ 1053.333008][T23947] syzkaller0: entered promiscuous mode [ 1053.339794][T23947] syzkaller0: entered allmulticast mode [ 1053.350575][T23949] syzkaller0: entered promiscuous mode [ 1053.356138][T23949] syzkaller0: entered allmulticast mode [ 1053.487031][T23974] netlink: 'syz.7.5823': attribute type 11 has an invalid length. [ 1053.495010][T23974] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5823'. [ 1053.506028][ T28] audit: type=1400 audit(1772721582.508:281): avc: denied { write } for pid=23975 comm="syz.2.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1053.577052][T23984] syzkaller0: entered promiscuous mode [ 1053.582389][T23990] 9pnet_virtio: no channels available for device syz [ 1053.582621][T23984] syzkaller0: entered allmulticast mode [ 1053.597638][T23990] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1053.668418][T24000] netlink: 'syz.9.5837': attribute type 11 has an invalid length. [ 1053.676479][T24000] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5837'. [ 1053.759134][T24008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=24008 comm=syz.2.5841 [ 1053.773673][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1053.784287][T24008] team0: entered promiscuous mode [ 1053.789494][T24008] team_slave_0: entered promiscuous mode [ 1053.795901][T24008] team_slave_1: entered promiscuous mode [ 1053.802227][T24008] team0: entered allmulticast mode [ 1053.807629][T24008] team_slave_0: entered allmulticast mode [ 1053.813326][T24012] 9pnet_virtio: no channels available for device syz [ 1053.813844][T24008] team_slave_1: entered allmulticast mode [ 1053.827845][T24012] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5843'. [ 1053.918706][T24020] syzkaller0: entered promiscuous mode [ 1053.924287][T24020] syzkaller0: entered allmulticast mode [ 1054.180407][T24039] netlink: 'syz.2.5856': attribute type 39 has an invalid length. [ 1054.716136][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.773892][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.803769][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.843191][T24075] dummy0 speed is unknown, defaulting to 1000 [ 1054.855837][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.921606][T24075] chnl_net:caif_netlink_parms(): no params data found [ 1054.976488][ T82] bridge_slave_1: left allmulticast mode [ 1054.982396][ T82] bridge_slave_1: left promiscuous mode [ 1054.988045][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.996058][ T82] bridge_slave_0: left allmulticast mode [ 1055.001898][ T82] bridge_slave_0: left promiscuous mode [ 1055.007710][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.104735][ T82] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1055.161536][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.171681][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.181569][ T82] bond0 (unregistering): Released all slaves [ 1055.197811][T24075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.205172][T24075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.212569][T24075] bridge_slave_0: entered allmulticast mode [ 1055.219387][T24075] bridge_slave_0: entered promiscuous mode [ 1055.226193][T24075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.233649][T24075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.241630][T24075] bridge_slave_1: entered allmulticast mode [ 1055.248123][T24075] bridge_slave_1: entered promiscuous mode [ 1055.254771][ T82] tipc: Left network mode [ 1055.270669][T24075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.281257][T24075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.291958][ T82] hsr_slave_0: left promiscuous mode [ 1055.297612][ T82] hsr_slave_1: left promiscuous mode [ 1055.306180][ T82] veth1_macvtap: left promiscuous mode [ 1055.312322][ T82] veth0_macvtap: left promiscuous mode [ 1055.317903][ T82] veth1_vlan: left promiscuous mode [ 1055.323391][ T82] veth0_vlan: left promiscuous mode [ 1055.389635][ T82] team_slave_1 (unregistering): left promiscuous mode [ 1055.396526][ T82] team_slave_1 (unregistering): left allmulticast mode [ 1055.404192][ T82] team0 (unregistering): Port device team_slave_1 removed [ 1055.413411][ T82] team_slave_0 (unregistering): left promiscuous mode [ 1055.420363][ T82] team_slave_0 (unregistering): left allmulticast mode [ 1055.427626][ T82] team0 (unregistering): Port device team_slave_0 removed [ 1055.470632][ T3423] dummy0 speed is unknown, defaulting to 1000 [ 1055.477259][ T3423] infiniband syz0: ib_query_port failed (-19) [ 1055.481008][T24075] team0: Port device team_slave_0 added [ 1055.492114][T24075] team0: Port device team_slave_1 added [ 1055.508038][T24075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.517488][T24075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.543942][T24075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.555393][T24075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.561439][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5887'. [ 1055.562796][T24075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.597193][T24075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.622474][T24075] hsr_slave_0: entered promiscuous mode [ 1055.628632][T24075] hsr_slave_1: entered promiscuous mode [ 1055.635220][T24075] debugfs: 'hsr0' already exists in 'hsr' [ 1055.641235][T24075] Cannot create hsr debugfs directory [ 1055.651501][ T28] audit: type=1400 audit(1772721584.668:282): avc: denied { create } for pid=24118 comm="syz.7.5888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1055.746815][ T28] audit: type=1400 audit(1772721584.758:283): avc: denied { cpu } for pid=24125 comm="syz.7.5891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1056.212345][T24138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24138 comm=syz.9.5897 [ 1056.336341][T23951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1056.348924][T24075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1056.371063][T24075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1056.393916][T24075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1056.410153][T24075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1056.420943][ T28] audit: type=1400 audit(1772721585.438:284): avc: denied { getattr } for pid=24148 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.459605][ T28] audit: type=1400 audit(1772721585.468:285): avc: denied { read } for pid=24150 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.501011][ T28] audit: type=1400 audit(1772721585.468:286): avc: denied { open } for pid=24150 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.531274][ T28] audit: type=1400 audit(1772721585.528:287): avc: denied { create } for pid=24145 comm="dhcpcd-run-hook" name="resolv.conf.eth21.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.555758][T24160] syzkaller0: entered promiscuous mode [ 1056.564261][T24160] syzkaller0: entered allmulticast mode [ 1056.579736][T24160] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5902'. [ 1056.588991][ T28] audit: type=1400 audit(1772721585.528:288): avc: denied { write } for pid=24145 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth21.link" dev="tmpfs" ino=39053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.618919][ T28] audit: type=1400 audit(1772721585.528:289): avc: denied { append } for pid=24145 comm="dhcpcd-run-hook" name="resolv.conf.eth21.link" dev="tmpfs" ino=39053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.645425][ T28] audit: type=1400 audit(1772721585.588:290): avc: denied { unlink } for pid=24168 comm="rm" name="resolv.conf.eth21.link" dev="tmpfs" ino=39053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1056.660892][T24075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.702624][T24075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.713635][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.720840][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.742705][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.749859][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.778687][T24075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1056.794502][T24075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1056.855930][T24075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.916905][T24203] netlink: 'syz.7.5908': attribute type 39 has an invalid length. [ 1056.947229][T24075] veth0_vlan: entered promiscuous mode [ 1056.955038][T24075] veth1_vlan: entered promiscuous mode [ 1056.970261][T24075] veth0_macvtap: entered promiscuous mode [ 1056.977772][T24075] veth1_macvtap: entered promiscuous mode [ 1056.988875][T24075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.000102][T24075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.010764][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.019515][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.031468][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.040543][ T3461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.085803][T24215] netlink: 'syz.2.5874': attribute type 11 has an invalid length. [ 1057.093906][T24215] __nla_validate_parse: 1 callbacks suppressed [ 1057.093920][T24215] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1057.289469][T24247] netlink: 'syz.8.5921': attribute type 11 has an invalid length. [ 1057.297666][T24247] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5921'. [ 1057.381922][T24221] chnl_net:caif_netlink_parms(): no params data found [ 1057.453749][T24221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.461591][T24221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.469099][T24221] bridge_slave_0: entered allmulticast mode [ 1057.476238][T24221] bridge_slave_0: entered promiscuous mode [ 1057.485262][T24221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.492834][T24221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.500630][T24221] bridge_slave_1: entered allmulticast mode [ 1057.507040][T24221] bridge_slave_1: entered promiscuous mode [ 1057.525642][T24221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.536077][T24221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.564514][T24221] team0: Port device team_slave_0 added [ 1057.572226][T24221] team0: Port device team_slave_1 added [ 1057.593807][T24221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.601063][T24221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.628799][T24221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.640342][T24221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.647326][T24221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.673970][T24221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.702824][T24297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.704891][T24221] hsr_slave_0: entered promiscuous mode [ 1057.711994][T24297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.718080][T24221] hsr_slave_1: entered promiscuous mode [ 1057.730754][T24221] debugfs: 'hsr0' already exists in 'hsr' [ 1057.736490][T24221] Cannot create hsr debugfs directory [ 1057.796550][T24221] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.844058][T24221] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.906633][T24221] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.965444][T24221] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.243834][T24308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.252392][T24308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.328285][T24313] syzkaller0: entered promiscuous mode [ 1058.333925][T24313] syzkaller0: entered allmulticast mode [ 1058.492768][T24317] netlink: 'syz.7.5951': attribute type 39 has an invalid length. [ 1058.580501][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1058.580514][ T28] audit: type=1400 audit(1772721587.598:292): avc: denied { shutdown } for pid=24318 comm="syz.7.5952" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1059.055117][T24334] netlink: 'syz.7.5959': attribute type 4 has an invalid length. [ 1059.121854][T24339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24339 comm=syz.7.5961 [ 1059.135796][T24339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.143478][T24339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.151763][T24339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.159152][T24339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.289092][T24343] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5963'. [ 1059.311650][T24345] netlink: 'syz.7.5964': attribute type 11 has an invalid length. [ 1059.319826][T24345] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5964'. [ 1059.392706][T24353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.401582][T24353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.610934][T24353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.619589][T24353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.903221][T24199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.912922][T24221] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1059.934337][T24221] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1059.945553][T24221] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1059.961395][T24221] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1060.005855][T24221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.019092][T24221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.041622][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.048699][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.058239][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.065342][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.087358][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1060.114167][ T28] audit: type=1400 audit(1772721589.098:293): avc: denied { setopt } for pid=24368 comm="syz.3.5973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1060.143033][ T28] audit: type=1400 audit(1772721589.098:294): avc: denied { connect } for pid=24368 comm="syz.3.5973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1060.163975][T24221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.216620][T24387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.234034][T24387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.261586][T24387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.270855][T24387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.289271][T24392] tipc: Started in network mode [ 1060.297280][T24392] tipc: Node identity b286d3cf3cc1, cluster identity 4711 [ 1060.304882][T24392] tipc: Enabled bearer , priority 0 [ 1060.312105][T24392] syzkaller0: entered promiscuous mode [ 1060.317706][T24392] syzkaller0: entered allmulticast mode [ 1060.327307][T24392] tipc: Resetting bearer [ 1060.353854][T24390] tipc: Resetting bearer [ 1060.361051][T24390] tipc: Disabling bearer [ 1060.445627][T24221] veth0_vlan: entered promiscuous mode [ 1060.462802][T24221] veth1_vlan: entered promiscuous mode [ 1060.482105][T24221] veth0_macvtap: entered promiscuous mode [ 1060.489989][T24221] veth1_macvtap: entered promiscuous mode [ 1060.503072][T24221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.516141][T24221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.528162][ T3461] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.535708][T24416] netlink: 'syz.2.5989': attribute type 2 has an invalid length. [ 1060.546776][T24416] netlink: 'syz.2.5989': attribute type 11 has an invalid length. [ 1060.547132][ T3461] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.554905][T24416] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1060.573827][T24418] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5988'. [ 1060.586407][ T3461] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.598589][ T3461] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.627243][T24421] syzkaller1: entered promiscuous mode [ 1060.633277][T24421] syzkaller1: entered allmulticast mode [ 1060.916352][T24464] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6009'. [ 1060.943831][T24468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.959869][T24468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.045047][T24476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.053548][T24476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.087923][T24482] usb usb8: usbfs: process 24482 (syz.3.6018) did not claim interface 0 before use [ 1061.424851][ T28] audit: type=1400 audit(1772721590.438:295): avc: denied { create } for pid=24508 comm="syz.8.6030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1061.444846][ T28] audit: type=1400 audit(1772721590.438:296): avc: denied { bind } for pid=24508 comm="syz.8.6030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1061.483013][T24513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.492378][T24513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.546181][T24517] netlink: 'syz.9.6034': attribute type 4 has an invalid length. [ 1061.775522][T24535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.784351][T24535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.993816][T24535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.002458][T24535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.041818][T24539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.050918][T24539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.172710][T24543] netlink: 'syz.3.6047': attribute type 2 has an invalid length. [ 1062.181046][T24543] netlink: 'syz.3.6047': attribute type 11 has an invalid length. [ 1062.188868][T24543] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1062.458026][T24574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1062.491545][T24579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.500682][T24579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.524081][T24582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.533000][T24582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.612143][T24593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.627726][T24593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.696920][T24601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24601 comm=syz.2.6073 [ 1062.711157][T24601] netlink: 'syz.2.6073': attribute type 10 has an invalid length. [ 1062.722944][T24601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.731862][T24601] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1062.741843][T24601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.749230][T24601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.757122][T24601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.764958][T24601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.775852][T24601] bond0: (slave batadv0): Releasing backup interface [ 1062.886860][T24603] syzkaller0: entered promiscuous mode [ 1062.892539][T24603] syzkaller0: entered allmulticast mode [ 1062.900852][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6074'. [ 1062.910053][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6074'. [ 1062.981433][ T28] audit: type=1400 audit(1772721591.998:297): avc: denied { read } for pid=24604 comm="syz.2.6075" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1063.005072][ T28] audit: type=1400 audit(1772721591.998:298): avc: denied { open } for pid=24604 comm="syz.2.6075" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1063.166357][T24620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.174901][T24620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.205919][T24605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.214596][T24605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.253483][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6086'. [ 1063.397800][T24640] tipc: Started in network mode [ 1063.402737][T24640] tipc: Node identity 8a4ed876a5c2, cluster identity 4711 [ 1063.409992][T24640] tipc: Enabled bearer , priority 0 [ 1063.418756][T24640] syzkaller0: entered promiscuous mode [ 1063.424424][T24640] syzkaller0: entered allmulticast mode [ 1063.433261][T24642] syzkaller0: entered promiscuous mode [ 1063.438837][T24642] syzkaller0: entered allmulticast mode [ 1063.447695][T24640] tipc: Resetting bearer [ 1063.455554][T24639] tipc: Resetting bearer [ 1063.464931][T24639] tipc: Disabling bearer [ 1063.636095][T24665] syzkaller0: entered promiscuous mode [ 1063.641685][T24665] syzkaller0: entered allmulticast mode [ 1063.650897][T24665] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6104'. [ 1063.660711][T24665] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6104'. [ 1063.747226][T24672] tipc: Started in network mode [ 1063.752548][T24672] tipc: Node identity e2e36c863067, cluster identity 4711 [ 1063.764100][T24672] tipc: Enabled bearer , priority 0 [ 1063.782728][T24672] syzkaller0: entered promiscuous mode [ 1063.796132][T24672] syzkaller0: entered allmulticast mode [ 1063.819316][T24672] tipc: Resetting bearer [ 1063.839704][T24671] tipc: Resetting bearer [ 1063.847343][T24671] tipc: Disabling bearer [ 1063.854391][T24685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6113'. [ 1063.898798][T24691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.907862][T24691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.925857][T24697] netlink: 'syz.7.6119': attribute type 4 has an invalid length. [ 1063.968400][T24699] syzkaller0: entered promiscuous mode [ 1063.978565][T24699] syzkaller0: entered allmulticast mode [ 1063.987247][T24699] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6120'. [ 1063.997834][T24699] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6120'. [ 1064.010507][T24707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.024059][T24707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.034014][T24709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.042722][T24709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.488123][T24722] tipc: Started in network mode [ 1064.493234][T24722] tipc: Node identity a28636e1857c, cluster identity 4711 [ 1064.500459][T24722] tipc: Enabled bearer , priority 0 [ 1064.507955][T24722] syzkaller0: entered promiscuous mode [ 1064.513910][T24722] syzkaller0: entered allmulticast mode [ 1064.524602][T24722] tipc: Resetting bearer [ 1064.531580][T24721] tipc: Resetting bearer [ 1064.541784][T24721] tipc: Disabling bearer [ 1064.596267][T24736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.606966][T24736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.639158][T24743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24743 comm=syz.7.6140 [ 1064.653211][T24743] netlink: 'syz.7.6140': attribute type 10 has an invalid length. [ 1064.677660][T24749] syzkaller1: entered promiscuous mode [ 1064.684367][T24749] syzkaller1: entered allmulticast mode [ 1064.759405][T24762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.768132][T24762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.809880][T24764] tipc: Enabled bearer , priority 0 [ 1064.816867][T24764] syzkaller0: entered promiscuous mode [ 1064.823336][T24764] syzkaller0: entered allmulticast mode [ 1064.839086][T24764] tipc: Resetting bearer [ 1064.850369][T24763] tipc: Resetting bearer [ 1064.858392][T24772] tmpfs: Unknown parameter 'usrquota' [ 1064.864555][T24763] tipc: Disabling bearer [ 1064.902007][T24778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24778 comm=syz.8.6157 [ 1064.915593][T24778] netlink: 'syz.8.6157': attribute type 10 has an invalid length. [ 1064.926845][T24778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.935625][T24778] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1064.947223][T24778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.954920][T24778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.962733][T24778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.975419][T24778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.985274][T24778] bond0: (slave batadv0): Releasing backup interface [ 1064.996379][T24784] usb usb8: usbfs: process 24784 (syz.7.6160) did not claim interface 0 before use [ 1065.075896][T24788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.085494][T24788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.302434][T24808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24808 comm=syz.2.6172 [ 1065.316280][T24808] netlink: 'syz.2.6172': attribute type 10 has an invalid length. [ 1065.475725][T24824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.484713][T24824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.615000][ T28] audit: type=1400 audit(1772721594.628:299): avc: denied { read } for pid=24831 comm="syz.9.6183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1065.846830][T24885] netlink: 'syz.8.6194': attribute type 4 has an invalid length. [ 1066.125812][T24902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.137416][T24902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.516993][T25021] syzkaller1: entered promiscuous mode [ 1066.529875][T25021] syzkaller1: entered allmulticast mode [ 1066.606956][T25028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.623042][T25028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.646605][T25034] netlink: 'syz.9.6223': attribute type 39 has an invalid length. [ 1066.769461][T25046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.778910][T25046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.872749][T25050] netlink: 'syz.9.6231': attribute type 2 has an invalid length. [ 1066.880889][T25050] netlink: 'syz.9.6231': attribute type 11 has an invalid length. [ 1067.065488][T25076] syzkaller1: entered promiscuous mode [ 1067.071006][T25076] syzkaller1: entered allmulticast mode [ 1067.223752][T25089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.232467][T25089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.412120][T25097] tipc: Enabled bearer , priority 0 [ 1067.419293][T25097] syzkaller0: entered promiscuous mode [ 1067.425045][T25097] syzkaller0: entered allmulticast mode [ 1067.434657][T25097] tipc: Resetting bearer [ 1067.441240][T25096] tipc: Resetting bearer [ 1067.448689][T25096] tipc: Disabling bearer [ 1067.568379][T25115] __nla_validate_parse: 2 callbacks suppressed [ 1067.568397][T25115] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6260'. [ 1067.766352][T25124] syzkaller0: entered promiscuous mode [ 1067.771908][T25124] syzkaller0: entered allmulticast mode [ 1067.783874][T25124] tipc: Enabling of bearer rejected, failed to enable media [ 1067.836074][T25126] syzkaller1: entered promiscuous mode [ 1067.841629][T25126] syzkaller1: entered allmulticast mode [ 1067.858291][T25128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.866976][T25128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.908372][ T28] audit: type=1400 audit(1772721596.918:300): avc: denied { mount } for pid=25129 comm="syz.8.6267" name="/" dev="autofs" ino=74759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1068.032482][T25147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.042730][T25147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.119523][T25153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25153 comm=syz.2.6277 [ 1068.133943][T25153] netlink: 'syz.2.6277': attribute type 10 has an invalid length. [ 1068.156323][T25155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.164932][T25155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.503213][T25165] process 'syz.3.6283' launched './file0' with NULL argv: empty string added [ 1068.512249][ T28] audit: type=1400 audit(1772721597.528:301): avc: denied { execute_no_trans } for pid=25164 comm="syz.3.6283" path="/577/file0" dev="tmpfs" ino=2921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1068.512260][T25165] Invalid argument reading file caps for ./file0 [ 1068.568938][T25169] tipc: Enabled bearer , priority 0 [ 1068.576097][T25169] syzkaller0: entered promiscuous mode [ 1068.581676][T25169] syzkaller0: entered allmulticast mode [ 1068.591201][T25169] tipc: Resetting bearer [ 1068.597737][T25168] tipc: Resetting bearer [ 1068.604910][T25168] tipc: Disabling bearer [ 1068.698570][T25179] netlink: 'syz.2.6289': attribute type 4 has an invalid length. [ 1068.703309][T25181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.715008][T25181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.831475][T25187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6293'. [ 1068.841866][T25187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6293'. [ 1068.900301][T25195] tipc: Enabled bearer , priority 0 [ 1068.907314][T25195] syzkaller0: entered promiscuous mode [ 1068.913117][T25195] syzkaller0: entered allmulticast mode [ 1068.924775][T25195] tipc: Resetting bearer [ 1068.934906][T25194] tipc: Resetting bearer [ 1068.944847][T25194] tipc: Disabling bearer [ 1069.087187][T25209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.097192][T25209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.112059][T25211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.120666][T25211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.281490][T25219] tipc: Enabled bearer , priority 0 [ 1069.288509][T25219] syzkaller0: entered promiscuous mode [ 1069.294144][T25219] syzkaller0: entered allmulticast mode [ 1069.303281][T25219] tipc: Resetting bearer [ 1069.310152][T25218] tipc: Resetting bearer [ 1069.317236][T25218] tipc: Disabling bearer [ 1069.553180][T25261] syzkaller0: entered allmulticast mode [ 1069.747768][T25304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.784273][T25304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.827619][T25313] syzkaller0: entered promiscuous mode [ 1069.833240][T25313] syzkaller0: entered allmulticast mode [ 1069.857525][T25313] tipc: Enabling of bearer rejected, failed to enable media [ 1069.927804][T25334] tipc: Enabled bearer , priority 0 [ 1069.935565][T25334] syzkaller0: entered promiscuous mode [ 1069.941341][T25334] syzkaller0: entered allmulticast mode [ 1069.956107][T25334] tipc: Resetting bearer [ 1069.971253][T25333] tipc: Resetting bearer [ 1069.992282][T25333] tipc: Disabling bearer [ 1070.179868][T25388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.188503][T25388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.267766][T25402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.280635][T25402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.455345][T25430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.463958][T25430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.473311][T25430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.482054][T25430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.560296][T25438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.569389][T25438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.640101][T25440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.648603][T25440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.747054][ T28] audit: type=1400 audit(1772721599.758:302): avc: denied { connect } for pid=25447 comm="syz.8.6358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1070.777379][T25450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.785976][T25450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.822442][T25454] syzkaller1: entered promiscuous mode [ 1070.827915][T25454] syzkaller1: entered allmulticast mode [ 1071.012451][T25462] netlink: 'syz.9.6365': attribute type 4 has an invalid length. [ 1071.036343][T25466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.045364][T25466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.097961][T25472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.106694][T25472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.148375][T25478] netlink: 'syz.9.6373': attribute type 2 has an invalid length. [ 1071.156121][T25478] netlink: 'syz.9.6373': attribute type 11 has an invalid length. [ 1071.164189][T25478] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6373'. [ 1071.414505][T25501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.423342][T25501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.497274][T25510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.507051][T25510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.568299][T25514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.577165][T25514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.685646][T25518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.695134][T25518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.810761][T25532] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6398'. [ 1072.085693][T25554] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6407'. [ 1072.102555][T25554] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6407'. [ 1072.124820][ T28] audit: type=1400 audit(1772721601.138:303): avc: denied { create } for pid=25555 comm="syz.3.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1072.155862][T25556] ieee802154 phy0 wpan0: encryption failed: -22 [ 1072.163932][ T28] audit: type=1400 audit(1772721601.168:304): avc: denied { write } for pid=25555 comm="syz.3.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1072.176515][T25560] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6409'. [ 1072.223612][T25538] chnl_net:caif_netlink_parms(): no params data found [ 1072.240607][T25567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.250133][T25567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.299412][T25571] netlink: 'syz.8.6414': attribute type 4 has an invalid length. [ 1072.341039][T25575] netlink: 'syz.7.6415': attribute type 39 has an invalid length. [ 1072.341991][T25538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.369526][T25538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.377810][T25538] bridge_slave_0: entered allmulticast mode [ 1072.384363][T25538] bridge_slave_0: entered promiscuous mode [ 1072.393500][T25538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.400672][T25538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.407854][T25538] bridge_slave_1: entered allmulticast mode [ 1072.414763][T25538] bridge_slave_1: entered promiscuous mode [ 1072.428754][T25580] syzkaller1: entered promiscuous mode [ 1072.436712][T25580] syzkaller1: entered allmulticast mode [ 1072.453111][T25538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.478103][T25538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.530570][T25538] team0: Port device team_slave_0 added [ 1072.571505][T25538] team0: Port device team_slave_1 added [ 1072.611789][T25538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.628604][T25538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.681666][T25538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.695689][T25538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.702919][T25538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.729185][T25538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.743403][T25591] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1072.765047][T25597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.779359][T25597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.808369][T25538] hsr_slave_0: entered promiscuous mode [ 1072.814488][T25538] hsr_slave_1: entered promiscuous mode [ 1072.820582][T25538] debugfs: 'hsr0' already exists in 'hsr' [ 1072.826297][T25538] Cannot create hsr debugfs directory [ 1072.856997][T25603] syzkaller1: entered promiscuous mode [ 1072.874517][T25603] syzkaller1: entered allmulticast mode [ 1073.386907][ T28] audit: type=1400 audit(1772721602.398:305): avc: denied { bind } for pid=25704 comm="syz.3.6439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1073.407629][ T28] audit: type=1400 audit(1772721602.398:306): avc: denied { name_bind } for pid=25704 comm="syz.3.6439" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1073.429233][ T28] audit: type=1400 audit(1772721602.398:307): avc: denied { node_bind } for pid=25704 comm="syz.3.6439" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1073.455008][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.502618][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.542816][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.574722][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.649482][ T12] bridge_slave_1: left allmulticast mode [ 1073.657381][ T12] bridge_slave_1: left promiscuous mode [ 1073.663250][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.672169][ T12] bridge_slave_0: left allmulticast mode [ 1073.677916][ T12] bridge_slave_0: left promiscuous mode [ 1073.684645][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.715010][T25609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1073.758447][T25760] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.6440' sets config #8 [ 1073.841330][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.854664][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.873285][ T12] bond0 (unregistering): Released all slaves [ 1073.883393][T25538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1073.895108][T25538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.914815][T25538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.936762][T25538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1073.961569][ T12] tipc: Left network mode [ 1074.047359][ T12] hsr_slave_0: left promiscuous mode [ 1074.085285][T25806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.100151][T25806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.131546][ T12] hsr_slave_1: left promiscuous mode [ 1074.146530][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.164051][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.180095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.197821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.217450][T25818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1074.235414][ T12] veth1_macvtap: left promiscuous mode [ 1074.247431][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6455'. [ 1074.248404][ T12] veth0_macvtap: left promiscuous mode [ 1074.264760][ T12] veth1_vlan: left promiscuous mode [ 1074.270196][ T12] veth0_vlan: left promiscuous mode [ 1074.404497][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1074.415723][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1074.456531][T25538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.464356][T25835] netlink: 'syz.2.6459': attribute type 4 has an invalid length. [ 1074.484070][T25538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.500781][T25857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.502911][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.510756][T25857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.516250][T12239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.542382][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.549751][T12239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.551218][T25860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.567144][T25860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.630336][T25871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.660769][T25871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.666664][T25538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.774472][T25538] veth0_vlan: entered promiscuous mode [ 1074.790800][T25538] veth1_vlan: entered promiscuous mode [ 1074.820037][T25538] veth0_macvtap: entered promiscuous mode [ 1074.831140][T25538] veth1_macvtap: entered promiscuous mode [ 1074.833099][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6467'. [ 1074.855073][T25538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.868468][T25538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.888983][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.898836][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.911793][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.937973][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.017486][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6471'. [ 1075.229235][T18340] syz_tun (unregistering): left allmulticast mode [ 1075.241038][T25956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.251753][T25956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.275460][T25948] syzkaller0: entered promiscuous mode [ 1075.282926][T25948] syzkaller0: entered allmulticast mode [ 1075.383096][ T28] audit: type=1400 audit(1772721604.388:308): avc: denied { checkpoint_restore } for pid=25981 comm="syz.1.6484" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1075.485303][T25996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.498771][T25996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.525066][T26000] ieee802154 phy0 wpan0: encryption failed: -22 [ 1075.591525][T25951] chnl_net:caif_netlink_parms(): no params data found [ 1075.663042][T25951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.670440][T25951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.677700][T25951] bridge_slave_0: entered allmulticast mode [ 1075.684329][T25951] bridge_slave_0: entered promiscuous mode [ 1075.691714][T26020] syzkaller0: entered promiscuous mode [ 1075.697197][T26020] syzkaller0: entered allmulticast mode [ 1075.705740][T26019] syzkaller0: entered promiscuous mode [ 1075.711266][T26019] syzkaller0: entered allmulticast mode [ 1075.717972][T25951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.725341][T25951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.732754][T25951] bridge_slave_1: entered allmulticast mode [ 1075.739266][T25951] bridge_slave_1: entered promiscuous mode [ 1075.760904][T25951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.786627][T25951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.839034][T26030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.848515][T25951] team0: Port device team_slave_0 added [ 1075.854288][T26030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.860676][T25951] team0: Port device team_slave_1 added [ 1075.892528][T26035] ucma_write: process 254 (syz.2.6503) changed security contexts after opening file descriptor, this is not allowed. [ 1075.906786][T25951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.914126][T25951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.941779][T25951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.953252][T25951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.960760][T25951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.990507][T25951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.022893][T25951] hsr_slave_0: entered promiscuous mode [ 1076.028970][T25951] hsr_slave_1: entered promiscuous mode [ 1076.035303][T25951] debugfs: 'hsr0' already exists in 'hsr' [ 1076.052366][T25951] Cannot create hsr debugfs directory [ 1076.118913][T26047] syzkaller0: entered promiscuous mode [ 1076.130313][T26047] syzkaller0: entered allmulticast mode [ 1076.175034][T26053] syzkaller0: entered promiscuous mode [ 1076.180995][T26053] syzkaller0: entered allmulticast mode [ 1076.220448][T25951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.263508][T26058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.287624][T26058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.340056][T25951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.390710][T25951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.460638][T25951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.581491][T25951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1076.595588][T25951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1076.615845][T25951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1076.633599][T25951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1076.701632][T25951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.714067][T25951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.737382][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.744606][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.766545][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.773700][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.818198][T25951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1076.934234][T25951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.098316][T25951] veth0_vlan: entered promiscuous mode [ 1077.119770][T25951] veth1_vlan: entered promiscuous mode [ 1077.137328][T26132] syzkaller0: entered promiscuous mode [ 1077.143073][T26132] syzkaller0: entered allmulticast mode [ 1077.176416][T25951] veth0_macvtap: entered promiscuous mode [ 1077.190153][T25951] veth1_macvtap: entered promiscuous mode [ 1077.208631][T25951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.221160][T25951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.233617][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.251278][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.265600][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.277259][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.638462][ T28] audit: type=1400 audit(1772721606.648:309): avc: denied { connect } for pid=26143 comm="syz.3.6541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1077.687062][T26150] netlink: 'syz.2.6545': attribute type 39 has an invalid length. [ 1077.942007][T26178] : port 1(ip6gretap0) entered blocking state [ 1077.948436][T26178] : port 1(ip6gretap0) entered disabled state [ 1077.955112][T26178] ip6gretap0: entered allmulticast mode [ 1077.961933][T26178] ip6gretap0: entered promiscuous mode [ 1077.974222][T26178] ip6gretap0: left allmulticast mode [ 1077.979643][T26178] ip6gretap0: left promiscuous mode [ 1077.985121][T26178] : port 1(ip6gretap0) entered disabled state [ 1078.326511][T26203] veth0_vlan: entered allmulticast mode [ 1078.358464][T26208] netlink: 'syz.2.6569': attribute type 10 has an invalid length. [ 1078.550844][T26226] netlink: 'syz.8.6577': attribute type 4 has an invalid length. [ 1079.017690][T26256] syzkaller0: entered promiscuous mode [ 1079.030299][T26256] syzkaller0: entered allmulticast mode [ 1079.062689][T26256] syzkaller0: create flow: hash 2940357640 index 2 [ 1079.081244][T26255] syzkaller0: delete flow: hash 2940357640 index 2 [ 1079.420221][T26265] netlink: 'syz.7.6592': attribute type 4 has an invalid length. [ 1079.625089][T26284] syzkaller0: entered promiscuous mode [ 1079.650469][T26284] syzkaller0: entered allmulticast mode [ 1079.839191][T26297] netlink: 'syz.2.6605': attribute type 4 has an invalid length. [ 1080.043429][T26315] syzkaller0: entered promiscuous mode [ 1080.049182][T26315] syzkaller0: entered allmulticast mode [ 1080.902490][T26338] syzkaller0: entered promiscuous mode [ 1080.908066][T26338] syzkaller0: entered allmulticast mode [ 1081.023155][T26350] syzkaller0: entered promiscuous mode [ 1081.039839][T26350] syzkaller0: entered allmulticast mode [ 1081.562493][T26378] netlink: 'syz.8.6639': attribute type 4 has an invalid length. [ 1081.787548][T26386] syzkaller0: entered promiscuous mode [ 1081.793225][T26386] syzkaller0: entered allmulticast mode [ 1081.977377][T26409] netlink: 'syz.8.6651': attribute type 4 has an invalid length. [ 1082.420089][T26442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1082.635344][T26465] netlink: 'syz.7.6676': attribute type 39 has an invalid length. [ 1083.123103][T26495] syzkaller0: entered promiscuous mode [ 1083.128681][T26495] syzkaller0: entered allmulticast mode [ 1083.271072][T26503] syzkaller1: entered promiscuous mode [ 1083.276588][T26503] syzkaller1: entered allmulticast mode [ 1083.450141][T26514] syzkaller0: entered promiscuous mode [ 1083.456191][T26514] syzkaller0: entered allmulticast mode [ 1083.588450][T26521] syzkaller0: entered promiscuous mode [ 1083.594287][T26521] syzkaller0: entered allmulticast mode [ 1083.619330][T26527] syzkaller0: entered promiscuous mode [ 1083.625620][T26527] syzkaller0: entered allmulticast mode [ 1083.708022][T26533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26533 comm=syz.2.6707 [ 1083.722011][T26533] netlink: 'syz.2.6707': attribute type 10 has an invalid length. [ 1083.804222][T26546] ieee802154 phy0 wpan0: encryption failed: -22 [ 1083.878854][T26557] syzkaller0: entered promiscuous mode [ 1083.884559][T26557] syzkaller0: entered allmulticast mode [ 1083.900868][T26558] syzkaller1: entered promiscuous mode [ 1083.909710][T26558] syzkaller1: entered allmulticast mode [ 1083.954083][T26564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26564 comm=syz.8.6722 [ 1083.971106][T26564] netlink: 'syz.8.6722': attribute type 10 has an invalid length. [ 1084.025009][ T28] audit: type=1326 audit(1772721613.038:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.048493][ T28] audit: type=1326 audit(1772721613.038:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.072697][ T28] audit: type=1326 audit(1772721613.048:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.099211][ T28] audit: type=1326 audit(1772721613.048:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.123477][ T28] audit: type=1326 audit(1772721613.048:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.147202][ T28] audit: type=1326 audit(1772721613.048:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.171405][ T28] audit: type=1326 audit(1772721613.048:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.208637][ T28] audit: type=1326 audit(1772721613.048:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26569 comm="syz.2.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f17f79fc799 code=0x7ffc0000 [ 1084.330873][T26585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26585 comm=syz.7.6731 [ 1084.411935][T26592] syzkaller1: entered promiscuous mode [ 1084.418372][T26592] syzkaller1: entered allmulticast mode [ 1084.443186][T26593] syzkaller0: entered promiscuous mode [ 1084.448934][T26593] syzkaller0: entered allmulticast mode [ 1084.707149][T26615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26615 comm=syz.7.6744 [ 1084.782425][T26626] syzkaller1: entered promiscuous mode [ 1084.788014][T26626] syzkaller1: entered allmulticast mode [ 1085.209331][T26691] wg2: entered promiscuous mode [ 1085.215703][T26691] wg2: entered allmulticast mode [ 1086.036216][ T28] audit: type=1400 audit(1772721615.048:318): avc: denied { setopt } for pid=26776 comm="syz.2.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1086.120897][T26784] mmap: syz.2.6780 (26784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1086.912326][ T28] audit: type=1400 audit(1772721615.928:319): avc: denied { lock } for pid=26877 comm="syz.7.6809" path="socket:[80004]" dev="sockfs" ino=80004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1087.330230][T26920] netlink: 'syz.1.6826': attribute type 39 has an invalid length. [ 1088.443689][T26981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26981 comm=syz.8.6849 [ 1088.457944][T26981] netlink: 'syz.8.6849': attribute type 10 has an invalid length. [ 1088.983714][T27012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27012 comm=syz.8.6862 [ 1089.021954][T27012] netlink: 'syz.8.6862': attribute type 10 has an invalid length. [ 1091.012646][T27093] syzkaller1: entered promiscuous mode [ 1091.018132][T27093] syzkaller1: entered allmulticast mode [ 1091.916587][T27157] syzkaller1: entered promiscuous mode [ 1091.928177][T27159] netlink: 'syz.3.6927': attribute type 39 has an invalid length. [ 1091.936091][T27157] syzkaller1: entered allmulticast mode [ 1092.581584][T27191] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6941'. [ 1093.154530][T27231] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6958'. [ 1093.270116][T27239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27239 comm=syz.8.6962 [ 1093.283978][T27239] netlink: 'syz.8.6962': attribute type 10 has an invalid length. [ 1093.407783][T27258] netlink: 'syz.8.6971': attribute type 39 has an invalid length. [ 1093.659964][T27291] syzkaller0: entered promiscuous mode [ 1093.665663][T27291] syzkaller0: entered allmulticast mode [ 1093.946165][T27328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27328 comm=syz.1.7003 [ 1093.961555][T27330] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1093.961648][T27328] netlink: 'syz.1.7003': attribute type 10 has an invalid length. [ 1093.991706][T27328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.002393][T27328] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1094.016086][T27328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.023776][T27328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.032154][T27328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.041087][T27328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.055764][T27328] bond0: (slave batadv0): Releasing backup interface [ 1094.706194][T27378] syzkaller0: entered promiscuous mode [ 1094.717888][T27378] syzkaller0: entered allmulticast mode [ 1094.734900][ T28] audit: type=1400 audit(1772721623.738:320): avc: denied { write } for pid=27380 comm="syz.3.7028" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1094.943716][T27398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27398 comm=syz.8.7036 [ 1094.977279][T27398] netlink: 'syz.8.7036': attribute type 10 has an invalid length. [ 1095.307613][T27430] syzkaller1: entered promiscuous mode [ 1095.313188][T27430] syzkaller1: entered allmulticast mode [ 1097.647741][ T28] audit: type=1400 audit(1772721626.648:321): avc: denied { write } for pid=27589 comm="syz.3.7116" lport=49625 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1097.689582][ T28] audit: type=1400 audit(1772721626.648:322): avc: denied { getopt } for pid=27589 comm="syz.3.7116" lport=49625 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1098.240263][T27629] netlink: 'syz.8.7134': attribute type 39 has an invalid length. [ 1098.267614][T27631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27631 comm=syz.8.7135 [ 1098.281315][T27631] netlink: 'syz.8.7135': attribute type 10 has an invalid length. [ 1099.162146][T27659] syzkaller1: entered promiscuous mode [ 1099.170819][T27659] syzkaller1: entered allmulticast mode [ 1099.304148][T27671] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7153'. [ 1099.896705][T27753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27753 comm=syz.3.7172 [ 1099.927436][T27753] netlink: 'syz.3.7172': attribute type 10 has an invalid length. [ 1099.963586][T27753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.996345][T27753] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1100.014281][T27765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.042092][T27765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.067629][T27765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.091774][T27765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.112312][T27765] bond0: (slave batadv0): Releasing backup interface [ 1100.347045][T27820] syzkaller0: entered promiscuous mode [ 1100.365805][T27820] syzkaller0: entered allmulticast mode [ 1100.455226][T27830] syzkaller1: entered promiscuous mode [ 1100.477936][T27830] syzkaller1: entered allmulticast mode [ 1100.553299][T27838] Ô: renamed from team_slave_1 (while UP) [ 1101.127507][T27887] syzkaller0: entered promiscuous mode [ 1101.149380][T27887] syzkaller0: entered allmulticast mode [ 1101.187528][T27890] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7212'. [ 1101.326172][T27897] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.412947][T27934] syzkaller1: entered promiscuous mode [ 1102.428612][T27934] syzkaller1: entered allmulticast mode [ 1104.798941][T27951] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7239'. [ 1104.808193][T27953] netlink: 966 bytes leftover after parsing attributes in process `syz.8.7240'. [ 1104.853206][T27958] netlink: 'syz.3.7241': attribute type 39 has an invalid length. [ 1104.853268][T27961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7243'. [ 1104.906722][T27961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27961 comm=syz.2.7243 [ 1104.923067][T27961] netlink: 'syz.2.7243': attribute type 10 has an invalid length. [ 1104.964648][T27973] syzkaller1: entered promiscuous mode [ 1104.970441][T27973] syzkaller1: entered allmulticast mode [ 1105.103423][T27989] netlink: 'syz.1.7256': attribute type 39 has an invalid length. [ 1105.146414][T27995] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7260'. [ 1105.289373][T28019] netlink: 'syz.1.7270': attribute type 39 has an invalid length. [ 1105.408249][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 1105.418150][T28038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7280'. [ 1105.498486][T28050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28050 comm=syz.1.7280 [ 1105.525102][T28038] netlink: 'syz.1.7280': attribute type 10 has an invalid length. [ 1105.563045][T28054] syzkaller1: entered promiscuous mode [ 1105.568546][T28054] syzkaller1: entered allmulticast mode [ 1105.714537][T28072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1105.809762][T28082] netlink: 'syz.7.7299': attribute type 39 has an invalid length. [ 1105.935088][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1106.180547][T28138] syzkaller1: entered promiscuous mode [ 1106.186088][T28138] syzkaller1: entered allmulticast mode [ 1106.242728][T28149] netlink: 'syz.7.7325': attribute type 4 has an invalid length. [ 1107.062784][T28191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7340'. [ 1107.516623][T28223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28223 comm=syz.2.7355 [ 1107.615233][T28232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28232 comm=syz.2.7360 [ 1107.629834][T28232] netlink: 'syz.2.7360': attribute type 10 has an invalid length. [ 1107.741711][T28244] netlink: 'syz.3.7366': attribute type 39 has an invalid length. [ 1107.961403][T28273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28273 comm=syz.2.7372 [ 1107.975193][T28273] netlink: 'syz.2.7372': attribute type 10 has an invalid length. [ 1108.303830][T28308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28308 comm=syz.7.7391 [ 1109.000839][T28362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7415'. [ 1109.145724][ T28] audit: type=1400 audit(1772721638.158:323): avc: denied { unmount } for pid=25538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1109.521417][T28415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28415 comm=syz.3.7432 [ 1109.635787][ T28] audit: type=1400 audit(1772721638.648:324): avc: denied { ioctl } for pid=28423 comm="syz.3.7433" path="socket:[86040]" dev="sockfs" ino=86040 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1109.789027][T28427] delete_channel: no stack [ 1109.832886][T28446] __nla_validate_parse: 6 callbacks suppressed [ 1109.832899][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7437'. [ 1109.863127][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7437'. [ 1110.032471][T28475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28475 comm=syz.3.7443 [ 1110.280556][T28524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1110.317440][T28524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1110.406015][T28548] validate_nla: 2 callbacks suppressed [ 1110.406102][T28548] netlink: 'syz.8.7456': attribute type 39 has an invalid length. [ 1110.570722][T28565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28565 comm=syz.2.7460 [ 1110.995532][T28599] netlink: 'syz.1.7476': attribute type 39 has an invalid length. [ 1111.041991][T28603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28603 comm=syz.8.7478 [ 1111.099827][T28606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7480'. [ 1111.177729][T28617] xt_l2tp: unknown flags: 7f [ 1111.708070][T28671] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1111.767115][T28679] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7514'. [ 1111.982643][T28709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7527'. [ 1112.115448][T28715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28715 comm=syz.2.7530 [ 1112.148519][T28715] netlink: 'syz.2.7530': attribute type 10 has an invalid length. [ 1112.402931][T28741] netlink: 'syz.1.7543': attribute type 39 has an invalid length. [ 1112.458480][T28749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28749 comm=syz.1.7547 [ 1112.472197][T28749] netlink: 'syz.1.7547': attribute type 10 has an invalid length. [ 1112.549598][ T28] audit: type=1400 audit(1772721641.518:325): avc: denied { setopt } for pid=28750 comm="syz.7.7548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1112.784938][T28771] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7556'. [ 1112.873893][T28793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1113.354567][T28898] netlink: 'syz.8.7566': attribute type 39 has an invalid length. [ 1113.381336][T28904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28904 comm=syz.8.7567 [ 1113.395917][T28904] netlink: 'syz.8.7567': attribute type 10 has an invalid length. [ 1113.557806][T28933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28933 comm=syz.8.7576 [ 1114.202890][T29052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29052 comm=syz.8.7603 [ 1114.239691][T29052] netlink: 'syz.8.7603': attribute type 10 has an invalid length. [ 1114.373566][T29072] netlink: 'syz.3.7608': attribute type 10 has an invalid length. [ 1114.392161][T29072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.404618][T29072] team0: Port device bond0 added [ 1114.410561][T29081] bridge_slave_1: default FDB implementation only supports local addresses [ 1115.312970][T29187] __nla_validate_parse: 6 callbacks suppressed [ 1115.313005][T29187] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7643'. [ 1115.329038][T29103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.388859][T29194] netlink: 'syz.2.7646': attribute type 39 has an invalid length. [ 1115.913494][T29249] netlink: 'syz.8.7667': attribute type 39 has an invalid length. [ 1116.281367][ T28] audit: type=1400 audit(1772721645.298:326): avc: denied { remount } for pid=29254 comm="syz.8.7670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1116.301591][T29255] cgroup: Unknown subsys name 'hash' [ 1116.414323][T29276] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1116.446510][T29216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1116.689095][T29314] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1116.777288][T29324] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7701'. [ 1117.275468][T29346] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7710'. [ 1117.285341][T29347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7711'. [ 1117.306570][T29347] openvswitch: netlink: Flow key attr not present in new flow. [ 1117.329340][T29349] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7709'. [ 1117.351974][T29349] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7709'. [ 1117.379020][T29353] netlink: 112 bytes leftover after parsing attributes in process `syz.8.7713'. [ 1117.398461][T29349] bridge_slave_1: default FDB implementation only supports local addresses [ 1117.438060][T29356] netlink: 168 bytes leftover after parsing attributes in process `syz.8.7714'. [ 1118.371645][T29406] bridge_slave_1: default FDB implementation only supports local addresses [ 1119.454371][T29460] bridge_slave_1: default FDB implementation only supports local addresses [ 1121.994768][T29494] __nla_validate_parse: 6 callbacks suppressed [ 1121.994787][T29494] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.7772'. [ 1122.010611][T29494] bridge_slave_1: default FDB implementation only supports local addresses [ 1122.261266][T29512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7781'. [ 1122.286001][T29514] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7773'. [ 1122.496496][T29535] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7791'. [ 1122.529623][T29535] bridge_slave_1: default FDB implementation only supports local addresses [ 1122.794936][T29561] netlink: 'syz.3.7803': attribute type 1 has an invalid length. [ 1122.802862][T29561] netlink: 64475 bytes leftover after parsing attributes in process `syz.3.7803'. [ 1123.670507][ T28] audit: type=1400 audit(1772721652.688:327): avc: denied { unmount } for pid=25538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1123.804755][ T28] audit: type=1400 audit(1772721652.818:328): avc: denied { allowed } for pid=29628 comm="syz.8.7831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1124.393376][ T28] audit: type=1400 audit(1772721653.408:329): avc: denied { create } for pid=29660 comm="syz.1.7836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1124.449562][ T28] audit: type=1400 audit(1772721653.458:330): avc: denied { write } for pid=29660 comm="syz.1.7836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1124.912956][T29638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1125.501569][T29788] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7865'. [ 1125.512611][T29782] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1125.592158][T29798] netlink: 112 bytes leftover after parsing attributes in process `syz.8.7870'. [ 1125.614099][T29800] netlink: 'syz.2.7871': attribute type 1 has an invalid length. [ 1125.622200][T29800] netlink: 64475 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1125.754129][T29820] macsec0: entered promiscuous mode [ 1125.770169][T29820] macsec0: entered allmulticast mode [ 1125.781524][T29823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7881'. [ 1126.124779][ T28] audit: type=1400 audit(1772721655.128:331): avc: denied { setopt } for pid=29846 comm="syz.7.7892" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1126.206383][ T28] audit: type=1400 audit(1772721655.158:332): avc: denied { read } for pid=29846 comm="syz.7.7892" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1126.571563][T29911] bridge_slave_1: default FDB implementation only supports local addresses [ 1126.826809][T29959] bridge_slave_1: default FDB implementation only supports local addresses [ 1127.011775][T29993] sit0: entered allmulticast mode [ 1127.198325][T30019] netlink: 'syz.8.7934': attribute type 10 has an invalid length. [ 1127.219402][T30019] __nla_validate_parse: 5 callbacks suppressed [ 1127.219438][T30019] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7934'. [ 1127.238978][T30022] netlink: 'syz.1.7935': attribute type 39 has an invalid length. [ 1127.267193][T30019] batadv_slave_1: entered promiscuous mode [ 1127.299806][T30019] bridge0: port 3(batadv_slave_1) entered blocking state [ 1127.307051][T30019] bridge0: port 3(batadv_slave_1) entered disabled state [ 1127.316469][T30019] batadv_slave_1: entered allmulticast mode [ 1127.350240][T30019] bridge0: port 3(batadv_slave_1) entered blocking state [ 1127.357412][T30019] bridge0: port 3(batadv_slave_1) entered forwarding state [ 1127.412172][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7942'. [ 1127.578419][T30046] syzkaller0: entered promiscuous mode [ 1127.589577][T30046] syzkaller0: entered allmulticast mode [ 1128.253268][T30091] sit0: entered allmulticast mode [ 1128.315955][T30099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=30099 comm=syz.2.7963 [ 1128.359134][T30099] netlink: 'syz.2.7963': attribute type 10 has an invalid length. [ 1128.455819][T30058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.547400][T30112] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7969'. [ 1128.592989][T30124] netlink: 'syz.1.7974': attribute type 4 has an invalid length. [ 1129.076516][T30195] sit0: entered allmulticast mode [ 1129.673523][T30302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=30302 comm=syz.7.8000 [ 1129.689288][T30305] netlink: 'syz.2.7995': attribute type 10 has an invalid length. [ 1129.712844][T30305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.720072][T30305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.746324][T30302] netlink: 'syz.7.8000': attribute type 10 has an invalid length. [ 1129.775656][T30265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7995'. [ 1129.796262][T30305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.803420][T30305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.810707][T30305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.817777][T30305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.822869][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7995'. [ 1129.855031][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7995'. [ 1129.865265][T30305] team0: Port device bridge0 added [ 1129.877186][T30311] netlink: 1028 bytes leftover after parsing attributes in process `syz.8.8003'. [ 1129.888122][T30311] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1129.904234][T30265] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7995'. [ 1130.172803][T30345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8018'. [ 1130.218597][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8021'. [ 1130.299265][ T28] audit: type=1400 audit(1772721659.308:333): avc: denied { read } for pid=30361 comm="syz.1.8026" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1130.324442][ T28] audit: type=1400 audit(1772721659.308:334): avc: denied { open } for pid=30361 comm="syz.1.8026" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1130.550428][T30389] netlink: 'syz.8.8039': attribute type 1 has an invalid length. [ 1130.813111][T30419] sit0: entered allmulticast mode [ 1130.880308][T30423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=30423 comm=syz.8.8055 [ 1130.893990][T30423] netlink: 'syz.8.8055': attribute type 10 has an invalid length. [ 1131.145161][T30453] syzkaller0: entered promiscuous mode [ 1131.150759][T30453] syzkaller0: entered allmulticast mode [ 1131.295773][T30481] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 1131.583274][T30507] syzkaller0: entered promiscuous mode [ 1131.589368][T30507] syzkaller0: entered allmulticast mode [ 1131.722380][T30526] netlink: 'syz.2.8103': attribute type 4 has an invalid length. [ 1131.858374][ T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.932527][ T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.982859][T30548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.010537][T30548] bridge_slave_0 (unregistering): left allmulticast mode [ 1132.018139][T30548] bridge_slave_0 (unregistering): left promiscuous mode [ 1132.026146][T30548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.053146][ T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.106918][ T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.158820][T30530] chnl_net:caif_netlink_parms(): no params data found [ 1132.228366][T30530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.235559][T30530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.241733][T30576] netlink: 'syz.3.8122': attribute type 2 has an invalid length. [ 1132.243646][T30530] bridge_slave_0: entered allmulticast mode [ 1132.257575][T30530] bridge_slave_0: entered promiscuous mode [ 1132.264883][T30530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.272237][T30530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.279731][T30530] bridge_slave_1: entered allmulticast mode [ 1132.286789][T30530] bridge_slave_1: entered promiscuous mode [ 1132.287254][T30580] __nla_validate_parse: 13 callbacks suppressed [ 1132.287289][T30580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8124'. [ 1132.308364][T30576] netlink: 512 bytes leftover after parsing attributes in process `syz.3.8122'. [ 1132.331160][T30530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.342553][T30530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.381841][T30530] team0: Port device team_slave_0 added [ 1132.398614][ T28] audit: type=1400 audit(1772721661.408:335): avc: denied { mounton } for pid=30587 comm="syz.2.8126" path="/485/file0" dev="proc" ino=91520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 1132.423092][T30530] team0: Port device team_slave_1 added [ 1132.440651][T30530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.447993][T30530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.484963][T30530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.502845][T30530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.521138][T30530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.569998][T30530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.591244][T30608] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8133'. [ 1132.607487][ T40] batadv_slave_1: left allmulticast mode [ 1132.613332][ T40] bridge0: port 3(batadv_slave_1) entered disabled state [ 1132.625297][T30613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1132.634802][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8135'. [ 1132.643985][ T40] bridge_slave_1: left allmulticast mode [ 1132.649689][ T40] bridge_slave_1: left promiscuous mode [ 1132.655528][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.670378][ T40] bridge_slave_0: left allmulticast mode [ 1132.676052][ T40] bridge_slave_0: left promiscuous mode [ 1132.687396][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.843529][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.854184][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.864673][ T40] bond0 (unregistering): Released all slaves [ 1132.898188][T30530] hsr_slave_0: entered promiscuous mode [ 1132.904469][T30530] hsr_slave_1: entered promiscuous mode [ 1132.910854][T30530] debugfs: 'hsr0' already exists in 'hsr' [ 1132.916689][T30530] Cannot create hsr debugfs directory [ 1132.934666][ T40] tipc: Left network mode [ 1132.987489][ T40] hsr_slave_0: left promiscuous mode [ 1133.003002][ T40] hsr_slave_1: left promiscuous mode [ 1133.014392][ T40] veth0_macvtap: left promiscuous mode [ 1133.020485][ T40] veth1_vlan: left promiscuous mode [ 1133.025970][ T40] veth0_vlan: left promiscuous mode [ 1133.152329][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1133.164879][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1133.441291][T30763] netlink: 'syz.7.8140': attribute type 1 has an invalid length. [ 1133.450642][T30763] netlink: 'syz.7.8140': attribute type 8 has an invalid length. [ 1133.722225][T30828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8154'. [ 1133.921479][T30530] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1133.938722][T30530] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1133.940593][T30855] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8158'. [ 1133.966141][T30530] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1133.983177][T30530] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.991395][T30860] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8161'. [ 1134.059929][T30875] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54975 sclass=netlink_xfrm_socket pid=30875 comm=syz.3.8165 [ 1134.089081][T30530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.102362][T30530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.120986][T30530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1134.131507][T30530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.148627][ T2225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.155704][ T2225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.177627][ T2225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.184757][ T2225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.211842][ T28] audit: type=1400 audit(1772721663.228:336): avc: denied { ioctl } for pid=30874 comm="syz.3.8165" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1134.295414][T30530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.438444][T30530] veth0_vlan: entered promiscuous mode [ 1134.449280][T30530] veth1_vlan: entered promiscuous mode [ 1134.467281][T30530] veth0_macvtap: entered promiscuous mode [ 1134.474868][T30530] veth1_macvtap: entered promiscuous mode [ 1134.486531][T30530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.498725][T30530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.510176][T26732] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.519095][T26732] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.539903][T26732] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.548751][T30926] netlink: 112 bytes leftover after parsing attributes in process `syz.7.8180'. [ 1134.552726][T26732] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.708326][T30955] netlink: 112 bytes leftover after parsing attributes in process `syz.8.8193'. [ 1134.926771][T30998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=30998 comm=syz.7.8213 [ 1134.955601][T30998] netlink: 'syz.7.8213': attribute type 10 has an invalid length. [ 1135.275631][T31010] chnl_net:caif_netlink_parms(): no params data found [ 1135.327825][T31010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.334993][T31010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.342697][T31010] bridge_slave_0: entered allmulticast mode [ 1135.349264][T31010] bridge_slave_0: entered promiscuous mode [ 1135.356949][T31010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.370647][T31010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.384011][T31010] bridge_slave_1: entered allmulticast mode [ 1135.396847][T31010] bridge_slave_1: entered promiscuous mode [ 1135.432784][T31010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.455087][T31010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.493735][T31010] team0: Port device team_slave_0 added [ 1135.503861][T31010] team0: Port device team_slave_1 added [ 1135.524281][T31010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.533618][T31010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.560567][T31010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.584634][T31010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.591990][T31010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.619646][T31010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.678911][T31010] hsr_slave_0: entered promiscuous mode [ 1135.734565][T31010] hsr_slave_1: entered promiscuous mode [ 1135.741231][T31010] debugfs: 'hsr0' already exists in 'hsr' [ 1135.746989][T31010] Cannot create hsr debugfs directory [ 1135.876076][T31010] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.002150][T31010] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.083997][T31010] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.128002][T31083] delete_channel: no stack [ 1136.184588][T31010] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.262821][T31010] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1136.281754][T31010] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1136.298487][T31010] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1136.318985][T31010] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1136.394648][T31010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.408737][T31010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.420767][T26732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.427856][T26732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.449400][T31010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1136.460770][T31010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.474939][T26732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.482082][T26732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.538587][T31137] netlink: 'syz.1.8264': attribute type 4 has an invalid length. [ 1136.562167][T31010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.714123][T31010] veth0_vlan: entered promiscuous mode [ 1136.724955][T31010] veth1_vlan: entered promiscuous mode [ 1136.746811][T31010] veth0_macvtap: entered promiscuous mode [ 1136.768915][T31010] veth1_macvtap: entered promiscuous mode [ 1136.783945][T31010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.799478][T31010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.815522][T14150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.833478][T14150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.847427][T14150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.863323][T14150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.892611][T31164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31164 comm=syz.8.8270 [ 1136.914973][T31164] netlink: 'syz.8.8270': attribute type 10 has an invalid length. [ 1136.927166][ T28] audit: type=1400 audit(1772721665.938:337): avc: denied { ioctl } for pid=31165 comm="syz.7.8217" path="socket:[94546]" dev="sockfs" ino=94546 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1136.932933][T31164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.962576][T31164] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1136.972327][T31167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.980105][T31167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.987981][T31167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.995544][T31167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.018987][T31167] bond0: (slave batadv0): Releasing backup interface [ 1138.016494][T31213] __nla_validate_parse: 10 callbacks suppressed [ 1138.016596][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1138.603684][T31250] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.8310'. [ 1138.708977][T31258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8313'. [ 1138.948439][T31285] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54975 sclass=netlink_xfrm_socket pid=31285 comm=syz.7.8321 [ 1139.825075][T31403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31403 comm=syz.1.8329 [ 1139.846786][T31403] netlink: 'syz.1.8329': attribute type 10 has an invalid length. [ 1139.951394][T31408] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8331'. [ 1139.969534][ T28] audit: type=1400 audit(1772721668.958:338): avc: denied { ioctl } for pid=31407 comm="syz.1.8331" path="socket:[94844]" dev="sockfs" ino=94844 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1140.271045][T31417] IPv6: Can't replace route, no match found [ 1140.278731][T31417] netlink: 'syz.3.8335': attribute type 6 has an invalid length. [ 1140.381171][T31413] syzkaller0: entered promiscuous mode [ 1140.386684][T31413] syzkaller0: entered allmulticast mode [ 1140.491892][T31432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31432 comm=syz.3.8341 [ 1140.502278][T31438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8344'. [ 1140.505599][T31432] netlink: 'syz.3.8341': attribute type 10 has an invalid length. [ 1140.691262][T31450] netlink: 'syz.3.8349': attribute type 4 has an invalid length. [ 1140.891345][T31469] netlink: 'syz.7.8357': attribute type 16 has an invalid length. [ 1140.899263][T31469] netlink: 'syz.7.8357': attribute type 17 has an invalid length. [ 1140.909878][T31469] netlink: 'syz.7.8357': attribute type 27 has an invalid length. [ 1140.931252][T31469] IPv6: Can't replace route, no match found [ 1141.078085][T31500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1141.098916][T31500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1141.193602][T31516] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8374'. [ 1141.487732][T31566] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8385'. [ 1141.666421][T31591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31591 comm=syz.8.8392 [ 1141.688520][T31591] netlink: 'syz.8.8392': attribute type 10 has an invalid length. [ 1141.836288][T31625] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8400'. [ 1142.091683][T31673] sit0: entered allmulticast mode [ 1142.769846][T31792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31792 comm=syz.2.8437 [ 1142.784351][T31792] netlink: 'syz.2.8437': attribute type 10 has an invalid length. [ 1143.030411][T31845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31845 comm=syz.2.8451 [ 1143.044603][T31845] netlink: 'syz.2.8451': attribute type 10 has an invalid length. [ 1143.077139][T31849] __nla_validate_parse: 8 callbacks suppressed [ 1143.077220][T31849] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8455'. [ 1143.117588][T31857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=31857 comm=syz.1.8459 [ 1143.139664][T31862] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8461'. [ 1143.152751][T31862] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8461'. [ 1143.288461][T31877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8468'. [ 1143.312742][T31880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31880 comm=syz.1.8467 [ 1143.403392][T31890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8474'. [ 1143.668603][T31927] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8490'. [ 1143.727312][T31936] IPv6: Can't replace route, no match found [ 1143.728032][T31937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8495'. [ 1144.013609][T31957] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8504'. [ 1144.196383][T31973] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8512'. [ 1144.220491][T31971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=31971 comm=syz.8.8511 [ 1144.255260][T31980] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8514'. [ 1145.323370][T32132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=32132 comm=syz.1.8555 [ 1146.090547][T32242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=32242 comm=syz.8.8601 [ 1146.136014][T32242] validate_nla: 4 callbacks suppressed [ 1146.136047][T32242] netlink: 'syz.8.8601': attribute type 10 has an invalid length. [ 1147.067086][T32367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=32367 comm=syz.3.8633 [ 1147.080987][T32367] netlink: 'syz.3.8633': attribute type 10 has an invalid length. [ 1148.113869][T32485] syzkaller0: entered promiscuous mode [ 1148.119427][T32485] syzkaller0: entered allmulticast mode [ 1148.125466][T32504] __nla_validate_parse: 17 callbacks suppressed [ 1148.125478][T32504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8697'. [ 1148.247100][T32520] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8705'. [ 1148.265859][T32520] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8705'. [ 1148.309410][T32528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8709'. [ 1148.375674][T32540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=32540 comm=syz.2.8715 [ 1148.392288][T32540] netlink: 'syz.2.8715': attribute type 10 has an invalid length. [ 1148.431824][T32552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8721'. [ 1148.497433][T32562] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8725'. [ 1148.741908][T32595] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8737'. [ 1148.821806][T32597] syzkaller0: entered promiscuous mode [ 1148.827477][T32597] syzkaller0: entered allmulticast mode [ 1148.838498][T32609] netlink: 'syz.1.8743': attribute type 1 has an invalid length. [ 1148.846579][T32609] netlink: 64475 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1148.918042][T32572] chnl_net:caif_netlink_parms(): no params data found [ 1148.972241][T32627] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8750'. [ 1148.998004][T27797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.028334][T32572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.036854][T32572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.044440][T32572] bridge_slave_0: entered allmulticast mode [ 1149.051179][T32572] bridge_slave_0: entered promiscuous mode [ 1149.062287][T32572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.069468][T32572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.080653][T32572] bridge_slave_1: entered allmulticast mode [ 1149.088954][T32572] bridge_slave_1: entered promiscuous mode [ 1149.100905][T27797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.135084][T32572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.159774][T27797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.183206][T32572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.211636][T32572] team0: Port device team_slave_0 added [ 1149.221183][T32572] team0: Port device team_slave_1 added [ 1149.233196][T32668] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8760'. [ 1149.244250][T27797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.265850][T32572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.276161][T32572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.302404][T32572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.313871][T32572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.321074][T32572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.347938][T32572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.379253][T32572] hsr_slave_0: entered promiscuous mode [ 1149.388965][T32572] hsr_slave_1: entered promiscuous mode [ 1149.395296][T32572] debugfs: 'hsr0' already exists in 'hsr' [ 1149.401331][T32572] Cannot create hsr debugfs directory [ 1149.463237][T32696] netlink: 'syz.1.8765': attribute type 1 has an invalid length. [ 1149.509728][T27797] bridge_slave_1: left allmulticast mode [ 1149.517628][T27797] bridge_slave_1: left promiscuous mode [ 1149.526900][T27797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.540619][T27797] bridge_slave_0: left allmulticast mode [ 1149.548975][T27797] bridge_slave_0: left promiscuous mode [ 1149.555065][T27797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.647750][T27797] team0: Port device bridge0 removed [ 1149.711912][T27797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.722672][T27797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.732996][T27797] bond0 (unregistering): Released all slaves [ 1149.781722][T27797] tipc: Left network mode [ 1149.919685][T27797] hsr_slave_0: left promiscuous mode [ 1149.929548][T27797] hsr_slave_1: left promiscuous mode [ 1149.941301][T27797] veth1_macvtap: left promiscuous mode [ 1149.946792][T27797] veth0_macvtap: left promiscuous mode [ 1149.973560][T27797] veth1_vlan: left promiscuous mode [ 1149.978874][T27797] veth0_vlan: left promiscuous mode [ 1150.065699][T27797] team0 (unregistering): Port device team_slave_1 removed [ 1150.075974][T27797] team0 (unregistering): Port device team_slave_0 removed [ 1150.182555][ T350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1630 sclass=netlink_route_socket pid=350 comm=syz.8.8785 [ 1150.379837][ T408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=408 comm=syz.8.8797 [ 1150.406780][ T408] netlink: 'syz.8.8797': attribute type 10 has an invalid length. [ 1150.456221][ T421] netlink: 'syz.8.8800': attribute type 1 has an invalid length. [ 1150.741077][T32572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1150.777315][T32572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1150.789661][ T495] netlink: 'syz.8.8817': attribute type 1 has an invalid length. [ 1150.806851][T32572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1150.908764][T32572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1151.106271][T32572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.151004][T32572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.175984][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.183092][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.210177][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.217309][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.317544][T32572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.420794][T32572] veth0_vlan: entered promiscuous mode [ 1151.438296][T32572] veth1_vlan: entered promiscuous mode [ 1151.468361][T32572] veth0_macvtap: entered promiscuous mode [ 1151.491462][T32572] veth1_macvtap: entered promiscuous mode [ 1151.522142][T32572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.533658][T32572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.544920][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.556389][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.566907][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.582589][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.370433][ T602] Set syz1 is full, maxelem 65536 reached [ 1152.504340][ T639] delete_channel: no stack [ 1152.668492][ T667] netlink: 'syz.7.8868': attribute type 25 has an invalid length. [ 1152.676971][ T667] netlink: 'syz.7.8868': attribute type 28 has an invalid length. [ 1153.203598][ T741] __nla_validate_parse: 11 callbacks suppressed [ 1153.203616][ T741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8902'. [ 1153.303564][ T741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8902'. [ 1154.111606][ T892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1154.129063][T12239] ================================================================== [ 1154.137165][T12239] BUG: KCSAN: data-race in copy_process / free_pid [ 1154.143665][T12239] [ 1154.145974][T12239] read-write to 0xffffffff86c61f68 of 4 bytes by task 885 on cpu 0: [ 1154.153947][T12239] free_pid+0xbc/0x1e0 [ 1154.158010][T12239] free_pids+0x7a/0xb0 [ 1154.162072][T12239] release_task+0x9a7/0xb60 [ 1154.166564][T12239] do_exit+0xda4/0x1600 [ 1154.170712][T12239] __module_put_and_kthread_exit+0x15/0x20 [ 1154.176514][T12239] cryptomgr_probe+0x15c/0x170 [ 1154.181271][T12239] kthread+0x22a/0x280 [ 1154.185330][T12239] ret_from_fork+0x150/0x360 [ 1154.189917][T12239] ret_from_fork_asm+0x1a/0x30 [ 1154.194669][T12239] [ 1154.196978][T12239] read to 0xffffffff86c61f68 of 4 bytes by task 12239 on cpu 1: [ 1154.204597][T12239] copy_process+0x1895/0x20d0 [ 1154.209535][T12239] kernel_clone+0x16b/0x5d0 [ 1154.214051][T12239] user_mode_thread+0x9c/0xd0 [ 1154.218724][T12239] call_usermodehelper_exec_work+0x7a/0x160 [ 1154.224655][T12239] process_scheduled_works+0x4de/0x9e0 [ 1154.230198][T12239] worker_thread+0x581/0x770 [ 1154.234779][T12239] kthread+0x22a/0x280 [ 1154.238870][T12239] ret_from_fork+0x150/0x360 [ 1154.243454][T12239] ret_from_fork_asm+0x1a/0x30 [ 1154.248208][T12239] [ 1154.250512][T12239] value changed: 0x80000146 -> 0x80000145 [ 1154.256213][T12239] [ 1154.258517][T12239] Reported by Kernel Concurrency Sanitizer on: [ 1154.264659][T12239] CPU: 1 UID: 0 PID: 12239 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1154.274276][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1154.284322][T12239] Workqueue: events_unbound call_usermodehelper_exec_work [ 1154.291430][T12239] ================================================================== [ 1154.317153][ T892] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1160.605848][T26734] bridge_slave_1: left allmulticast mode [ 1160.611577][T26734] bridge_slave_1: left promiscuous mode [ 1160.617172][T26734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.711413][T26734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.721079][T26734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.730738][T26734] bond0 (unregistering): Released all slaves [ 1160.781221][T26734] tipc: Left network mode [ 1160.800482][T26734] hsr_slave_0: left promiscuous mode [ 1160.806118][T26734] hsr_slave_1: left promiscuous mode [ 1160.814248][T26734] veth1_macvtap: left promiscuous mode [ 1160.819755][T26734] veth0_macvtap: left promiscuous mode [ 1160.825239][T26734] veth1_vlan: left promiscuous mode [ 1160.830607][T26734] veth0_vlan: left promiscuous mode [ 1160.884062][T26734] team0 (unregistering): Port device team_slave_1 removed [ 1160.893306][T26734] team0 (unregistering): Port device team_slave_0 removed