last executing test programs: 57m58.633527135s ago: executing program 32 (id=10): r0 = socket(0xf, 0x2, 0xb18) setsockopt(r0, 0x5, 0x1, &(0x7f00000001c0)="110000000200000000000c000000ea55", 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc0242, 0x104) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001014000800bd7000ffdbdf2508004a0000000000080003000212000008004b08130b000008004c000000000008004c00000000000a004a0000009900"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4048040) iopl(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) 57m20.26923242s ago: executing program 33 (id=361): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x36500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 57m12.792766824s ago: executing program 34 (id=431): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x20) socket$netlink(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) 56m55.879765095s ago: executing program 35 (id=592): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x240, 0x2b8, 0xb0000010, 0x240, 0x5c8f0200, 0x310, 0x3a8, 0x3a8, 0x310, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x240, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x8, 0x103, 0x0, 0x2, 0x20000a, 0x80001, 0x7fffffff, 0x5, 0x78, 0xe0}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bba542500e92eab2e507d4e04c0a92ef98f938b8a3de27236e73a674522"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x1, 0x7, 0x0, 0x8, 0x10, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000340), 0x8}, 0x4949, 0x5, 0x7fff, 0x2, 0x8, 0x10001, 0x4, 0x0, 0x5, 0x0, 0x8}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x7f5, 0x8000000009}}}, 0x90) r4 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) read(r4, &(0x7f0000000000)=""/269, 0xfffffdef) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280), 0xc) r6 = socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f00000007c0)={0x1, {{0xa, 0x4e20, 0x2000, @loopback, 0x10010000}}, {{0xa, 0xce24, 0x0, @private0={0xfc, 0x0, '\x00', 0x80}, 0x91000000}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x90) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @remote, 0xfffffffe}}}, 0x108) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x400}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x6, 0xfffffff9}, 0x64}}]}, {}, {0xffffffffffffff73}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000480340001800c0001007061796c6fe16400240002800800014000000009f2ff02400000004f080004400000003708000240000000021800018008000100647570000c00028008000140000000100900020073797a3200"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000cdcefc70583ca24713dc79931935c78664c40858c114a9d1a3a164561a5f7c9f6565a25bd07bedcbba0ae6773e4e506b7047677a7f4a864aab1770a58f00000000000001ff384f21d106754e", @ANYRES16=r10, @ANYBLOB], 0x2c}}, 0x4000800) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f00000006c0)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@obj_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x62, 0x35, 0x34, 0x35, 0x33, 0x62], 0x2d, [0x38, 0x34, 0x33, 0x34], 0x2d, [0x39, 0x66, 0x62, 0x35], 0x2d, [0x0, 0x30, 0x67, 0x65], 0x2d, [0x0, 0x34, 0x37, 0x62, 0x30, 0x33, 0x0, 0x66]}}}]}, 0x1, 0x62f, &(0x7f0000000700)="$eJzs3VtoHGsdAPD/TC61PfGkgooe4RARDoK6uRUlPnl8EdGjPR5REKWGdJuE7GZzcoEkip4+KKVYlApWsIhiH9R6WfBBBaUiiA8t1kJRRCiiFEQptbWgFCEy2d0kNNsmmsto5/eD2X7fN7v7fTP//ndmvuwlgMLqy27SiNdGxNEkonfDus5oruxr3K8+XJ/IliRWVl64nUQSEReG6xOt+yfNf59oPuw1EfHO10dMdW/ud25peWq0UinPNuv989WZ/rml5bdMVkfHy+Pl6SODA0dGhkZG3rp723r97K9++c8fvqv+ufPvPtv5odO/zsbb01y3cTt2S1/0NfdJVxzduCKNePtud5azdJv3e1X58z/d46GwTdVPX/xqRzPPu7LYRG90NLP+G1c/erc3JqbzHiOwd1YORKwABZXIfyio1nlAdv3bWvbr3OP+7/erJx7m1rONC8ALzbmd+lr8OxtzQ/Gy1WvDQ39PmleGDUlr7mgHzjyfPcc3P/Lm33zxT9kSezQPw/+m+h/zHgF56j6S9wjI01PP5z0C8nT1VN4j4KWTETHQ2bn5/D/Z8fndO7ZY/+NPZed/Z57Z2Ob8rzg+8ELeIyBP79vFv+3z/+crt/MeAT97Njv+t5v/S9fmf6LN/E9P42E7cmAiO/5/6dzGNsf//dWa/6tvmv9bj3/HQ+b/Pr7NPu7/6x+/a9d+81wW/799qzX/ly1Z/625QPberZMRT7WNf7IW/6RN/NOImNlmHy9++Mr727V/93IW/8ND4p+fla9HPBPt49+SPPL9mf0nJivlgcZt+z6e/vn377RrX3xbFv+5M+Kfnyz/Dz0k/lu9/r+0zT4upn9YbNf+nc9k8T94+dHxT//SnXxw9T9j623Ei6Pz87ODEd3Jeze3D/2ne6BYWvuotQ+z+L/xDY8+/rd7/T8YEV/YZp/XvndnpF37lytZ/K+dlP/5yeJ/fIv8bxf/rO1r2+wjHXv1X9u1P3k+i//HTrdi/5OnP3lT/AEAAAAAAAAAAAAAAAAAAAAAAHicpavf5ZukpbVympZKjd/wfmUcSiu1ufk3nagtTB9vfOfv4ehKW1/12NuoJ1l9cLW8Xh96oD4cEa+IiFMdB1frpbFa5XjeGw8F1RNx4wcvjrX5ZX4AAAAAAAAAAAAAAAAAACAvTzzw+f8/dzQ+/w88vnoiblz/xY8uZeV7HXmPBthPWf5/+171PSH/oXDkPxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf+huOQ/FNfG/AcAAAAAAAAAAAAAAAAAAAAAAAAA9tbR557LlpX6cH0iq0/XxienJmZGhgZK1YWx0lhtdqY0XquNV8qlsVp16+er1Gozg0OxsNg/X56b759bWj5WrS1Mzx+brI6Ol4+Vu/Zhm4CtXbr728/mPQYAAAAAAAAAAAAAAAAAAGBdz+qSpKWISFfLaVoqRbw8Ig5HV3JislIeiIgnI+JKR9eBrD6Y96CBHemJuPG6wZFP5D0OAAAAAAAAAAAAAAAAAABg3dzS8tRopVKeVVBQUFgr5P3KBAAAAAAAAAAAAAAAAAAAxbP+od+8RwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Vn//f+9K+S9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jX8HAAD//zeqZrI=") 42m7.670421258s ago: executing program 36 (id=4839): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 41m59.722921004s ago: executing program 37 (id=5137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 41m58.947532528s ago: executing program 38 (id=5162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x9, 0x3, 0x1, 0x5, 0x9, "615f99e21fa57111cd420963488824f5083b12"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 41m58.669092166s ago: executing program 39 (id=5171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e0001080007400000"], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xb8}}, 0x0) 40m56.134537209s ago: executing program 40 (id=7434): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="082be942b6249b8186d2116a32d42d5946af3e35d925b1f6d7907ab9fe481c11ce56df5301657152bd", 0x29}], 0x1}}], 0x1, 0x24004084) 38m13.108969828s ago: executing program 41 (id=12107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, 0x0) 37m58.337182182s ago: executing program 42 (id=12321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce1e, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 37m54.28924736s ago: executing program 43 (id=12382): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 37m49.700838454s ago: executing program 44 (id=12483): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_nanosleep(0x7, 0x1, &(0x7f0000000000), 0x0) 37m46.036434916s ago: executing program 45 (id=12550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xa, 0x3, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x202, 0x2, 0x1000}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 37m45.738106587s ago: executing program 46 (id=12558): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x52) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000640)=""/162}, 0x20) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000000100000050000000200000000010000", @ANYBLOB="0400"/20, @ANYRES32, @ANYBLOB="03000000030000005d00000000000000"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x80000000}, 0x10}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 37m39.262416471s ago: executing program 47 (id=12669): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x10080, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 37m38.879295587s ago: executing program 48 (id=12679): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xb4, 0xd, 0x58, 0x8, 0x10b8, 0x1fa8, 0x15da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x60, 0x1, "", [{{0x9, 0x4, 0xb5, 0xd, 0x0, 0x70, 0x5c, 0x6e, 0x8}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x4, 0x101000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 37m37.042650334s ago: executing program 49 (id=12704): unshare(0x2040400) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x312}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 37m30.418184198s ago: executing program 50 (id=12802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10040) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 37m24.109021581s ago: executing program 51 (id=12903): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0xffffffd3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 37m10.29301222s ago: executing program 52 (id=13252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 36m51.301437333s ago: executing program 53 (id=13786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xf2ff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x2008c010) 36m48.490544816s ago: executing program 54 (id=13869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}, 0x20000011}], 0x1, 0x10043, 0x0) 36m47.99564689s ago: executing program 55 (id=13884): socket$unix(0x1, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 36m46.575100608s ago: executing program 56 (id=13903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 36m45.697194728s ago: executing program 57 (id=13912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 36m38.09260308s ago: executing program 58 (id=14037): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, 0x0, 0x0) 36m30.66274795s ago: executing program 59 (id=14170): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x17}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000036"], 0x18}, 0x1) 36m20.89877314s ago: executing program 60 (id=14290): socket$kcm(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x800c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe000800) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 35m56.914314976s ago: executing program 61 (id=14535): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0) 35m46.118657887s ago: executing program 62 (id=14747): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x400, 0x10000}, 0x3b, 0x0, 0x0, 0x8, 0x7fff, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400c77f080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df7100c80400d5321f0487a44d", 0x0, 0x7, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000d"], &(0x7f0000000f40)=""/4071, 0x4a, 0xfe7, 0x8}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x37, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x41, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000", 0x17}], 0x1}, 0x0) 35m8.308445603s ago: executing program 1 (id=16194): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000006c0)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) 35m8.236318128s ago: executing program 1 (id=16196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 35m8.195352661s ago: executing program 1 (id=16198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 35m8.137049285s ago: executing program 1 (id=16199): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 35m8.136733535s ago: executing program 1 (id=16200): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)={0xc0002011}) finit_module(0xffffffffffffffff, 0x0, 0x3) 35m7.838724515s ago: executing program 1 (id=16210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x0, 0x47}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x9}, {}, {}, {0x7}, {}, {0x3, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 35m7.751399322s ago: executing program 63 (id=16210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x0, 0x47}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x9}, {}, {}, {0x7}, {}, {0x3, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 32m14.381680406s ago: executing program 0 (id=19932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001f080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8"], 0x0, 0xc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) 32m14.346382809s ago: executing program 0 (id=19933): epoll_create1(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 32m14.279099603s ago: executing program 0 (id=19935): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/50, 0x32) getdents64(r0, 0xfffffffffffffffe, 0x29) 32m14.212945847s ago: executing program 0 (id=19938): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1801, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000002180)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105011, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x509, &(0x7f0000000600)="$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") 32m14.17357863s ago: executing program 0 (id=19941): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}]}, 0x78}, 0x1, 0x7}, 0x0) 32m13.978382754s ago: executing program 0 (id=19949): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32m13.475960708s ago: executing program 64 (id=19949): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31m44.943961988s ago: executing program 3 (id=20153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x5, 0x5, 0x7, 0x0, 0xc, 0x1, 0x1, 0x1, {0xffff1c6e, 0x0, 0x7, 0xc, 0xfffffffa, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f00000001c0)="bad33075218151db00316f3a277f", 0xe, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 31m44.680351416s ago: executing program 3 (id=20158): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101781) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) 31m44.589639482s ago: executing program 3 (id=20159): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) getpriority(0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f00002ff000/0x3000)=nil, 0x3000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/33, 0x1215000, 0x800, 0x0, 0x1}, 0x20) 31m44.428709693s ago: executing program 3 (id=20162): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x15ff}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x3}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f00000036c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x2, 0x6, 0x7, 0x4, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ftruncate(r0, 0x200c17a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 31m43.376576285s ago: executing program 3 (id=20166): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x10000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001580)={{r0, 0x0, 0x181000, &(0x7f0000000040)={@align=0x100000000400, {0x6, 0x80, 0x80000001, 0x4}}, 0x0, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) 31m42.036862087s ago: executing program 3 (id=20177): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x255fdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x13, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x20}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214", 0x7}], 0x1}, 0x20000000) 31m41.786218144s ago: executing program 65 (id=20177): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x255fdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x13, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x20}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214", 0x7}], 0x1}, 0x20000000) 5m40.059927389s ago: executing program 2 (id=32011): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700009c110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 5m40.059465639s ago: executing program 2 (id=32012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x20000800) 5m40.001699263s ago: executing program 2 (id=32013): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x3, 0x2090) sendto(r0, &(0x7f00000002c0)="204c55ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e2435368a47ce6d0662223d0732483c5649324a914fa1387f279c0e25c1d608ab1a5663cb3819e4e0cb43b061da03658ae2d735fb05cafb121", 0x51, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m39.823851345s ago: executing program 8 (id=32023): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4, 0x3}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x80}}, 0x0) 5m39.769352969s ago: executing program 8 (id=32024): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x18, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) 5m39.769018449s ago: executing program 8 (id=32025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 5m39.695448754s ago: executing program 8 (id=32026): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$eJzs2r9rE3EYx/Hn0tTWlPYi/qwgPuigLkeT2aFFWhADgjZCFaRXe9GQM1dyRyFFbCcFp85OncXRTZCOLl38Cxx0Kkg3O4gn6SVtUou2Nr1zeL+WPMndJ/e9e74c34Rbv778tFJKS8kOJGUYkhqVJdk0JCspaVmSa1emPl64O3X/1lihMH5HdWJsMpdX1aGLHx48e3tpNRi4927ofZ+sZR+ub+S/rJ1ZG17/Ofmk7GvZ16oXqK0znhfYM66js2W/Yqkuu47tO1qu+k6tY3vJ9ebm6mpXZwczczXH99Wu1rXi1DXwNKjV1X5sl6tqWZYOZgSHUXyzGYayEaZbHwysyuBnMcU4ocbJUeP0tHF2yRjeCENzO3MsqcHiCET9752WMAyPr+yn/2164h8vuqvtpt4v4r6cL84Xo9do+1hJyuKKIyNiyg9pTJOmqJ64WRgf0S1ZeeEuNvOL88Vocrxq5XNiSnbvfC7Ka2e+TzLtx8+LKae286PSzH/tKYznVUV+y/fL1ctteUtM+fRIPHFlVhrZneM/z6neuF3ozPcn2xcAAICjYum2xtuVb4Z0rN+snR12re+i/AHWh7vWZ2k5n0701CEifn2hYruuU4ulaMypbn6hIf8cN5oX4O87n0vFdn22isbPnjibsvA6hmNlutr3gxStPyn22ud7GP94/lT07mtCxlMkeFNCbHaanvRIAAAAAAAAAAAAAAAAAAAHseuhP3PPxyQPWSR9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/2KwAA///LxMAU") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, 0x0, 0x0, 0x8013, 0x9, 0xb) 5m39.664174726s ago: executing program 8 (id=32027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5m39.429324212s ago: executing program 8 (id=32028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000800) 5m39.429121632s ago: executing program 66 (id=32028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000800) 5m39.178707749s ago: executing program 2 (id=32037): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, 0x0, 0x0, 0x8013, 0x9, 0xb) 5m39.089169265s ago: executing program 2 (id=32038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5m38.849000382s ago: executing program 2 (id=32042): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 5m38.825442384s ago: executing program 67 (id=32042): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 2.592968473s ago: executing program 7 (id=37403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.365438638s ago: executing program 5 (id=37411): r0 = syz_io_uring_setup(0x38a5, &(0x7f0000001180)={0x0, 0x192f, 0x40, 0x1, 0x2fb}, &(0x7f0000001200), &(0x7f0000001240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000001280)={0xfffffffffffffffc, 0xffffffffffffffff, 0x27, {0x9, 0xfadf}, 0xc0}, 0x1) 2.356318948s ago: executing program 6 (id=37412): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) r2 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x72}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r2, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0)={[0x80]}, 0x8) 2.356012088s ago: executing program 7 (id=37413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x8, 0x6, "38f611", 0xd4b, 0x32, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], "8c791b9db5dbe81aa4493527a4963126e4149c3d1e1895393ceeedc9d7e1992bbf3d530732ba7bb27a4d842eaec6c4764e3ee95818b539b06bb7da1b5d29d71a5732e94420762f85de2c57b8c375cb86c00c57e08a3fad1e680ff25c9efcf6d1916937bb0c6e6a1420ba28e37d66157feaa6e85a6b17c7127fe4d9baf13c75124e6a937a2f552a678730caf2187a09566c5836ce27ef8f8259fbe893bc3c9d340c6a9090d1a31bbc3c5caa954ff998bf84543937982b5ee16305f43676f4a5cda42c54821c391d5745712d96f352668c873bfa10c0a9ab1340ad2c88790cdad487b802f52306f55859c39761b773efb67a25e3a0afe8bddc9412195a2acee1201ddf6ed17b2fd6eb9a687b3f31542b4b7632f73de71488d05fd66014797c9bf21b81a56f7e74a3d34ce99ec3e139d6e73b1dd47437bb7ee7886b1a9b32f0a3f4a14f0b7bb6766bfe143244985e1f18347be31ee78952c45574a6d07ae07c34701b118ed1f25f3df83588f1b65a28c4450af77047ea12d0082126c686124aa60591e68622418294323577cebe1f342757d810fb6c9df977d7805c730e3676ba36c314ec641662ef8f96bd2a0ee0cf757aa997ca1f7ed8e1ba0374b596c9fc16f0d32b78824b51689ee07a7a3bc023dba435cda020ce5763dd2f5454fa1c3e13ce9d63853128bc947766976082904b1c8a0eb042354ccc9c8c621476eec1f6c01230c89e299a2fc1a79234b0332c5bfe92b20e848d41b620769220a3bfe74e50b2f9adc6c94950c574dae8e5969a192b0b5c7ff934c7223e0ad2df63813f59b098f458e08b38a627a707259fb2a1fa2b382255ce4cb823172f0b9129b3c2833ba5ae9680d4c2716c689ea9cd741111a21985b74fadea87997ae62352c898f45384825effa20266c54b55a554754dd6c0f5437b3e9ed77b33ffe90f932ce8f64e7e89c1551be2cc7f5604d815378401fd7b431bf576a3c380579e8919c90ad6a007e3e152d78ee8ec02752c5833fddf7c0097bc86e3991363e782ba346c773635290fc948cf75f8bfea0ef9476d7526958026d331ac21b83fee734f2b1dbf2d8029f59f4113d96888d9e90caac5e75ab6446669003754f81124ad866a2627d228a2be0791a1c65f0e66e7c0b796114ddbd8edf3bd8773f464062206715fa375eeb3c35e751c3bbc7a97ce69411af42e102bbdd8f98f74f682bbb92080c981821b481791274a7c8f0eb29887d05a07edcfb1d8a5d468e84b41cb3effbe47f1ac04be9a2b27ce218d5ae56384e734026edb8ea256d3365e804e4db670408765f0ca62444ff7f514437a47322ea7f14c012ac961a7a8de6ea621f4fcd452f5b3b872188dd1ece7d6e1bbb5e08f3f73f1cf1babfe54283dea5ff10d293cb36b7da3e40de61ddec7662e45995f517953a09e8d0d3a0a35e5c9edd0404781087de3305c58951238470e1047d5ab9e5d0bed35a82ac1bfbfbfecbb238c4e9fa374c2fd4a896fdeeb4c88bd96f19f28c12b4902765e705e285ff92a3d3dbb3cbad3d5251c793b7224e643076bca9d838901abc0fffc630594c2e9d749ddac44580211b44140f35c0193bf359e14f06954ac257f14ce579c1e69009d05a1d23b46b7a9579fc85f9e6f1db8aec01bb4249659611cb7603e935feef060982cc5c705268db306d0e683e10cdc852755735623e2819129edb8139caf182c7385d85ce1697487a6d960e27b6b4fda0fc09eca49640756d2f8d0dc7ed66e6f5ba2d83258d76745539d0afdf62aa4afaa46b37eb100413d99278925bcb643992e2fa8f27e624aef1d16cf8f2617b24943d4185cb98c7fe0ab9f738a89dc0b8f68e65ec46768e28e3c8c0b13974ea8d9bd98b9a7d2a0533efee246f5c2855feca519acd49439627f2c8527b92e9e58b8154b3702a930f96aa5424d6c1f469f82f6df19c9a1492f2be9f59ca4196e2b72b133e9560a3f5dc7f8a7aaf494568bd05a4b9a5a907c7e4e22d3d6e93de5c80f03ed618ad2580585308dbb1d25e2111cb4e22225833ace4fd07bbfb3b09aab6bf8669607e1fa559edec4a8e01355025f41e176f320a4649dda407edf5d183f26de0b0ca9b7e95744397f7e344a64b791a64ec05c113b100b156c23f7aaa063c955bf27c0665a4543d4f5f4de3354aaf2fd61b7f40516f10ca0dd77811ad1fabee1615e50e3ca6374b97fbe776d94bed43d40a96a526c45f2f939715f715fbdc74548769d375937fe3a3ae0335181ad99e7e6d46c124f44374ce50025bd28b4a486046a252735d8ef8d66905c9ff78b28f95ccc3f808d6056c23a5585b42e57e758a17d77d58e7ed856aab45b6406294effffd28dcbcc3da751688696401c1321c2f9735c86da7ff5ac9332fe49360f054cbf291c5ea87d22fe6b00e00369ea7de75266ab272eface4c338154759972f548a4abee0af3ae97dfd221a973d28ba073314bcaa04524786b31dc9d485eb644c8b14753616041f70c981ded52031377ac5a7256b57357c86c530083e69b00fbf61a862ce6f40d4c13bb78d6ea10dad24770b7dad687a81bf958f1133132fe6d44babd40ba58510a4e19613ae3bd6fcd95dc0af3cf59c317eac916ef36e0ce19691e7bce759f9e8b9c4438d65ef63058e09a65866d538ddd5fd50abcdb01c2e2d42ef7e8887225f5065cf6b6745241cffc11b986ccff6e0bf636c5df61bfbebfcdb666e4dfb71cba6461be4ba90ddfe6e7b8a6a42e1e0b3b8a975d491c9f09b93b6fcd0895e859ab7ad44c609ca1ef245084c1d34c571223644bd82026a3ece05c011c07f4575ae4c3e8d89bc2a10c232831fbb52e67bba73f89c6b5fffea3e5ec0e8cdb461f94464b421a1a82106dba32293c1aab67e67184c8b543d0641fc85ace80f59084c228442b06b11d9206f8628d2168273c92ec11bb9b8b2cec6f1bb4be63d87e3a25825c77374e2b7059dd7950637429119d8b8acc4eac9f9a4e151b55391c2edf64d8840ec1c09099aa23d890dee129bbe3728190226b2b08e82db9978f6a9d5e5f2dbbd657248ed5bfa344327edbb3ebe7de74c5d4634a33277f10a57c0bf311f167456795373f1e86030743549e3d17b556f5449510cd57a6c6cdbb24b8f4725557208abd1b71d04490bda595f53e6ed8e7120a31ec5828c9e8811dc34160acaed55ebad18d4f7d8a4482da78f1957330b08f78443da1ebef0b22fbbfc6826b0f0d10c51f06d2132066df5f6a12b5c51441d97e4063519215ba795c469ac22989e5dd85a9b9acbae1071bc07aa8248b530e5cc5807c4b8f874e9d0d7b2b5bd6d471be32650e5eb78de34cff88031da2b391b438157face2b5228fc0a3c5d56a09a923a7baa0b0b311fa6f8eacee8f86a8d02b8491a85c9095a03e5fbdc5d63607f62dfa670d7c06db309e717165f2457a5985ace988578d43035d0172393305f635f7d600b720b901bc5b1b994b64b628dc315b57cb170e38f0228212c93ddca2529b2d1bf306fdaf87613341910c8250b42d2b47981c34b319beb58e1d676363df4308c1a63e99f8c6f93aa38f41cfb8a40b239a324d0d3d58fbe8be57a9b22d94124ec4ed4a81d2d6c3c9a0ede48da699a46e0e3ca6dccc5bd5ad6800fb0f718f1526dedc0541b6653e3b2f93f2d54cee30b6a5cf5d999b3e0837c76fff7e7016f63461421d57b3b08098c3a993177d13fb85e7650c029d79f1d9dbcf23b2e9ffd3cf53978f1a9ce74ccbdb4f2cbbdb8e72d9eb8a04cf7b6cc9f0833c7352aeecfc3136ae3a6389f82d60c7e502692318b2c88693faeb2190ee0149f0a017c7d6d1bcfb15f8b16abc54c1759c4bd190800145839f526fcf1c129438c72bc98eacebf31ce765c231108100643b85204e24e3be9947fcef2b691ef19ddef06caf0c8a8450d56edcd7f74b3d9042094e41d8a4186c0bd96519086c764696a13336fe0ca15ad951d411459c4f86fc6e5f0922d9a75e9145f148a092e78294603ae5c7236289800ceb6c8a016ba3a66ed4f6839a47123704ce293883017c9040a0aaaaa80243f44de7dd1d1880295de22f2fff8f3a72022e0d62d5ab405e4615a2248dd91b8cb9782c697dd95cec919537f3c37d1333a529a5d4154392659d78b5a0b9131b939845e6d7972c4498a7c8c6600ab27cae813ec2b12605a98c23bbd6dae14b17d7e54b87ce6e8f7705679254a87b0fe63ca8f7add3f97df8864a06547bb328bce63352646a3faabe83c84dd39aba317c9b7878fb6370703fc53a728c177c1e4acb154dd720cadb90578f246ac535b9740ca763b2df35f8be76c447008439afa4d08dc5da22742305c1aa4dc90f6859636d72e789c433c7ae19c4d811b1a450f59a658ff578aad3d4798e16b0ee12f26afba6b4c0042a3f8f880a0ad2b33a8c5bed51d0fc9423732691be5ff945b6ce433490028a3fd806d7d8d3100fc4414e5328bd8400e3269f4b2d43d4bc3bc9fbe857329645873f2a415ce7a007c609e95cf038e6e00b125073255873c4a3d16fb9ebf031e025dfcff4b3982638dd573f13bfcbd9f17232bec9531f3a38e9d666327ce3e7e900c0476b47291a7c547b4a627dcbc293951fc55847b306e2e3ed8d1446eb03ced0332f2efbf61afcc096ec682bd6db01f390d03724c7a395a5c944a5dec5016f670fcc2580f7a7eb4096f1b4890459cd6e34f76e5ac295d780867e324423fc94f734085bcced74dc76fb5b754bd334199a46332ce99ee426359463e93c9755bb5e979b71b269fbc6bd7997434069828cb75068d0d291594bab5853f867c7b6ea05019ab9bd32f196f75158281c866513cfdb288cd44732"}}}}}}, 0x0) 2.308844762s ago: executing program 5 (id=37415): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x7, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.308598292s ago: executing program 7 (id=37416): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006", 0x39}], 0x1}, 0x20000004) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10", 0x15}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.303782002s ago: executing program 6 (id=37417): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c0007"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.263135025s ago: executing program 6 (id=37419): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee00) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.256632075s ago: executing program 7 (id=37420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.178943271s ago: executing program 6 (id=37421): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 2.178631601s ago: executing program 7 (id=37422): socket(0x1d, 0x2, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x18d7, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) 1.369269966s ago: executing program 9 (id=37427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x8, 0x6, "38f611", 0xd4b, 0x32, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], "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"}}}}}}, 0x0) 1.369031166s ago: executing program 4 (id=37428): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.300715061s ago: executing program 4 (id=37429): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c0007"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.235582815s ago: executing program 9 (id=37430): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x106200, 0x7, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 1.220068326s ago: executing program 4 (id=37431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.049128618s ago: executing program 5 (id=37432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.008666411s ago: executing program 6 (id=37433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xd}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.007983401s ago: executing program 9 (id=37434): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 945.350596ms ago: executing program 5 (id=37435): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 918.182107ms ago: executing program 5 (id=37436): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe, 0x1e, 0x3, 0x4, 0x0, 0x8, 0x8c780, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x19800, 0x6edb, 0xfffffff9, 0x7, 0xc2, 0x6, 0xb7c, 0x0, 0xb964, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}], 0x1}, 0x0) 795.625856ms ago: executing program 9 (id=37437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6002c1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff110000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 453.161179ms ago: executing program 7 (id=37438): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000002980)=""/4053, 0xfd5}, {&(0x7f0000003980)=""/4118, 0x1016}], 0x3}, 0x0) 252.292653ms ago: executing program 5 (id=37439): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, 0x0, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, 0xffffffffffffffff, 0x0) 216.998096ms ago: executing program 6 (id=37440): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 202.502926ms ago: executing program 4 (id=37441): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c0007"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 156.534329ms ago: executing program 4 (id=37442): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2000014, &(0x7f0000000d40)=ANY=[], 0x1, 0x2d0, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x26) 57.220966ms ago: executing program 9 (id=37443): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 30.111108ms ago: executing program 4 (id=37444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 9 (id=37445): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x2, 0x9], 0x2) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), 0x0}, 0x20) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered disabled state [ 3397.433208][T15199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3397.454859][T15199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3397.454917][T19120] netlink: 32 bytes leftover after parsing attributes in process `syz.7.34990'. [ 3397.476731][T15199] bond0 (unregistering): Released all slaves [ 3397.498132][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34988'. [ 3397.501857][T19120] netlink: 32 bytes leftover after parsing attributes in process `syz.7.34990'. [ 3397.524583][T19029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3397.555942][T19029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3397.600872][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.34993'. [ 3397.637775][T15199] tipc: Left network mode [ 3397.773269][T15199] hsr_slave_0: left promiscuous mode [ 3397.794304][T15199] hsr_slave_1: left promiscuous mode [ 3397.802998][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3397.823949][T15199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3397.834007][T15199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3397.842138][T15199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3397.872202][T15199] veth1_vlan: left promiscuous mode [ 3397.886607][T15199] veth0_vlan: left promiscuous mode [ 3397.954866][T15199] team0 (unregistering): Port device team_slave_1 removed [ 3397.965833][T15199] team0 (unregistering): Port device team_slave_0 removed [ 3398.008289][T19029] team0: Port device team_slave_0 added [ 3398.067931][T19029] team0: Port device team_slave_1 added [ 3398.118058][T19029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3398.133845][T19029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3398.162056][T19029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3398.185224][T19029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3398.211837][T19029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3398.301529][T19029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3398.346554][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35015'. [ 3398.394471][T19029] hsr_slave_0: entered promiscuous mode [ 3398.414220][T19029] hsr_slave_1: entered promiscuous mode [ 3398.422113][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35017'. [ 3398.428115][T19029] debugfs: 'hsr0' already exists in 'hsr' [ 3398.442762][T19029] Cannot create hsr debugfs directory [ 3398.450387][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35017'. [ 3398.646352][T19237] netlink: 16 bytes leftover after parsing attributes in process `syz.9.35022'. [ 3399.069330][T19282] netlink: 16 bytes leftover after parsing attributes in process `syz.7.35032'. [ 3399.079854][T19029] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3399.106937][T19029] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3399.127690][T19029] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3399.144614][T19029] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3399.237085][T19029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3399.273054][T19029] 8021q: adding VLAN 0 to HW filter on device team0 [ 3399.299030][T13361] bridge0: port 1(bridge_slave_0) entered blocking state [ 3399.306276][T13361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3399.333528][T13361] bridge0: port 2(bridge_slave_1) entered blocking state [ 3399.341237][T13361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3399.486147][T19029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3399.750765][T19029] veth0_vlan: entered promiscuous mode [ 3399.763457][T19368] lo speed is unknown, defaulting to 1000 [ 3399.765791][T19029] veth1_vlan: entered promiscuous mode [ 3399.787956][T19029] veth0_macvtap: entered promiscuous mode [ 3399.800788][T19029] veth1_macvtap: entered promiscuous mode [ 3399.825129][T19029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3399.859742][T19029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3399.889134][T15199] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.909795][T15199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.930290][ T6225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.969142][ T6225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.286929][T19425] syzkaller0: entered promiscuous mode [ 3400.292731][T19425] syzkaller0: entered allmulticast mode [ 3400.406649][T19455] netlink: 'syz.6.35076': attribute type 9 has an invalid length. [ 3400.467994][T19462] veth3: entered promiscuous mode [ 3400.473807][T19428] lo speed is unknown, defaulting to 1000 [ 3400.678296][T19484] syzkaller0: entered promiscuous mode [ 3400.713892][T19484] syzkaller0: entered allmulticast mode [ 3400.736913][T19428] chnl_net:caif_netlink_parms(): no params data found [ 3400.888741][T19428] bridge0: port 1(bridge_slave_0) entered blocking state [ 3400.921955][T19428] bridge0: port 1(bridge_slave_0) entered disabled state [ 3400.951737][T19428] bridge_slave_0: entered allmulticast mode [ 3400.969315][T19428] bridge_slave_0: entered promiscuous mode [ 3400.984362][T19511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19511 comm=syz.7.35094 [ 3400.989900][T19428] bridge0: port 2(bridge_slave_1) entered blocking state [ 3401.026608][T19428] bridge0: port 2(bridge_slave_1) entered disabled state [ 3401.034850][T19428] bridge_slave_1: entered allmulticast mode [ 3401.042150][T19428] bridge_slave_1: entered promiscuous mode [ 3401.085833][T19428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3401.103613][T19428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3401.116162][T19517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3401.124957][T19517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3401.134584][T19428] team0: Port device team_slave_0 added [ 3401.141580][T19428] team0: Port device team_slave_1 added [ 3401.157162][T19428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3401.164265][T19428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3401.191358][T19428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3401.203281][T19428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3401.210316][T19428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3401.236631][T19428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3401.266283][T19428] hsr_slave_0: entered promiscuous mode [ 3401.273035][T19428] hsr_slave_1: entered promiscuous mode [ 3401.279191][T19428] debugfs: 'hsr0' already exists in 'hsr' [ 3401.284929][T19428] Cannot create hsr debugfs directory [ 3401.369347][T19524] syzkaller0: entered promiscuous mode [ 3401.375073][T19524] syzkaller0: entered allmulticast mode [ 3401.594084][T19428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3401.605033][T19428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3401.617379][T19546] syzkaller1: entered promiscuous mode [ 3401.623312][T19546] syzkaller1: entered allmulticast mode [ 3401.631014][T19428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3401.643884][T19428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3401.683435][T19428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3401.698161][T19428] 8021q: adding VLAN 0 to HW filter on device team0 [ 3401.712563][T13361] bridge0: port 1(bridge_slave_0) entered blocking state [ 3401.720289][T13361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3401.731336][T13361] bridge0: port 2(bridge_slave_1) entered blocking state [ 3401.738452][T13361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3401.785074][T19428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3401.796182][T19428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3401.944026][T19428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3402.036054][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3402.051149][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3402.070051][ T28] audit: type=1400 audit(1775662969.781:5965): avc: denied { map } for pid=19610 comm="syz.6.35127" path="socket:[580746]" dev="sockfs" ino=580746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 3402.136576][T19428] veth0_vlan: entered promiscuous mode [ 3402.145973][T19428] veth1_vlan: entered promiscuous mode [ 3402.164070][T19428] veth0_macvtap: entered promiscuous mode [ 3402.172138][T19428] veth1_macvtap: entered promiscuous mode [ 3402.184895][T19428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3402.202771][T19428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3402.215113][T12921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.235395][T12921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.246885][T12921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.256590][T12921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.377714][T19640] __nla_validate_parse: 7 callbacks suppressed [ 3402.377731][T19640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.35136'. [ 3402.401176][T19640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.35136'. [ 3402.500529][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35144'. [ 3402.526107][ T28] audit: type=1400 audit(1775662970.231:5966): avc: denied { bind } for pid=19660 comm="syz.5.35145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3402.775284][T19690] syzkaller0: entered promiscuous mode [ 3402.781806][T19690] syzkaller0: entered allmulticast mode [ 3402.888927][T19706] syzkaller0: entered promiscuous mode [ 3402.894676][T19706] syzkaller0: entered allmulticast mode [ 3403.043733][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.35169'. [ 3403.192672][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.35174'. [ 3403.756768][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3403.770417][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3403.922164][T19777] netlink: 40 bytes leftover after parsing attributes in process `syz.9.35195'. [ 3403.965561][T19784] netlink: 'syz.9.35198': attribute type 32 has an invalid length. [ 3403.974780][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35198'. [ 3403.985421][T19784] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3404.503885][T19787] netlink: 16 bytes leftover after parsing attributes in process `syz.6.35199'. [ 3404.534960][T19789] syzkaller1: entered promiscuous mode [ 3404.541061][T19789] syzkaller1: entered allmulticast mode [ 3404.716864][T19797] syzkaller0: entered promiscuous mode [ 3404.722462][T19797] syzkaller0: entered allmulticast mode [ 3404.760577][T19799] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3404.882986][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.35211'. [ 3404.908451][T19816] syzkaller1: entered promiscuous mode [ 3404.914270][T19816] syzkaller1: entered allmulticast mode [ 3404.960280][ T28] audit: type=1400 audit(1775662972.671:5967): avc: denied { write } for pid=19818 comm="syz.4.35213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3405.323618][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35214'. [ 3405.389267][T19826] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3405.628175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3406.646073][T19939] syzkaller1: entered promiscuous mode [ 3406.652183][T19939] syzkaller1: entered allmulticast mode [ 3406.915798][T19978] syzkaller1: entered promiscuous mode [ 3406.924725][T19978] syzkaller1: entered allmulticast mode [ 3407.416328][T20015] syzkaller1: entered promiscuous mode [ 3407.432960][T20015] syzkaller1: entered allmulticast mode [ 3407.804733][T20040] tipc: Started in network mode [ 3407.829771][T20040] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 3407.837391][T20040] tipc: Enabled bearer , priority 10 [ 3408.311339][T20084] __nla_validate_parse: 8 callbacks suppressed [ 3408.311354][T20084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.35326'. [ 3408.343099][T20084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.35326'. [ 3408.514415][T20101] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3408.526436][T20101] bond1 (unregistering): Released all slaves [ 3408.666189][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35339'. [ 3408.713029][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35339'. [ 3408.762808][T20122] syzkaller1: entered promiscuous mode [ 3408.768719][T20122] syzkaller1: entered allmulticast mode [ 3408.843724][T20130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.35347'. [ 3408.933992][T20139] syzkaller0: entered promiscuous mode [ 3408.940826][T20139] syzkaller0: entered allmulticast mode [ 3409.110142][ T8503] tipc: Node number set to 15444650 [ 3409.163756][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.35359'. [ 3409.254285][T20169] xt_hashlimit: size too large, truncated to 1048576 [ 3409.262257][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.35365'. [ 3409.307788][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.35368'. [ 3409.326238][T20182] syzkaller0: entered promiscuous mode [ 3409.332247][T20182] syzkaller0: entered allmulticast mode [ 3409.539601][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35379'. [ 3409.574282][T20212] IPVS: length: 528 != 175201744856 [ 3409.574282][ T28] audit: type=1400 audit(1775662977.281:5968): avc: denied { getopt } for pid=20211 comm="syz.9.35381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3409.684558][T20222] xt_hashlimit: size too large, truncated to 1048576 [ 3410.580756][T20267] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3410.634757][T20272] bond1: entered promiscuous mode [ 3410.641232][T20275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.35408'. [ 3410.699159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3411.050240][T20311] syzkaller1: entered promiscuous mode [ 3411.058933][T20311] syzkaller1: entered allmulticast mode [ 3411.361935][T20345] syzkaller1: entered promiscuous mode [ 3411.367714][T20345] syzkaller1: entered allmulticast mode [ 3411.682416][T20374] lo speed is unknown, defaulting to 1000 [ 3411.739083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3411.767919][T20396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3411.777779][T20395] syzkaller0: entered promiscuous mode [ 3411.783554][T20396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3411.800357][T20395] syzkaller0: entered allmulticast mode [ 3412.001039][T20410] xt_hashlimit: size too large, truncated to 1048576 [ 3412.779102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3412.949803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3413.079420][T15532] lec:lec_start_xmit: lec0:No lecd attached [ 3413.247903][T20502] syzkaller0: entered promiscuous mode [ 3413.255525][T20502] syzkaller0: entered allmulticast mode [ 3413.495985][T20511] __nla_validate_parse: 12 callbacks suppressed [ 3413.495997][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.9.35509'. [ 3413.649347][T20521] syzkaller0: entered promiscuous mode [ 3413.655053][T20521] syzkaller0: entered allmulticast mode [ 3413.939313][T20536] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3414.020875][T20540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.35521'. [ 3414.167392][T20548] netlink: 68 bytes leftover after parsing attributes in process `syz.7.35525'. [ 3414.214600][T20553] netlink: 'syz.7.35527': attribute type 5 has an invalid length. [ 3414.224685][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.35527'. [ 3414.240634][T20553] netlink: 'syz.7.35527': attribute type 5 has an invalid length. [ 3414.250152][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.35527'. [ 3414.278734][T20555] syzkaller0: entered promiscuous mode [ 3414.284367][T20555] syzkaller0: entered allmulticast mode [ 3414.564611][T20578] xt_hashlimit: size too large, truncated to 1048576 [ 3414.811928][T20594] syzkaller0: entered promiscuous mode [ 3414.827658][T20594] syzkaller0: entered allmulticast mode [ 3414.866879][T20604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35540'. [ 3414.876327][T20604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3414.883713][T20604] IPv6: NLM_F_CREATE should be set when creating new route [ 3414.937443][T20612] netlink: 24 bytes leftover after parsing attributes in process `syz.7.35554'. [ 3415.019480][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35556'. [ 3415.063163][T20625] netlink: 'syz.4.35559': attribute type 32 has an invalid length. [ 3415.071447][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35559'. [ 3415.081294][T20625] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3415.419054][T20629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=20629 comm=syz.5.35561 [ 3415.433088][T20629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=20629 comm=syz.5.35561 [ 3415.472506][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35562'. [ 3415.514102][T20633] syzkaller0: entered promiscuous mode [ 3415.527274][T20633] syzkaller0: entered allmulticast mode [ 3415.677532][T20641] syzkaller0: entered promiscuous mode [ 3415.685457][T20641] syzkaller0: entered allmulticast mode [ 3415.837704][T20662] netlink: 'syz.4.35576': attribute type 32 has an invalid length. [ 3415.844026][T20666] syzkaller0: entered promiscuous mode [ 3415.859124][T20666] syzkaller0: entered allmulticast mode [ 3415.874580][T20662] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3415.982014][T20683] netlink: 'syz.6.35586': attribute type 4 has an invalid length. [ 3416.049655][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.058352][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.110992][T20702] loop6: detected capacity change from 0 to 512 [ 3416.123495][T20702] SELinux: Context system_u:object_r:system_m is not valid (left unmapped). [ 3416.134084][ T28] audit: type=1400 audit(1775662983.841:5969): avc: denied { relabelto } for pid=20701 comm="syz.6.35593" name="bus" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_m" [ 3416.163160][ T28] audit: type=1400 audit(1775662983.841:5970): avc: denied { associate } for pid=20701 comm="syz.6.35593" name="bus" dev="tmpfs" ino=626 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_m" [ 3416.192611][ T28] audit: type=1400 audit(1775662983.871:5971): avc: denied { rmdir } for pid=19029 comm="syz-executor" name="bus" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_m" [ 3416.220785][T20705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.229545][T20705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.403964][T20707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.413207][T20707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.481920][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.491395][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.685109][T20725] netlink: 'syz.9.35603': attribute type 4 has an invalid length. [ 3416.712597][T20727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=20727 comm=syz.9.35604 [ 3416.726040][T20727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=20727 comm=syz.9.35604 [ 3416.737143][T20729] syzkaller0: entered promiscuous mode [ 3416.753398][T20729] syzkaller0: entered allmulticast mode [ 3416.767950][T20733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.795613][T20733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.880883][T20743] syzkaller0: entered promiscuous mode [ 3416.886510][T20743] syzkaller0: entered allmulticast mode [ 3416.992152][T20755] loop7: detected capacity change from 0 to 2048 [ 3417.015317][T20755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3417.029063][T20757] bond0: entered promiscuous mode [ 3417.034167][T20757] bond_slave_0: entered promiscuous mode [ 3417.040218][T20757] bond_slave_1: entered promiscuous mode [ 3417.047166][T20757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3417.057322][T20757] bond0: left promiscuous mode [ 3417.062358][T20757] bond_slave_0: left promiscuous mode [ 3417.068074][T20757] bond_slave_1: left promiscuous mode [ 3417.075056][T20755] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 3417.100346][T20755] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 3417.114109][T20755] EXT4-fs (loop7): This should not happen!! Data will be lost [ 3417.114109][T20755] [ 3417.124078][T20755] EXT4-fs (loop7): Total free blocks count 0 [ 3417.130283][T20755] EXT4-fs (loop7): Free/Dirty block details [ 3417.136682][T20755] EXT4-fs (loop7): free_blocks=66060288 [ 3417.142552][T20755] EXT4-fs (loop7): dirty_blocks=16 [ 3417.150422][T20755] EXT4-fs (loop7): Block reservation details [ 3417.156619][T20755] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 3417.185391][T20333] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 3417.212970][T20777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3417.228831][T18108] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 3417.235913][T20777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3417.290482][T20786] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3417.301012][T20789] netlink: 'syz.9.35630': attribute type 4 has an invalid length. [ 3417.469485][T20816] loop9: detected capacity change from 0 to 2048 [ 3417.492562][T20816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3417.506496][ T28] audit: type=1400 audit(1775662985.211:5972): avc: denied { mounton } for pid=20815 comm="syz.9.35640" path="/162/file2/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 3417.538022][T18773] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 3417.555327][ T28] audit: type=1400 audit(1775662985.261:5973): avc: denied { unlink } for pid=18773 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 3417.580490][ T28] audit: type=1400 audit(1775662985.291:5974): avc: denied { unlink } for pid=18773 comm="syz-executor" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 3417.606625][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3417.607894][T20824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3417.625319][T20824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3417.635900][T20826] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3417.713441][T20834] loop9: detected capacity change from 0 to 512 [ 3417.720396][T20834] ext4: Unknown parameter 'euid>00000000000000000000' [ 3417.812924][T20844] netlink: 'syz.9.35653': attribute type 10 has an invalid length. [ 3417.828784][T20844] team0: Failed to send options change via netlink (err -105) [ 3417.836946][T20844] team0: Port device dummy0 added [ 3417.873164][T20848] netlink: 'syz.4.35655': attribute type 4 has an invalid length. [ 3418.537719][T20881] __nla_validate_parse: 11 callbacks suppressed [ 3418.537735][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.35668'. [ 3418.557194][T20883] syzkaller0: entered promiscuous mode [ 3418.563324][T20883] syzkaller0: entered allmulticast mode [ 3418.699160][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 3418.699792][T20896] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3418.707259][ C0] lec:lec_tx_timeout: lec0 [ 3418.812402][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35682'. [ 3418.829250][T20905] syzkaller1: entered promiscuous mode [ 3418.839799][T20905] syzkaller1: entered allmulticast mode [ 3418.883313][T20915] syzkaller0: entered promiscuous mode [ 3418.892875][T20915] syzkaller0: entered allmulticast mode [ 3418.938381][T20922] loop4: detected capacity change from 0 to 512 [ 3418.973348][T20922] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 3419.060881][T20929] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3419.253516][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35695'. [ 3419.269800][ C0] af_packet: tpacket_rcv: packet too big, clamped from 66024 to 3944. macoff=96 [ 3419.333584][T20946] syzkaller1: entered promiscuous mode [ 3419.348116][T20946] syzkaller1: entered allmulticast mode [ 3419.354883][T20949] loop7: detected capacity change from 0 to 1024 [ 3419.391653][T20949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3419.448724][T20948] syzkaller0: entered promiscuous mode [ 3419.451670][T20957] loop6: detected capacity change from 0 to 1024 [ 3419.454490][T20948] syzkaller0: entered allmulticast mode [ 3419.465291][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3419.471599][T20957] EXT4-fs: Ignoring removed bh option [ 3419.481175][T20957] EXT4-fs: Ignoring removed oldalloc option [ 3419.487400][T20957] EXT4-fs: Ignoring removed nobh option [ 3419.602176][T20974] netlink: 'syz.4.35706': attribute type 10 has an invalid length. [ 3419.619818][T20974] team0: Port device dummy0 added [ 3419.635609][T20976] syzkaller0: entered promiscuous mode [ 3419.647123][T20976] syzkaller0: entered allmulticast mode [ 3420.061720][T20994] syz_tun: entered promiscuous mode [ 3420.070938][T20994] syz_tun: left promiscuous mode [ 3420.091097][T20995] syzkaller1: entered promiscuous mode [ 3420.096831][T20995] syzkaller1: entered allmulticast mode [ 3420.205736][T21004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3420.214527][T21004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3420.404824][T21010] syzkaller0: entered promiscuous mode [ 3420.410806][T21010] syzkaller0: entered allmulticast mode [ 3420.587593][T21021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.35727'. [ 3420.598187][T21021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.35727'. [ 3420.629242][T21027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.35728'. [ 3420.664812][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35729'. [ 3420.818591][T21038] syzkaller0: entered promiscuous mode [ 3420.824525][T21038] syzkaller0: entered allmulticast mode [ 3420.933019][T21044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35736'. [ 3421.032908][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35740'. [ 3421.381776][T21074] loop7: detected capacity change from 0 to 256 [ 3421.448408][T21076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.35747'. [ 3421.474755][T21082] netlink: 'syz.7.35748': attribute type 5 has an invalid length. [ 3421.502188][T21084] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3421.514570][T21086] bridge0: port 3(syz_tun) entered blocking state [ 3421.521491][T21086] bridge0: port 3(syz_tun) entered disabled state [ 3421.528305][T21086] syz_tun: entered allmulticast mode [ 3421.536854][T21086] syz_tun: entered promiscuous mode [ 3421.543733][T21086] bridge0: port 3(syz_tun) entered blocking state [ 3421.550442][T21086] bridge0: port 3(syz_tun) entered forwarding state [ 3421.647252][T21101] loop9: detected capacity change from 0 to 128 [ 3421.661992][T21101] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3421.675368][T21101] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3421.704994][T18773] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3421.783192][T21109] netlink: 'syz.9.35760': attribute type 5 has an invalid length. [ 3421.886060][T21114] syzkaller0: entered promiscuous mode [ 3421.912190][T21114] syzkaller0: entered allmulticast mode [ 3422.002350][T21121] xt_hashlimit: size too large, truncated to 1048576 [ 3422.247910][T21142] loop4: detected capacity change from 0 to 512 [ 3422.265552][T21137] xt_hashlimit: size too large, truncated to 1048576 [ 3422.282950][T21142] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 3422.303185][T21142] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.35774: corrupted in-inode xattr: e_value size too large [ 3422.337989][T21142] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 3422.338973][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 3422.354854][ C1] EXT4-fs (loop4): initial error at time 1775662990: ext4_iget_extra_inode:5040: inode 15 [ 3422.355979][T21142] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.35774: couldn't read orphan inode 15 (err -117) [ 3422.364987][ C1] EXT4-fs (loop4): last error at time 1775662990: ext4_iget_extra_inode:5040: inode 15 [ 3422.397281][T21142] loop4: lost filesystem error report for type 5 error -117 [ 3422.399931][T21142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3423.140373][T21178] syzkaller1: entered promiscuous mode [ 3423.157290][T21178] syzkaller1: entered allmulticast mode [ 3423.165846][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3423.181470][T21181] vhci_hcd vhci_hcd.0: invalid port number 0 [ 3423.249383][T21187] syzkaller0: entered promiscuous mode [ 3423.258776][T21189] loop4: detected capacity change from 0 to 512 [ 3423.266235][T21187] syzkaller0: entered allmulticast mode [ 3423.286639][T21189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3423.337055][T21189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3423.361766][T21189] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3423.606294][T21205] __nla_validate_parse: 11 callbacks suppressed [ 3423.606310][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35796'. [ 3423.746910][T21208] loop7: detected capacity change from 0 to 512 [ 3423.784989][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3423.934262][T21208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3423.976902][T21208] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3423.985670][T21212] loop4: detected capacity change from 0 to 4096 [ 3423.999548][T21212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3424.064725][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3424.263285][ T28] audit: type=1400 audit(1775662991.971:5975): avc: denied { map } for pid=21223 comm="syz.9.35804" path="socket:[585957]" dev="sockfs" ino=585957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3424.288387][ T28] audit: type=1400 audit(1775662991.971:5976): avc: denied { read accept } for pid=21223 comm="syz.9.35804" path="socket:[585957]" dev="sockfs" ino=585957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3424.564707][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3425.038694][T21257] netlink: 'syz.4.35816': attribute type 4 has an invalid length. [ 3425.271504][T21270] syzkaller0: entered promiscuous mode [ 3425.277281][T21270] syzkaller0: entered allmulticast mode [ 3425.789418][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.35826'. [ 3426.317806][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.35831'. [ 3426.441297][T21300] xt_hashlimit: size too large, truncated to 1048576 [ 3426.769703][T21309] usb usb8: usbfs: process 21309 (syz.9.35837) did not claim interface 0 before use [ 3426.871866][T21319] loop7: detected capacity change from 0 to 1024 [ 3426.880630][T21319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3426.900042][T21319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 3426.908508][T21319] System zones: 0-1, 3-36 [ 3426.919616][T21319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3427.001488][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35843'. [ 3427.051242][T21329] loop5: detected capacity change from 0 to 512 [ 3427.090484][T21329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 3427.103950][T21329] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3427.144702][ T28] audit: type=1400 audit(1775662994.851:5977): avc: denied { reparent } for pid=21328 comm="syz.5.35845" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3427.203254][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 3427.219063][ T28] audit: type=1400 audit(1775662994.881:5978): avc: denied { create } for pid=21328 comm="syz.5.35845" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3427.577761][T21350] xt_hashlimit: size too large, truncated to 1048576 [ 3427.672452][T21355] loop6: detected capacity change from 0 to 1024 [ 3427.679501][T21355] EXT4-fs: Ignoring removed bh option [ 3427.685127][T21355] EXT4-fs: Ignoring removed oldalloc option [ 3427.691185][T21355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3427.762463][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3427.805825][T21358] loop7: detected capacity change from 0 to 512 [ 3427.818304][T21358] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 3427.830567][T21358] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 3427.844360][T21358] EXT4-fs (loop7): 1 truncate cleaned up [ 3427.857913][T21358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3427.897258][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3427.936076][T21366] syzkaller0: entered promiscuous mode [ 3427.942115][T21366] syzkaller0: entered allmulticast mode [ 3427.951813][T21370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3427.960654][T21370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3427.964310][T21368] xt_hashlimit: size too large, truncated to 1048576 [ 3428.039317][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3428.049023][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3428.751309][T21389] xt_hashlimit: size too large, truncated to 1048576 [ 3428.969636][T21401] syzkaller0: entered promiscuous mode [ 3428.975526][T21401] syzkaller0: entered allmulticast mode [ 3429.127060][T21414] netlink: 92 bytes leftover after parsing attributes in process `syz.5.35876'. [ 3429.171481][T21419] netlink: 'syz.5.35879': attribute type 10 has an invalid length. [ 3429.210229][T21419] team0: Port device dummy0 added [ 3429.462728][T21445] loop5: detected capacity change from 0 to 1024 [ 3429.470717][T21445] EXT4-fs: Ignoring removed mblk_io_submit option [ 3429.479210][T21445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3429.490150][T21445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3429.525969][T21449] batadv_slave_0: entered promiscuous mode [ 3429.532799][T21448] batadv_slave_0: left promiscuous mode [ 3429.589301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3429.642672][T21458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.35893'. [ 3429.759481][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3429.921961][T21472] netlink: 'syz.5.35899': attribute type 4 has an invalid length. [ 3430.800009][T21500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3430.821593][T21500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3430.871780][T21506] netlink: 132 bytes leftover after parsing attributes in process `syz.6.35912'. [ 3430.906654][T21510] netlink: 'syz.5.35913': attribute type 4 has an invalid length. [ 3430.928550][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35915'. [ 3431.023315][T21519] loop5: detected capacity change from 0 to 512 [ 3431.032533][T21519] EXT4-fs: Ignoring removed nobh option [ 3431.051248][T21519] EXT4-fs: Ignoring removed orlov option [ 3431.057182][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.35920'. [ 3431.071929][T21519] EXT4-fs error (device loop5): __ext4_iget:5393: inode #11: block 1: comm syz.5.35918: invalid block [ 3431.083011][T21519] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 3431.083165][T21519] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.35918: couldn't read orphan inode 11 (err -117) [ 3431.092495][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 3431.092533][ C0] EXT4-fs (loop5): initial error at time 1775662998: __ext4_iget:5393: inode 11: block 1 [ 3431.092561][ C0] EXT4-fs (loop5): last error at time 1775662998: __ext4_iget:5393: inode 11: block 1 [ 3431.130753][T21519] loop5: lost filesystem error report for type 5 error -117 [ 3431.131355][T21519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3431.166759][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3431.434657][T21535] netlink: 132 bytes leftover after parsing attributes in process `syz.7.35924'. [ 3431.615461][T21540] netlink: 'syz.9.35926': attribute type 4 has an invalid length. [ 3431.626475][T21542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3431.635361][T21542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3431.790189][T21552] xt_hashlimit: size too large, truncated to 1048576 [ 3432.009889][T21558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.35932'. [ 3432.061734][T20333] Bluetooth: hci0: Frame reassembly failed (-84) [ 3432.181703][T21569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3432.190326][T21569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3432.555173][T21574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3432.564710][T21574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3432.895093][T21599] loop7: detected capacity change from 0 to 128 [ 3432.913949][T21599] bio_check_eod: 326 callbacks suppressed [ 3432.913967][T21599] syz.7.35948: attempt to access beyond end of device [ 3432.913967][T21599] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 3433.119535][T21611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.130505][T21611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3433.230701][T21617] netlink: 'syz.6.35955': attribute type 10 has an invalid length. [ 3433.243343][T21617] team0: Port device dummy0 added [ 3433.702384][T21636] netlink: 'syz.9.35961': attribute type 13 has an invalid length. [ 3433.730186][T21634] bridge0: port 3(syz_tun) entered disabled state [ 3433.770238][T21636] netlink: 'syz.9.35961': attribute type 17 has an invalid length. [ 3433.801171][T21634] bridge0: port 2(bridge_slave_1) entered disabled state [ 3433.808708][T21634] bridge0: port 1(bridge_slave_0) entered disabled state [ 3433.946024][T21634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3433.958606][T21634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3434.139294][ T5924] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3434.202084][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35963'. [ 3434.257373][ T28] audit: type=1400 audit(1775663001.961:5979): avc: denied { getopt } for pid=21668 comm="syz.5.35964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3434.327198][T21636] bridge0: port 3(syz_tun) entered blocking state [ 3434.334104][T21636] bridge0: port 3(syz_tun) entered forwarding state [ 3434.346618][T21636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3434.356000][T21636] 8021q: adding VLAN 0 to HW filter on device team0 [ 3434.380803][T21636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3434.441992][T12924] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3434.470502][T12924] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3434.493728][T21650] syzkaller0: entered promiscuous mode [ 3434.502994][T21650] syzkaller0: entered allmulticast mode [ 3434.512799][T21674] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3434.576945][T21678] netlink: 'syz.5.35968': attribute type 10 has an invalid length. [ 3434.696107][T12924] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3434.707738][T12924] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3435.190709][T21696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35974'. [ 3435.474906][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.35976'. [ 3435.560876][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.35976'. [ 3435.672130][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35980'. [ 3435.675708][T21711] loop9: detected capacity change from 0 to 4096 [ 3435.689271][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35980'. [ 3435.698760][T21711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3435.703707][T21716] syzkaller0: entered promiscuous mode [ 3435.712745][T21711] EXT4-fs (loop9): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 3435.713195][T21716] syzkaller0: entered allmulticast mode [ 3435.731333][T21711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3435.759251][T21714] bond0: entered promiscuous mode [ 3435.764452][T21714] bond_slave_0: entered promiscuous mode [ 3435.772120][T21714] bond_slave_1: entered promiscuous mode [ 3435.779763][T21714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3435.830985][T21721] netlink: 'syz.4.35982': attribute type 4 has an invalid length. [ 3435.897823][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3435.903674][T21729] loop4: detected capacity change from 0 to 1024 [ 3435.939336][T21729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 3435.971073][T21729] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3435.997458][T21729] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.35987: lblock 0 mapped to illegal pblock 0 (length 1) [ 3436.012320][T21729] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 3436.024925][T21729] EXT4-fs (loop4): This should not happen!! Data will be lost [ 3436.024925][T21729] [ 3436.238622][T21744] loop9: detected capacity change from 0 to 128 [ 3436.246647][T21744] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 3436.273229][T21744] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 3436.454171][T21748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3436.522179][T21748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.566640][T21719] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 3436.969833][T21752] syzkaller0: entered promiscuous mode [ 3436.979220][T21752] syzkaller0: entered allmulticast mode [ 3437.030073][T13366] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 3437.043673][T13366] EXT4-fs (loop4): This should not happen!! Data will be lost [ 3437.043673][T13366] [ 3437.053786][T13366] EXT4-fs (loop4): Total free blocks count 0 [ 3437.063941][T13366] EXT4-fs (loop4): Free/Dirty block details [ 3437.077028][T21746] loop7: detected capacity change from 0 to 128 [ 3437.083832][T13366] EXT4-fs (loop4): free_blocks=0 [ 3437.105864][T13366] EXT4-fs (loop4): dirty_blocks=3520 [ 3437.113755][T21746] vfat: Unknown parameter '184467440737095516150177777777777777777777700000000000000000006%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 3437.151364][T13366] EXT4-fs (loop4): Block reservation details [ 3437.286701][T18414] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 3437.755852][T21746] lo speed is unknown, defaulting to 1000 [ 3437.883631][T21762] xt_hashlimit: size too large, truncated to 1048576 [ 3437.958810][T21765] netlink: 'syz.4.35995': attribute type 4 has an invalid length. [ 3438.136953][T21777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3438.146514][T21777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3438.349026][T21787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3438.361509][T21787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3438.380172][T21788] loop5: detected capacity change from 0 to 128 [ 3438.754659][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36008'. [ 3438.842587][T21801] loop6: detected capacity change from 0 to 2048 [ 3438.850093][T21801] EXT4-fs: Ignoring removed bh option [ 3438.856397][T21801] EXT4-fs: Ignoring removed mblk_io_submit option [ 3438.951073][T21813] xt_hashlimit: size too large, truncated to 1048576 [ 3438.958840][T21810] netlink: 'syz.6.36015': attribute type 32 has an invalid length. [ 3438.972665][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36015'. [ 3438.993642][T21810] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3439.283846][T21830] loop4: detected capacity change from 0 to 256 [ 3439.300181][T21830] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 3439.309439][T21830] FAT-fs (loop4): Filesystem has been set read-only [ 3439.769493][T21870] loop7: detected capacity change from 0 to 512 [ 3439.791824][T21870] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 3439.809027][T21870] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.36035: corrupted in-inode xattr: e_value size too large [ 3439.839036][T21870] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 3439.840303][T21870] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.36035: couldn't read orphan inode 15 (err -117) [ 3439.850499][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 3439.850520][ C1] EXT4-fs (loop7): initial error at time 1775663007: ext4_iget_extra_inode:5040: inode 15 [ 3439.850559][ C1] EXT4-fs (loop7): last error at time 1775663007: ext4_iget_extra_inode:5040: inode 15 [ 3439.889980][T21870] loop7: lost filesystem error report for type 5 error -117 [ 3439.895853][T21870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3439.932934][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36038'. [ 3439.960846][T21879] bond0: entered promiscuous mode [ 3439.973780][T21879] bond_slave_0: entered promiscuous mode [ 3439.987426][T21879] bond_slave_1: entered promiscuous mode [ 3439.995541][T21879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3440.515843][T21898] loop6: detected capacity change from 0 to 512 [ 3440.560412][T21900] loop6: detected capacity change from 0 to 256 [ 3440.647184][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3440.763378][T21911] loop4: detected capacity change from 0 to 2048 [ 3440.788368][T21911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3440.826930][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.9.36050'. [ 3440.852556][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3441.147266][T21939] lo speed is unknown, defaulting to 1000 [ 3441.339444][T21939] loop5: detected capacity change from 0 to 512 [ 3441.410726][T21939] EXT4-fs (loop5): 1 truncate cleaned up [ 3441.417457][T21939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3441.692360][T21945] loop9: detected capacity change from 0 to 512 [ 3441.935797][T21945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3441.995383][T21945] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3442.058539][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36057'. [ 3442.140990][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3442.184729][T21960] loop7: detected capacity change from 0 to 512 [ 3442.213363][T21960] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 3442.241012][T21960] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.36063: corrupted in-inode xattr: e_value size too large [ 3442.268986][T21960] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 3442.269108][T21960] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.36063: couldn't read orphan inode 15 (err -117) [ 3442.290331][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 3442.290354][ C1] EXT4-fs (loop7): initial error at time 1775663009: ext4_iget_extra_inode:5040: inode 15 [ 3442.290383][ C1] EXT4-fs (loop7): last error at time 1775663009: ext4_iget_extra_inode:5040: inode 15 [ 3442.367557][T21960] loop7: lost filesystem error report for type 5 error -117 [ 3442.370103][T21960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3442.643141][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3442.717758][T21969] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 3442.734938][T21969] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 3442.746589][T21969] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 3442.758055][T21969] System zones: 0-2, 18-18, 34-35 [ 3442.765286][T21969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 3442.811160][T19029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3442.970802][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36066'. [ 3442.992590][T21972] bond0: entered promiscuous mode [ 3443.005528][T21972] bond_slave_0: entered promiscuous mode [ 3443.011569][T21972] bond_slave_1: entered promiscuous mode [ 3443.019898][T21972] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3443.034580][T21975] bridge0: port 4(erspan0) entered blocking state [ 3443.061922][T21975] bridge0: port 4(erspan0) entered disabled state [ 3443.080496][T21975] erspan0: entered allmulticast mode [ 3443.089314][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3443.092292][T21975] erspan0: entered promiscuous mode [ 3443.108923][T21975] bridge0: port 4(erspan0) entered blocking state [ 3443.115607][T21975] bridge0: port 4(erspan0) entered forwarding state [ 3443.138495][T21986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3443.152188][T21986] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3443.174997][T21990] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 3443.208353][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3443.218009][T21990] EXT4-fs (loop9): orphan cleanup on readonly fs [ 3443.227621][T21990] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #17: comm syz.9.36071: inode has both inline data and extents flags [ 3443.241416][T21990] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 3443.245182][T21990] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.36071: couldn't read orphan inode 17 (err -117) [ 3443.254535][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 3443.254562][ C1] EXT4-fs (loop9): initial error at time 1775663010: ext4_orphan_get:1397: inode 17 [ 3443.254586][ C1] EXT4-fs (loop9): last error at time 1775663010: ext4_orphan_get:1397: inode 17 [ 3443.292271][T21990] loop9: lost filesystem error report for type 5 error -117 [ 3443.293086][T21990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3443.321225][T21998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3443.346546][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3444.217609][T22009] set_capacity_and_notify: 4 callbacks suppressed [ 3444.217624][T22009] loop5: detected capacity change from 0 to 2048 [ 3444.273135][T22013] syzkaller0: entered promiscuous mode [ 3444.278851][T22013] syzkaller0: entered allmulticast mode [ 3444.288329][T22009] EXT4-fs: Ignoring removed bh option [ 3444.314879][T22009] EXT4-fs: Ignoring removed mblk_io_submit option [ 3444.330396][T22009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3444.342818][T22009] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3444.368806][ T28] audit: type=1400 audit(1775663012.071:5980): avc: denied { lock } for pid=22008 comm="syz.5.36076" path="/198/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3444.392630][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3444.413908][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3444.473770][T22017] syzkaller0: entered promiscuous mode [ 3444.482428][T22017] syzkaller0: entered allmulticast mode [ 3444.507375][T22021] syzkaller0: entered promiscuous mode [ 3444.513506][T22021] syzkaller0: entered allmulticast mode [ 3444.717365][T22035] loop9: detected capacity change from 0 to 512 [ 3444.770030][T22035] EXT4-fs (loop9): 1 truncate cleaned up [ 3444.776307][T22035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3444.803162][T22035] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.36077: bg 0: block 465: padding at end of block bitmap is not set [ 3444.819008][T22035] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 3444.831445][T22035] EXT4-fs (loop9): This should not happen!! Data will be lost [ 3444.831445][T22035] [ 3444.841465][T22035] EXT4-fs (loop9): Total free blocks count 0 [ 3444.847744][T22035] EXT4-fs (loop9): Free/Dirty block details [ 3444.853820][T22035] EXT4-fs (loop9): free_blocks=0 [ 3444.858864][T22035] EXT4-fs (loop9): dirty_blocks=10 [ 3444.864033][T22035] EXT4-fs (loop9): Block reservation details [ 3444.870395][T22035] EXT4-fs (loop9): i_reserved_data_blocks=10 [ 3445.262437][T22032] lo speed is unknown, defaulting to 1000 [ 3445.930999][T22055] loop5: detected capacity change from 0 to 4096 [ 3446.166604][T18773] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 3446.166610][T22048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3446.167552][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3446.178249][T22048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.250335][T22062] random: crng reseeded on system resumption [ 3446.422479][T22074] syzkaller0: entered promiscuous mode [ 3446.428144][T22074] syzkaller0: entered allmulticast mode [ 3447.609564][T22116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3447.629478][T22116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.683391][T22119] lo speed is unknown, defaulting to 1000 [ 3447.720780][T22121] loop9: detected capacity change from 0 to 256 [ 3447.736408][T22121] FAT-fs (loop9): bogus number of FAT sectors [ 3447.754252][T22121] FAT-fs (loop9): Can't find a valid FAT filesystem [ 3447.923674][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36116'. [ 3448.204414][T22135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36119'. [ 3448.337951][T22140] loop4: detected capacity change from 0 to 2048 [ 3448.371690][T22135] bridge0: port 3(syz_tun) entered disabled state [ 3448.384144][T22140] loop4: p1 p2 p3 [ 3448.456391][T22135] syz_tun (unregistering): left allmulticast mode [ 3448.514845][T22135] syz_tun (unregistering): left promiscuous mode [ 3448.556215][T22135] bridge0: port 3(syz_tun) entered disabled state [ 3448.653598][T22145] sit0: entered promiscuous mode [ 3448.711560][T22145] netlink: 'syz.6.36123': attribute type 1 has an invalid length. [ 3448.732143][T22145] netlink: 1 bytes leftover after parsing attributes in process `syz.6.36123'. [ 3448.748087][T22149] loop9: detected capacity change from 0 to 256 [ 3448.753073][T22147] loop7: detected capacity change from 0 to 1024 [ 3448.761507][T22149] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3448.779807][T22147] EXT4-fs: Ignoring removed bh option [ 3448.794317][T22147] EXT4-fs: Ignoring removed oldalloc option [ 3448.802359][T22147] EXT4-fs: Ignoring removed nobh option [ 3448.808588][T22147] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 3448.808588][T22147] [ 3448.928289][T22149] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 3448.949020][T22149] FAT-fs (loop9): Filesystem has been set read-only [ 3448.959022][T22149] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 3449.030433][T22161] loop6: detected capacity change from 0 to 128 [ 3449.037511][T22161] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 3449.085663][T22161] lo speed is unknown, defaulting to 1000 [ 3449.376256][ T28] audit: type=1400 audit(1775663016.771:5981): avc: denied { read } for pid=22150 comm="syz.6.36126" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3449.450141][ T28] audit: type=1400 audit(1775663016.771:5982): avc: denied { open } for pid=22150 comm="syz.6.36126" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3449.459815][T22148] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 3449.515491][T22148] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 3449.556435][ T28] audit: type=1400 audit(1775663016.771:5983): avc: denied { ioctl } for pid=22150 comm="syz.6.36126" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3449.573315][T22148] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 3449.592356][T22148] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 3450.136267][T22191] netlink: 'syz.9.36134': attribute type 4 has an invalid length. [ 3450.769683][T20333] Bluetooth: hci0: Frame reassembly failed (-84) [ 3451.353330][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36140'. [ 3451.353420][T22208] erspan0: left allmulticast mode [ 3451.353439][T22208] erspan0: left promiscuous mode [ 3451.353812][T22208] bridge0: port 4(erspan0) entered disabled state [ 3451.830382][T22212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36142'. [ 3451.995276][T22208] bridge_slave_1: left allmulticast mode [ 3452.000980][T22208] bridge_slave_1: left promiscuous mode [ 3452.006706][T22208] bridge0: port 2(bridge_slave_1) entered disabled state [ 3452.019846][T22208] bridge_slave_0: left allmulticast mode [ 3452.025789][T22208] bridge_slave_0: left promiscuous mode [ 3452.033126][T22208] bridge0: port 1(bridge_slave_0) entered disabled state [ 3452.157350][T22233] syzkaller0: entered promiscuous mode [ 3452.162972][T22233] syzkaller0: entered allmulticast mode [ 3452.779068][ T5924] Bluetooth: hci0: command 0x1003 tx timeout [ 3452.779835][T21563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3455.543988][T22248] netlink: 16 bytes leftover after parsing attributes in process `syz.9.36154'. [ 3455.553272][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36154'. [ 3455.656409][T22261] syzkaller0: entered promiscuous mode [ 3455.662742][T22261] syzkaller0: entered allmulticast mode [ 3455.684036][T22262] loop5: detected capacity change from 0 to 128 [ 3455.691114][T22262] vfat: Unknown parameter '184467440737095516150177777777777777777777700000000000000000004%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 3456.064876][T22274] netlink: 'syz.9.36160': attribute type 3 has an invalid length. [ 3456.232735][T22262] lo speed is unknown, defaulting to 1000 [ 3457.545147][T22294] netlink: 16 bytes leftover after parsing attributes in process `syz.9.36166'. [ 3457.555452][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36166'. [ 3457.631217][T22296] loop9: detected capacity change from 0 to 128 [ 3457.662359][T22296] EXT4-fs: test_dummy_encryption option not supported [ 3457.682493][T22300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3457.715741][T22300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3458.303292][T22330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3458.313009][T22330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3458.788312][T22357] lo speed is unknown, defaulting to 1000 [ 3458.842554][T22364] loop9: detected capacity change from 0 to 2048 [ 3458.870826][T22364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3458.971482][T22364] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 3458.997619][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3460.095797][T22408] loop5: detected capacity change from 0 to 512 [ 3460.167563][T22408] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 3460.213127][T22408] loop5: detected capacity change from 0 to 512 [ 3460.229524][T22420] lo speed is unknown, defaulting to 1000 [ 3460.249985][T22424] loop9: detected capacity change from 0 to 1024 [ 3460.257700][T22408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3460.309824][T22431] loop4: detected capacity change from 0 to 512 [ 3460.318117][T22424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 3460.334191][T22424] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3460.349472][T22424] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: comm syz.9.36216: lblock 0 mapped to illegal pblock 0 (length 1) [ 3460.363339][T22424] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 3460.365210][T22431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3460.376553][T22424] EXT4-fs (loop9): This should not happen!! Data will be lost [ 3460.376553][T22424] [ 3460.404579][T22424] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: block 3: comm syz.9.36216: lblock 3 mapped to illegal pblock 3 (length 3) [ 3460.419489][T22431] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3460.439002][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3460.449139][T22424] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 3460.482043][T22424] EXT4-fs (loop9): This should not happen!! Data will be lost [ 3460.482043][T22424] [ 3460.517441][T22431] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.36219: resize_inode disabled but reserved GDT blocks non-zero [ 3460.571441][T22447] syzkaller0: entered promiscuous mode [ 3460.591784][T22447] syzkaller0: entered allmulticast mode [ 3460.604028][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3461.273845][ T5243] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 3461.309610][ T5243] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 3461.366216][ T5243] EXT4-fs (loop9): This should not happen!! Data will be lost [ 3461.366216][ T5243] [ 3461.431059][ T5243] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 3461.461881][ T5243] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 1572 with error 28 [ 3461.475018][ T5243] EXT4-fs (loop9): This should not happen!! Data will be lost [ 3461.475018][ T5243] [ 3461.520783][ T5243] EXT4-fs (loop9): Total free blocks count 0 [ 3461.531473][T18773] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 3461.613915][T22480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36235'. [ 3462.219322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3462.513612][T22505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3462.550324][T22505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3463.609158][T22526] syzkaller0: entered promiscuous mode [ 3463.614867][T22526] syzkaller0: entered allmulticast mode [ 3463.633806][T22524] loop5: detected capacity change from 0 to 4096 [ 3463.674288][T22524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3463.931940][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3463.986229][T22538] syzkaller0: entered promiscuous mode [ 3464.002084][T22538] syzkaller0: entered allmulticast mode [ 3464.173344][T22544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3464.196664][T22544] batadv_slave_0: entered promiscuous mode [ 3464.206397][T22548] netlink: 'syz.7.36260': attribute type 4 has an invalid length. [ 3464.347151][T22557] netlink: 'syz.7.36263': attribute type 4 has an invalid length. [ 3464.450498][T22569] netlink: 'syz.5.36268': attribute type 4 has an invalid length. [ 3464.461827][T22569] netlink: 152 bytes leftover after parsing attributes in process `syz.5.36268'. [ 3464.485091][T22569] .`: renamed from bond0 (while UP) [ 3464.508485][T22569] netlink: 68 bytes leftover after parsing attributes in process `syz.5.36268'. [ 3464.526214][T22579] netlink: 'syz.6.36273': attribute type 17 has an invalid length. [ 3464.534482][T22579] netlink: 'syz.6.36273': attribute type 16 has an invalid length. [ 3464.542652][T22579] netlink: 152 bytes leftover after parsing attributes in process `syz.6.36273'. [ 3464.572050][T22580] netlink: 'syz.7.36274': attribute type 16 has an invalid length. [ 3464.579953][T22582] netlink: 'syz.6.36275': attribute type 10 has an invalid length. [ 3464.590880][T22580] netlink: 152 bytes leftover after parsing attributes in process `syz.7.36274'. [ 3464.605774][T22585] netlink: 'syz.5.36276': attribute type 4 has an invalid length. [ 3464.713910][T22600] netlink: 12 bytes leftover after parsing attributes in process `syz.7.36283'. [ 3464.743607][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36285'. [ 3464.772452][T22606] netlink: 132 bytes leftover after parsing attributes in process `syz.5.36287'. [ 3464.816210][T22611] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.36289'. [ 3464.838244][T22614] netlink: 'syz.7.36291': attribute type 4 has an invalid length. [ 3464.939269][T22620] lo speed is unknown, defaulting to 1000 [ 3464.939256][T22624] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3464.969203][T22627] sit0: entered allmulticast mode [ 3465.202306][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36301'. [ 3465.336413][T22651] netlink: 'syz.5.36306': attribute type 10 has an invalid length. [ 3465.431464][T22655] SELinux: Context : is not valid (left unmapped). [ 3465.445250][T22655] loop4: detected capacity change from 0 to 512 [ 3465.467657][T22648] sctp: [Deprecated]: syz.6.36305 (pid 22648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3465.467657][T22648] Use struct sctp_sack_info instead [ 3465.511791][T22655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3465.538281][ T28] audit: type=1400 audit(1775663033.141:5984): avc: denied { relabelto } for pid=22643 comm="syz.4.36303" name="rdma.current" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 3465.702589][ T28] audit: type=1400 audit(1775663033.151:5985): avc: denied { associate } for pid=22643 comm="syz.4.36303" name="rdma.current" dev="tmpfs" ino=1252 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 3465.855919][T22655] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.36303: invalid indirect mapped block 256 (level 2) [ 3465.870019][T22655] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 3465.876627][T22655] EXT4-fs (loop4): 2 truncates cleaned up [ 3465.886388][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 3465.886411][ C1] EXT4-fs (loop4): initial error at time 1775663033: ext4_free_branches:1023: inode 11 [ 3465.886459][ C1] EXT4-fs (loop4): last error at time 1775663033: ext4_free_branches:1023: inode 11 [ 3465.919783][T22655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3465.954577][T22651] 8021q: adding VLAN 0 to HW filter on device .` [ 3465.964559][T22662] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 3465.965151][T22651] team0: Device .` failed to register rx_handler [ 3466.239741][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3466.287019][T22668] syzkaller0: entered promiscuous mode [ 3466.305117][T22668] syzkaller0: entered allmulticast mode [ 3466.493498][T22675] geneve1: entered promiscuous mode [ 3466.601318][T22675] .`: (slave geneve1): Enslaving as an active interface with an up link [ 3466.707882][ T28] audit: type=1400 audit(1775663034.411:5986): avc: denied { unlink } for pid=18414 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 3466.763674][T22685] netlink: 156 bytes leftover after parsing attributes in process `syz.6.36313'. [ 3466.795239][T22686] netlink: 152 bytes leftover after parsing attributes in process `syz.4.36312'. [ 3466.877149][T22686] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3466.945239][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36316'. [ 3466.991119][T22703] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.36318'. [ 3467.039356][T22706] netlink: 152 bytes leftover after parsing attributes in process `syz.9.36319'. [ 3467.092237][T22713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36324'. [ 3467.162724][T22706] .`: renamed from bond0 (while UP) [ 3467.196891][T22717] syzkaller0: entered promiscuous mode [ 3467.202581][T22717] syzkaller0: entered allmulticast mode [ 3467.652208][T22713] team0: Port device vlan0 added [ 3467.730428][T22732] lo speed is unknown, defaulting to 1000 [ 3467.775653][T22731] netlink: 207496 bytes leftover after parsing attributes in process `syz.7.36328'. [ 3467.821884][T22738] syzkaller0: entered promiscuous mode [ 3467.828192][T22738] syzkaller0: entered allmulticast mode [ 3467.942554][T22741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.36332'. [ 3467.947091][T22743] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 3467.962985][T22745] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.36334'. [ 3467.985816][T22743] netlink: 830 bytes leftover after parsing attributes in process `syz.4.36333'. [ 3468.093590][T22760] netlink: zone id is out of range [ 3468.110924][T22760] netlink: zone id is out of range [ 3468.121238][T22760] netlink: get zone limit has 4 unknown bytes [ 3468.209854][T22769] syzkaller0: entered promiscuous mode [ 3468.220986][T22769] syzkaller0: entered allmulticast mode [ 3468.282589][T22773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3468.371198][T22782] lo speed is unknown, defaulting to 1000 [ 3468.418627][T22788] syzkaller0: entered promiscuous mode [ 3468.450887][T22788] syzkaller0: entered allmulticast mode [ 3468.493340][T22792] bridge0: port 2(bridge_slave_1) entered disabled state [ 3468.501701][T22792] bridge0: port 1(bridge_slave_0) entered disabled state [ 3468.517200][T22792] bridge0: port 2(bridge_slave_1) entered blocking state [ 3468.524737][T22792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3468.532654][T22792] bridge0: port 1(bridge_slave_0) entered blocking state [ 3468.540058][T22792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3468.555388][T22792] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3468.701892][T22804] syzkaller0: entered promiscuous mode [ 3468.710919][T22804] syzkaller0: entered allmulticast mode [ 3468.972120][T22822] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 3469.032879][T22821] : renamed from team_slave_1 (while UP) [ 3469.161397][T22834] syzkaller0: entered promiscuous mode [ 3469.167443][T22834] syzkaller0: entered allmulticast mode [ 3469.290906][T22853] validate_nla: 8 callbacks suppressed [ 3469.290923][T22853] netlink: 'syz.7.36374': attribute type 6 has an invalid length. [ 3469.392270][T22865] netlink: 'syz.7.36378': attribute type 4 has an invalid length. [ 3469.442860][T22868] syzkaller0: entered promiscuous mode [ 3469.459082][T22868] syzkaller0: entered allmulticast mode [ 3469.494212][T22873] syzkaller0: entered promiscuous mode [ 3469.506755][T22873] syzkaller0: entered allmulticast mode [ 3469.523511][T22871] lo speed is unknown, defaulting to 1000 [ 3470.086721][T22900] syzkaller0: entered promiscuous mode [ 3470.092444][T22900] syzkaller0: entered allmulticast mode [ 3470.196786][T22902] netlink: 'syz.5.36390': attribute type 2 has an invalid length. [ 3470.232775][T22902] netlink: 'syz.5.36390': attribute type 1 has an invalid length. [ 3470.259051][T22902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3470.332914][T22908] : port 1(ip6gretap0) entered blocking state [ 3470.344788][T22908] : port 1(ip6gretap0) entered disabled state [ 3470.363387][T22908] ip6gretap0: entered allmulticast mode [ 3470.386848][T22908] ip6gretap0: entered promiscuous mode [ 3470.414995][T22912] syzkaller0: entered promiscuous mode [ 3470.420905][T22912] syzkaller0: entered allmulticast mode [ 3470.482055][T22910] ip6gretap0: left allmulticast mode [ 3470.491689][T22910] ip6gretap0: left promiscuous mode [ 3470.506355][T22920] netlink: 'syz.5.36397': attribute type 32 has an invalid length. [ 3470.516517][T22910] : port 1(ip6gretap0) entered disabled state [ 3470.710803][T22937] syzkaller0: entered promiscuous mode [ 3470.716849][T22937] syzkaller0: entered allmulticast mode [ 3470.902333][T22948] netlink: 'syz.6.36406': attribute type 10 has an invalid length. [ 3470.914616][T22948] hsr0: entered promiscuous mode [ 3470.923036][T22948] bridge0: port 3(hsr0) entered blocking state [ 3470.930564][T22948] bridge0: port 3(hsr0) entered disabled state [ 3470.937742][T22948] hsr0: entered allmulticast mode [ 3470.956353][T22948] hsr_slave_0: entered allmulticast mode [ 3470.962612][T22948] hsr_slave_1: entered allmulticast mode [ 3470.972244][T22948] bridge0: port 3(hsr0) entered blocking state [ 3470.978684][T22948] bridge0: port 3(hsr0) entered forwarding state [ 3471.223209][T22968] syzkaller0: entered promiscuous mode [ 3471.229084][T22968] syzkaller0: entered allmulticast mode [ 3471.314413][T22976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3471.401882][T22980] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 3471.521757][T22990] : port 1(gretap0) entered blocking state [ 3471.529485][T22990] : port 1(gretap0) entered disabled state [ 3471.542122][T22990] gretap0: entered allmulticast mode [ 3471.549709][T22990] gretap0: entered promiscuous mode [ 3471.559721][T22990] : port 2(veth0_to_team) entered blocking state [ 3471.566756][T22990] : port 2(veth0_to_team) entered disabled state [ 3471.574234][T22990] veth0_to_team: entered allmulticast mode [ 3471.581898][T22990] veth0_to_team: entered promiscuous mode [ 3471.648415][T23000] syzkaller0: entered promiscuous mode [ 3471.654538][T23000] syzkaller0: entered allmulticast mode [ 3472.744275][T23025] netlink: 'syz.7.36438': attribute type 10 has an invalid length. [ 3472.752803][T23025] __nla_validate_parse: 16 callbacks suppressed [ 3472.752817][T23025] netlink: 40 bytes leftover after parsing attributes in process `syz.7.36438'. [ 3473.480867][T23025] team0: entered promiscuous mode [ 3473.501140][T23025] team_slave_0: entered promiscuous mode [ 3473.507365][T23025] team_slave_1: entered promiscuous mode [ 3473.529217][T23025] team0: entered allmulticast mode [ 3473.535288][T23025] team_slave_0: entered allmulticast mode [ 3473.541573][T23025] team_slave_1: entered allmulticast mode [ 3473.549370][T23025] bridge0: port 3(team0) entered blocking state [ 3473.556285][T23025] bridge0: port 3(team0) entered disabled state [ 3473.563926][T23025] bridge0: port 3(team0) entered blocking state [ 3473.570559][T23025] bridge0: port 3(team0) entered forwarding state [ 3474.199574][T23103] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 3474.206252][T23103] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3474.250285][T23103] vhci_hcd vhci_hcd.0: Device attached [ 3474.519102][T21642] usb 12-1: SetAddress Request (2) to port 0 [ 3474.528008][T21642] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3474.663805][T23104] vhci_hcd: connection reset by peer [ 3474.697622][ T6225] vhci_hcd vhci_hcd.5: stop threads [ 3474.710657][ T6225] vhci_hcd vhci_hcd.5: release socket [ 3474.729105][ T6225] vhci_hcd vhci_hcd.5: disconnect device [ 3474.806481][T23148] netlink: 399 bytes leftover after parsing attributes in process `syz.7.36492'. [ 3474.843869][T23148] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 3474.886961][T23156] netlink: 132 bytes leftover after parsing attributes in process `syz.4.36495'. [ 3474.923357][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36496'. [ 3474.946344][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36496'. [ 3475.263778][T23183] netlink: 132 bytes leftover after parsing attributes in process `syz.7.36507'. [ 3475.412477][T23197] netlink: 16 bytes leftover after parsing attributes in process `syz.9.36513'. [ 3475.504297][T23210] netlink: 132 bytes leftover after parsing attributes in process `syz.5.36519'. [ 3477.310714][T15532] lec:lec_start_xmit: lec0:No lecd attached [ 3478.524040][T23233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36526'. [ 3478.691483][ T28] audit: type=1400 audit(1775663046.401:5987): avc: denied { module_load } for pid=23219 comm="syz.4.36521" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 3478.809229][ T28] audit: type=1326 audit(1775663046.511:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23224 comm="syz.7.36522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3478.854154][ T28] audit: type=1326 audit(1775663046.511:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23224 comm="syz.7.36522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3478.892415][ T28] audit: type=1326 audit(1775663046.571:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23224 comm="syz.7.36522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3478.926113][ T28] audit: type=1326 audit(1775663046.571:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23224 comm="syz.7.36522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3478.965240][ T28] audit: type=1326 audit(1775663046.571:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23224 comm="syz.7.36522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3479.011568][T23259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.36537'. [ 3479.090908][T23266] netlink: 'syz.5.36539': attribute type 1 has an invalid length. [ 3479.152477][T23266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3479.170198][T23266] bond0: (slave bond1): making interface the new active one [ 3479.178021][T23266] bond0: (slave bond1): Enslaving as an active interface with an up link [ 3479.220920][T23281] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 3479.249533][T23266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.36539'. [ 3479.269135][T23266] bond0: entered promiscuous mode [ 3479.275340][T23266] bond1: entered promiscuous mode [ 3479.289368][T23266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3479.349906][T23291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.36549'. [ 3479.579164][T21642] usb 12-1: device descriptor read/8, error -110 [ 3479.699072][T21642] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3479.720149][T23342] netlink: 16 bytes leftover after parsing attributes in process `syz.9.36573'. [ 3479.743921][T21642] usb 12-1: enqueue for inactive port 0 [ 3479.762843][T21642] usb 12-1: enqueue for inactive port 0 [ 3479.786206][T21642] usb 12-1: enqueue for inactive port 0 [ 3479.990124][T23365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36585'. [ 3480.429066][T23378] netlink: 'syz.6.36590': attribute type 32 has an invalid length. [ 3480.448974][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36590'. [ 3480.469210][T23378] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3480.784621][T23392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36597'. [ 3480.819237][T21642] usb usb12-port1: attempt power cycle [ 3480.970812][T23405] netlink: 'syz.6.36603': attribute type 4 has an invalid length. [ 3480.991008][T23405] netlink: 152 bytes leftover after parsing attributes in process `syz.6.36603'. [ 3481.023675][T23405] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3481.141201][T23421] netlink: 16 bytes leftover after parsing attributes in process `syz.9.36609'. [ 3481.229953][T23427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3481.258816][T23427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3481.376704][T23432] bridge0: port 3(hsr0) entered disabled state [ 3481.383081][T23432] bridge0: port 2(bridge_slave_1) entered disabled state [ 3481.390408][T23432] bridge0: port 1(bridge_slave_0) entered disabled state [ 3481.504154][T23432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3481.527474][T23432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3481.629487][T23432] bond0: left promiscuous mode [ 3481.634477][T23432] bond_slave_0: left promiscuous mode [ 3481.659145][T23432] bond_slave_1: left promiscuous mode [ 3481.676347][T20338] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3481.695683][T20338] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3481.715951][T20338] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3481.739408][T20338] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.268743][T23484] netlink: 'syz.5.36632': attribute type 32 has an invalid length. [ 3482.276923][T23484] bond0: option coupled_control: mode dependency failed, not supported in mode active-backup(1) [ 3482.649215][T21642] usb usb12-port1: unable to enumerate USB device [ 3482.699008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5390 ms [ 3482.707144][ C0] lec:lec_tx_timeout: lec0 [ 3483.229427][T23568] pim6reg1: entered promiscuous mode [ 3483.234867][T23568] pim6reg1: entered allmulticast mode [ 3483.603949][T23572] netlink: 'syz.6.36671': attribute type 32 has an invalid length. [ 3483.697016][T23572] __nla_validate_parse: 2 callbacks suppressed [ 3483.697136][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36671'. [ 3483.829292][T23572] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3484.721569][T23624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3484.731012][T23624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3484.788234][ T28] audit: type=1326 audit(1775663052.491:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23609 comm="syz.6.36691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24edfc819 code=0x7fc00000 [ 3485.349218][ T28] audit: type=1326 audit(1775663053.031:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23609 comm="syz.6.36691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff24edfc819 code=0x7fc00000 [ 3485.487872][ T28] audit: type=1326 audit(1775663053.031:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23609 comm="syz.6.36691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24edfc819 code=0x7fc00000 [ 3485.531120][ T28] audit: type=1326 audit(1775663053.031:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23609 comm="syz.6.36691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24edfc819 code=0x7fc00000 [ 3485.631137][ T28] audit: type=1326 audit(1775663053.031:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23609 comm="syz.6.36691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24edfc819 code=0x7fc00000 [ 3486.628422][T23716] team0: Port device dummy0 removed [ 3486.642798][T23716] bridge_slave_0: left allmulticast mode [ 3486.649774][T23716] bridge_slave_0: left promiscuous mode [ 3486.655656][T23716] bridge0: port 1(bridge_slave_0) entered disabled state [ 3486.663760][T23716] bridge_slave_1: left allmulticast mode [ 3486.669664][T23716] bridge_slave_1: left promiscuous mode [ 3486.675466][T23716] bridge0: port 2(bridge_slave_1) entered disabled state [ 3486.693424][T23716] bond0: (slave bond_slave_0): Releasing backup interface [ 3486.728707][T23716] bond0: (slave bond_slave_1): Releasing backup interface [ 3486.753852][T23716] team0: Port device team_slave_0 removed [ 3486.772196][T23716] team0: Port device team_slave_1 removed [ 3486.784927][T23716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3486.806374][T23716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3486.836617][T23716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3486.928699][T23717] lo speed is unknown, defaulting to 1000 [ 3486.976027][T23740] syzkaller0: entered promiscuous mode [ 3486.999112][T23740] syzkaller0: entered allmulticast mode [ 3487.211894][T23758] netlink: 'syz.6.36745': attribute type 30 has an invalid length. [ 3487.231530][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36745'. [ 3487.248878][T23758] bond0: option arp_missed_max: invalid value (0) [ 3487.255705][T23758] bond0: option arp_missed_max: allowed values 1 - 255 [ 3487.934308][T23787] syzkaller0: entered promiscuous mode [ 3487.941581][T23787] syzkaller0: entered allmulticast mode [ 3488.006988][T23793] tmpfs: Bad value for 'mpol' [ 3488.069355][T23797] netlink: 'syz.6.36764': attribute type 30 has an invalid length. [ 3488.088395][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.36764'. [ 3488.108646][T23797] bond0: option arp_missed_max: invalid value (0) [ 3488.116382][T23797] bond0: option arp_missed_max: allowed values 1 - 255 [ 3488.851967][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36804'. [ 3488.945052][T23891] netdevsim netdevsim7: Direct firmware load for r1 failed with error -2 [ 3489.251148][T23924] netlink: 'syz.7.36824': attribute type 4 has an invalid length. [ 3489.260806][T23924] netlink: 152 bytes leftover after parsing attributes in process `syz.7.36824'. [ 3489.271320][T23924] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3489.523096][T23954] netlink: 'syz.7.36836': attribute type 4 has an invalid length. [ 3489.544090][T23954] netlink: 152 bytes leftover after parsing attributes in process `syz.7.36836'. [ 3489.554605][T23954] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3489.632344][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36841'. [ 3489.873973][T23984] syzkaller0: entered promiscuous mode [ 3489.879760][T23984] syzkaller0: entered allmulticast mode [ 3490.117567][T24012] netlink: 'syz.6.36865': attribute type 3 has an invalid length. [ 3490.479871][T24054] netlink: 'syz.5.36878': attribute type 4 has an invalid length. [ 3490.490992][T24054] netlink: 152 bytes leftover after parsing attributes in process `syz.5.36878'. [ 3490.508261][T24054] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3491.217635][T24139] netlink: 'syz.4.36914': attribute type 32 has an invalid length. [ 3491.225946][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36914'. [ 3491.235652][T24139] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 3492.103854][T24154] syzkaller1: entered promiscuous mode [ 3492.119037][T24154] syzkaller1: entered allmulticast mode [ 3492.338736][T24164] syzkaller0: entered promiscuous mode [ 3492.345337][T24164] syzkaller0: entered allmulticast mode [ 3492.356872][T24164] tipc: Started in network mode [ 3492.367433][T24164] tipc: Node identity 86e6718bbc2, cluster identity 4711 [ 3492.382822][T24164] tipc: Enabled bearer , priority 0 [ 3492.397585][T24164] tipc: Resetting bearer [ 3492.404719][T24163] tipc: Resetting bearer [ 3492.415558][T24163] tipc: Disabling bearer [ 3492.484956][T24169] syzkaller0: entered promiscuous mode [ 3492.490886][T24169] syzkaller0: entered allmulticast mode [ 3492.740995][T24180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3492.759566][T24180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3492.840548][T24191] syzkaller0: entered promiscuous mode [ 3492.846166][T24191] syzkaller0: entered allmulticast mode [ 3492.991763][T24206] netlink: 'syz.9.36942': attribute type 2 has an invalid length. [ 3493.003550][ T28] audit: type=1400 audit(1775663060.711:5998): avc: denied { accept } for pid=24205 comm="syz.9.36942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 3493.252247][T24232] random: crng reseeded on system resumption [ 3493.312921][T24241] 9p: Bad value for 'wfdno' [ 3493.483210][ T28] audit: type=1326 audit(1775663061.191:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.517338][ T28] audit: type=1326 audit(1775663061.191:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.541627][ T28] audit: type=1326 audit(1775663061.221:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.566155][ T28] audit: type=1326 audit(1775663061.221:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.595238][ T28] audit: type=1326 audit(1775663061.221:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.621424][ T28] audit: type=1326 audit(1775663061.221:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.645532][ T28] audit: type=1326 audit(1775663061.221:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.673831][ T28] audit: type=1326 audit(1775663061.221:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3493.697866][ T28] audit: type=1326 audit(1775663061.221:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24250 comm="syz.7.36964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639bc9c819 code=0x7ffc0000 [ 3494.149691][T24287] syzkaller0: entered promiscuous mode [ 3494.155909][T24287] syzkaller0: entered allmulticast mode [ 3494.200143][T24297] random: crng reseeded on system resumption [ 3494.267642][T24301] syzkaller0: entered promiscuous mode [ 3494.653263][T24335] netlink: 16 bytes leftover after parsing attributes in process `syz.7.36999'. [ 3495.551223][T24360] random: crng reseeded on system resumption [ 3495.596822][T24365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.37010'. [ 3495.690096][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3495.699646][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3496.312146][T24395] netlink: 16 bytes leftover after parsing attributes in process `syz.7.37023'. [ 3498.258149][T24418] netlink: 164 bytes leftover after parsing attributes in process `syz.6.37029'. [ 3498.498137][T24424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3498.541291][T24428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37034'. [ 3498.551675][T24424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3499.092456][T24452] netlink: 16 bytes leftover after parsing attributes in process `syz.9.37045'. [ 3499.204518][T24459] lo speed is unknown, defaulting to 1000 [ 3499.399517][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 3499.399863][ T28] audit: type=1400 audit(1775663066.881:6071): avc: denied { setopt } for pid=24445 comm="syz.7.37042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3499.555397][T24466] netlink: 64 bytes leftover after parsing attributes in process `syz.5.37048'. [ 3499.966893][T24471] loop4: detected capacity change from 0 to 512 [ 3500.013647][T24471] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 3500.088671][T24471] EXT4-fs (loop4): orphan cleanup on readonly fs [ 3500.116889][T24471] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.37050: inode has both inline data and extents flags [ 3500.175177][T24471] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 3500.176139][T24471] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.37050: couldn't read orphan inode 17 (err -117) [ 3500.185388][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 3500.185406][ C1] EXT4-fs (loop4): initial error at time 1775663067: ext4_orphan_get:1397: inode 17 [ 3500.185430][ C1] EXT4-fs (loop4): last error at time 1775663067: ext4_orphan_get:1397: inode 17 [ 3500.279377][T24471] loop4: lost filesystem error report for type 5 error -117 [ 3500.282477][T24471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3500.342739][T24486] netlink: 16 bytes leftover after parsing attributes in process `syz.9.37056'. [ 3500.397069][T24488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3500.420680][T24488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3500.674007][T24491] dvmrp1: entered allmulticast mode [ 3501.934143][T24512] tipc: Started in network mode [ 3501.956943][T24512] tipc: Node identity 84e, cluster identity 4711 [ 3501.973556][T24512] tipc: Node number set to 2126 [ 3502.277091][T24528] netlink: 52 bytes leftover after parsing attributes in process `syz.7.37070'. [ 3502.339264][T18414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3502.503305][T24536] 9p: Bad value for 'wfdno' [ 3502.618306][T24547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3502.730037][T24557] loop9: detected capacity change from 0 to 512 [ 3502.739310][T24557] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 3502.757809][T24557] EXT4-fs (loop9): orphan cleanup on readonly fs [ 3502.774799][T24557] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #17: comm syz.9.37083: inode has both inline data and extents flags [ 3502.795167][T24557] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 3502.795402][T24557] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.37083: couldn't read orphan inode 17 (err -117) [ 3502.805026][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 3502.805056][ C0] EXT4-fs (loop9): initial error at time 1775663070: ext4_orphan_get:1397: inode 17 [ 3502.805088][ C0] EXT4-fs (loop9): last error at time 1775663070: ext4_orphan_get:1397: inode 17 [ 3502.844833][T24557] loop9: lost filesystem error report for type 5 error -117 [ 3502.845357][T24557] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3503.546184][T24596] bridge0: port 2(bridge_slave_1) entered disabled state [ 3503.553834][T24596] bridge0: port 1(bridge_slave_0) entered disabled state [ 3503.570596][T24598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3503.606784][T24598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3503.705090][T24596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3503.732071][T24596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3503.830974][T24596] .`: left promiscuous mode [ 3503.850025][T24596] bond_slave_0: left promiscuous mode [ 3503.872114][T24596] bond_slave_1: left promiscuous mode [ 3503.921829][T12921] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3503.971476][T12921] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3504.017837][T12921] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3504.068123][T12921] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3504.117106][T18773] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3504.528829][T24631] syzkaller0: entered promiscuous mode [ 3504.670865][T24638] loop5: detected capacity change from 0 to 512 [ 3504.692395][T24638] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 3504.727221][T24638] EXT4-fs (loop5): orphan cleanup on readonly fs [ 3504.744988][T24638] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #17: comm syz.5.37116: inode has both inline data and extents flags [ 3504.762404][T24638] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 3504.762638][T24638] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.37116: couldn't read orphan inode 17 (err -117) [ 3504.768998][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 3504.790149][ C1] EXT4-fs (loop5): initial error at time 1775663072: ext4_orphan_get:1397: inode 17 [ 3504.790179][ C1] EXT4-fs (loop5): last error at time 1775663072: ext4_orphan_get:1397: inode 17 [ 3504.817337][T24638] loop5: lost filesystem error report for type 5 error -117 [ 3504.817892][T24638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3505.434859][T24668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3505.560832][T24668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3506.113215][T24680] 9p: Bad value for 'rfdno' [ 3506.279594][T24689] syzkaller0: entered promiscuous mode [ 3506.305484][T24689] syzkaller0: entered allmulticast mode [ 3506.548246][T24695] syzkaller0: entered promiscuous mode [ 3506.582682][T24695] syzkaller0: entered allmulticast mode [ 3506.591861][T24699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3506.614477][T24699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3506.810914][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3506.952330][T24723] syzkaller0: entered promiscuous mode [ 3506.969362][T24723] syzkaller0: entered allmulticast mode [ 3507.088680][T24732] random: crng reseeded on system resumption [ 3507.138644][T24737] loop5: detected capacity change from 0 to 512 [ 3507.175462][T24737] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 3507.227920][T24737] EXT4-fs (loop5): orphan cleanup on readonly fs [ 3507.234742][T24741] lo speed is unknown, defaulting to 1000 [ 3507.235138][T24748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37153'. [ 3507.250730][T24737] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #17: comm syz.5.37151: inode has both inline data and extents flags [ 3507.279011][T24737] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 3507.279379][T24737] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.37151: couldn't read orphan inode 17 (err -117) [ 3507.300968][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 3507.300988][ C0] EXT4-fs (loop5): initial error at time 1775663074: ext4_orphan_get:1397: inode 17 [ 3507.301034][ C0] EXT4-fs (loop5): last error at time 1775663074: ext4_orphan_get:1397: inode 17 [ 3507.348199][T24737] loop5: lost filesystem error report for type 5 error -117 [ 3507.349018][T24737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3507.465757][T24766] netlink: 16 bytes leftover after parsing attributes in process `syz.7.37164'. [ 3507.541958][T24779] tipc: Cannot configure node identity twice [ 3507.593715][T24787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37172'. [ 3507.661911][T24797] syzkaller0: entered promiscuous mode [ 3507.680557][T24797] syzkaller0: entered allmulticast mode [ 3507.688061][T24799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37178'. [ 3507.853922][T24815] netlink: 16 bytes leftover after parsing attributes in process `syz.6.37185'. [ 3508.319937][T24844] syzkaller0: entered promiscuous mode [ 3508.339004][T24844] syzkaller0: entered allmulticast mode [ 3508.678495][T24871] netlink: 'syz.9.37210': attribute type 4 has an invalid length. [ 3508.696700][T24871] netlink: 164 bytes leftover after parsing attributes in process `syz.9.37210'. [ 3508.716644][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3508.833631][T24887] syzkaller0: entered promiscuous mode [ 3508.892666][T24893] netlink: 16 bytes leftover after parsing attributes in process `syz.6.37219'. [ 3508.947241][T24891] syzkaller0: entered promiscuous mode [ 3508.956659][T24891] syzkaller0: entered allmulticast mode [ 3509.081233][ T28] audit: type=1326 audit(1775663076.791:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24898 comm="syz.9.37221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1fcb5c819 code=0x0 [ 3510.112813][T24907] netlink: 'syz.5.37223': attribute type 4 has an invalid length. [ 3510.157003][T24907] netlink: 164 bytes leftover after parsing attributes in process `syz.5.37223'. [ 3510.387018][T24917] pim6reg1: tun_chr_ioctl cmd 21376 [ 3510.404363][T24917] pim6reg1: tun_chr_ioctl cmd 1074025672 [ 3510.422697][T24917] pim6reg1: ignored: set checksum disabled [ 3510.443058][T24917] pim6reg1: tun_chr_ioctl cmd 2147767520 [ 3510.580608][T24922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.37230'. [ 3510.655184][ T28] audit: type=1326 audit(1775663078.361:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3510.683153][ T28] audit: type=1326 audit(1775663078.361:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3510.719816][ T28] audit: type=1326 audit(1775663078.361:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3510.794493][ T28] audit: type=1326 audit(1775663078.361:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3510.878971][ T28] audit: type=1326 audit(1775663078.361:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3510.948978][ T28] audit: type=1326 audit(1775663078.361:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3511.099012][ T28] audit: type=1326 audit(1775663078.361:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3511.150300][ T28] audit: type=1326 audit(1775663078.361:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3511.220609][ T28] audit: type=1326 audit(1775663078.361:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.4.37181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6556eddb99 code=0x7ffc0000 [ 3511.262400][T24952] netlink: 16 bytes leftover after parsing attributes in process `syz.9.37241'. [ 3511.666903][T24996] tipc: Started in network mode [ 3511.673919][T24996] tipc: Node identity a66412a47a79, cluster identity 4711 [ 3511.681378][T24996] tipc: Enabled bearer , priority 0 [ 3511.689641][T24995] tipc: Disabling bearer [ 3511.712135][T24998] loop4: detected capacity change from 0 to 764 [ 3511.719972][T24998] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 3511.828767][T25011] loop5: detected capacity change from 0 to 512 [ 3511.838094][T25011] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 3511.847824][T25009] loop4: detected capacity change from 0 to 8192 [ 3511.856621][T25011] EXT4-fs (loop5): orphan cleanup on readonly fs [ 3511.865976][T25011] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #17: comm syz.5.37270: inode has both inline data and extents flags [ 3511.886485][T25011] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 3511.886791][T25011] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.37270: couldn't read orphan inode 17 (err -117) [ 3511.896543][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 3511.896563][ C0] EXT4-fs (loop5): initial error at time 1775663079: ext4_orphan_get:1397: inode 17 [ 3511.896589][ C0] EXT4-fs (loop5): last error at time 1775663079: ext4_orphan_get:1397: inode 17 [ 3511.934122][T25011] loop5: lost filesystem error report for type 5 error -117 [ 3511.935005][T25011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3512.322359][T25020] netlink: 'syz.9.37272': attribute type 2 has an invalid length. [ 3512.772985][T25026] netlink: 'syz.7.37274': attribute type 4 has an invalid length. [ 3512.816289][T25026] __nla_validate_parse: 2 callbacks suppressed [ 3512.816311][T25026] netlink: 152 bytes leftover after parsing attributes in process `syz.7.37274'. [ 3513.435379][T25046] tipc: Started in network mode [ 3513.447224][T25046] tipc: Node identity 84e, cluster identity 4711 [ 3513.462130][T25046] tipc: Node number set to 2126 [ 3513.519425][T19428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3513.600486][T25057] netlink: 24 bytes leftover after parsing attributes in process `syz.7.37288'. [ 3513.678454][T25065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3513.987387][T25080] xt_hashlimit: size too large, truncated to 1048576 [ 3515.043082][T25113] syzkaller0: entered promiscuous mode [ 3515.083909][T25113] syzkaller0: entered allmulticast mode [ 3515.157993][T25115] xt_hashlimit: size too large, truncated to 1048576 [ 3515.598345][T20338] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3515.645075][T25118] lo speed is unknown, defaulting to 1000 [ 3515.712854][T20338] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3515.789896][T25149] tipc: Enabled bearer , priority 0 [ 3515.813450][T20338] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3515.838662][T25148] tipc: Disabling bearer [ 3515.861255][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 3515.861274][ T28] audit: type=1400 audit(1775663083.571:6140): avc: denied { mounton } for pid=25157 comm="syz.5.37319" path="/file0" dev="hugetlbfs" ino=598571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 3515.932295][T20338] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3515.957587][T25166] loop9: detected capacity change from 0 to 164 [ 3516.132662][T20338] bridge0: port 3(team0) entered disabled state [ 3516.152963][T20338] bridge_slave_1: left allmulticast mode [ 3516.158713][T20338] bridge_slave_1: left promiscuous mode [ 3516.167621][T20338] bridge0: port 2(bridge_slave_1) entered disabled state [ 3516.892091][T20338] bridge_slave_0: left allmulticast mode [ 3516.911446][T20338] bridge_slave_0: left promiscuous mode [ 3516.931537][T20338] bridge0: port 1(bridge_slave_0) entered disabled state [ 3516.943091][T20338] tipc: Resetting bearer [ 3517.021570][T20338] tipc: Disabling bearer [ 3517.031206][T20338] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3517.081463][T20338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3517.093090][T20338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3517.110379][T20338] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3517.120611][T20338] bond0 (unregistering): Released all slaves [ 3517.213267][T25118] chnl_net:caif_netlink_parms(): no params data found [ 3517.327648][T25118] bridge0: port 1(bridge_slave_0) entered blocking state [ 3517.349717][T25118] bridge0: port 1(bridge_slave_0) entered disabled state [ 3517.367660][T25118] bridge_slave_0: entered allmulticast mode [ 3517.390500][T25118] bridge_slave_0: entered promiscuous mode [ 3517.403477][T25118] bridge0: port 2(bridge_slave_1) entered blocking state [ 3517.433783][T25118] bridge0: port 2(bridge_slave_1) entered disabled state [ 3517.449263][T25118] bridge_slave_1: entered allmulticast mode [ 3517.473223][T25118] bridge_slave_1: entered promiscuous mode [ 3517.522125][T25118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3517.535528][T25118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3517.557972][T25118] team0: Port device team_slave_0 added [ 3517.575216][T25118] team0: Port device team_slave_1 added [ 3517.617306][T25118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3517.630599][T25118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3517.658617][T25118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3517.683727][T25118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3517.692179][T25118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3517.719861][T25118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3517.744384][T25181] ipip0: entered promiscuous mode [ 3517.815376][T20338] tipc: Left network mode [ 3517.874406][T25207] syzkaller0: entered promiscuous mode [ 3517.881030][T25207] syzkaller0: entered allmulticast mode [ 3517.983477][T20338] hsr_slave_0: left promiscuous mode [ 3518.003308][T20338] hsr_slave_1: left promiscuous mode [ 3518.009274][T20338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3518.018504][T20338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3518.026914][T20338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3518.034728][T20338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3518.045386][T20338] veth1_macvtap: left promiscuous mode [ 3518.051604][T20338] veth0_macvtap: left promiscuous mode [ 3518.057624][T20338] veth1_vlan: left promiscuous mode [ 3518.063193][T20338] veth0_vlan: left promiscuous mode [ 3518.118221][T20338] team_slave_1 (unregistering): left promiscuous mode [ 3518.126451][T20338] team_slave_1 (unregistering): left allmulticast mode [ 3518.133769][T20338] team0 (unregistering): Port device team_slave_1 removed [ 3518.143128][T20338] team_slave_0 (unregistering): left promiscuous mode [ 3518.151585][T20338] team_slave_0 (unregistering): left allmulticast mode [ 3518.159341][T20338] team0 (unregistering): Port device team_slave_0 removed [ 3518.191407][T25118] hsr_slave_0: entered promiscuous mode [ 3518.197577][T25118] hsr_slave_1: entered promiscuous mode [ 3518.204126][T25118] debugfs: 'hsr0' already exists in 'hsr' [ 3518.209977][T25118] Cannot create hsr debugfs directory [ 3518.256844][T25263] tipc: Enabling of bearer rejected, failed to enable media [ 3518.467213][ T28] audit: type=1326 audit(1775663086.171:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.9.37352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1fcb5c819 code=0x0 [ 3518.581744][T25317] syzkaller0: entered promiscuous mode [ 3518.587336][T25317] syzkaller0: entered allmulticast mode [ 3518.604225][T25317] tipc: Enabled bearer , priority 0 [ 3518.625557][T25317] tipc: Resetting bearer [ 3518.636418][T25316] tipc: Resetting bearer [ 3518.658767][T25316] tipc: Disabling bearer [ 3519.001863][T25118] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3519.023815][T25118] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3519.042984][T25118] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3519.055962][T25118] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3519.154866][T25118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3519.182076][T25405] loop5: detected capacity change from 0 to 128 [ 3519.196887][T25118] 8021q: adding VLAN 0 to HW filter on device team0 [ 3519.217108][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 3519.224221][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3519.256432][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 3519.263819][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3519.281403][T25118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3519.293889][T25118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3519.337824][T25415] netlink: 'syz.9.37372': attribute type 2 has an invalid length. [ 3519.362674][T25411] tipc: Enabling of bearer rejected, failed to enable media [ 3519.432346][T25118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3519.687613][T25453] netlink: 40 bytes leftover after parsing attributes in process `syz.9.37382'. [ 3520.571966][T25118] veth0_vlan: entered promiscuous mode [ 3520.597103][T25118] veth1_vlan: entered promiscuous mode [ 3520.631092][T25118] veth0_macvtap: entered promiscuous mode [ 3520.638834][T25118] veth1_macvtap: entered promiscuous mode [ 3520.650240][T25118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3520.660233][T25118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3520.754060][T13361] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3520.789501][T25479] netlink: 40 bytes leftover after parsing attributes in process `syz.6.37392'. [ 3520.811854][T13361] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3520.871362][T13361] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3520.941413][T13361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3520.953648][T25488] tipc: Enabled bearer , priority 0 [ 3520.990246][T25488] tipc: Resetting bearer [ 3520.997462][T25487] tipc: Disabling bearer [ 3521.126804][T25508] netlink: 40 bytes leftover after parsing attributes in process `syz.6.37404'. [ 3521.361289][T25537] netlink: 40 bytes leftover after parsing attributes in process `syz.6.37417'. [ 3521.952833][ T28] audit: type=1400 audit(1775663089.661:6142): avc: denied { module_load } for pid=25538 comm="syz.4.37418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 3522.051030][T25539] Invalid ELF header magic: != ELF [ 3522.371528][T25568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37429'. [ 3522.480326][T25573] xt_hashlimit: size too large, truncated to 1048576 [ 3522.772106][T25581] tipc: Enabling of bearer rejected, failed to enable media [ 3523.431838][T25594] syzkaller0: entered promiscuous mode [ 3523.440819][T25605] netlink: 60 bytes leftover after parsing attributes in process `syz.7.37438'. [ 3523.469196][T25609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37441'. [ 3523.478832][T25609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37441'. [ 3523.507643][T25598] netlink: 60 bytes leftover after parsing attributes in process `syz.7.37438'. [ 3523.526885][T25611] loop4: detected capacity change from 0 to 128 [ 3523.536955][T25611] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 3523.556581][T25611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 3523.565481][T25611] FAT-fs (loop4): Filesystem has been set read-only [ 3523.573212][T25611] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 3523.709058][T23442] ================================================================== [ 3523.717292][T23442] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 3523.724428][T23442] [ 3523.726869][T23442] read-write to 0xffff888237c2a8a4 of 4 bytes by task 21657 on cpu 0: [ 3523.735101][T23442] wq_worker_running+0x9b/0x120 [ 3523.740122][T23442] schedule_timeout+0xca/0x180 [ 3523.744958][T23442] msleep+0x4f/0x90 [ 3523.748759][T23442] nsim_fib_event+0x491d/0x4d70 [ 3523.753677][T23442] nsim_fib_event_work+0x13d/0x210 [ 3523.758966][T23442] process_scheduled_works+0x513/0xa10 [ 3523.764696][T23442] worker_thread+0x58a/0x780 [ 3523.769373][T23442] kthread+0x22a/0x280 [ 3523.773426][T23442] ret_from_fork+0x150/0x360 [ 3523.778012][T23442] ret_from_fork_asm+0x1a/0x30 [ 3523.782759][T23442] [ 3523.785065][T23442] read to 0xffff888237c2a8a4 of 4 bytes by task 23442 on cpu 1: [ 3523.792672][T23442] kick_pool+0x49/0x2d0 [ 3523.796826][T23442] __queue_work+0x896/0xaf0 [ 3523.801417][T23442] queue_work_on+0xa9/0x140 [ 3523.806011][T23442] process_srcu+0xa56/0xdc0 [ 3523.810502][T23442] process_scheduled_works+0x513/0xa10 [ 3523.816119][T23442] worker_thread+0x58a/0x780 [ 3523.820849][T23442] kthread+0x22a/0x280 [ 3523.824996][T23442] ret_from_fork+0x150/0x360 [ 3523.829572][T23442] ret_from_fork_asm+0x1a/0x30 [ 3523.834321][T23442] [ 3523.836638][T23442] value changed: 0x00000000 -> 0x00000001 [ 3523.842416][T23442] [ 3523.844719][T23442] Reported by Kernel Concurrency Sanitizer on: [ 3523.850910][T23442] CPU: 1 UID: 0 PID: 23442 Comm: kworker/1:18 Tainted: G W syzkaller #0 PREEMPT(full) [ 3523.862105][T23442] Tainted: [W]=WARN [ 3523.865924][T23442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3523.875977][T23442] Workqueue: rcu_gp process_srcu [ 3523.880915][T23442] ==================================================================