last executing test programs: 35m48.235678766s ago: executing program 32 (id=862): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r0, 0x80000) 35m46.65656885s ago: executing program 33 (id=881): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x2, 0x0, 0x0, 0x0) 35m46.610551992s ago: executing program 34 (id=883): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="02", 0x1, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x1002}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfff8, 0x0, 0x8, 0x147, 0xa8d}, &(0x7f0000000100)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000850) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x3, 0x4, 0x9, 0x0, 0x1}, 0x50) memfd_create(0x0, 0x2) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 35m41.061540198s ago: executing program 35 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 35m28.861989921s ago: executing program 36 (id=933): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4001) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2401, 0x0) unshare(0x24020400) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20238, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fff}, 0x0, 0x1, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x430}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 35m20.420378144s ago: executing program 37 (id=911): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_uring_enter(r1, 0x3516, 0x2, 0x0, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x8}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x7, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port1\x00', 0x71, 0x100c75, 0x7, 0x3, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) 35m16.337137115s ago: executing program 38 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r0, 0x0, 0xee01) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x400, 0xfffffffffffffffb}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) 35m14.749081627s ago: executing program 39 (id=1016): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 35m10.464970382s ago: executing program 40 (id=1032): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r0, 0x0, 0xee01) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x400, 0xfffffffffffffffb}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) 35m5.943264094s ago: executing program 41 (id=1052): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") fchown(0xffffffffffffffff, 0x0, 0xee01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 32m28.977013766s ago: executing program 42 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpriority(0x0, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r6 = dup(r5) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x8050) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 24m14.868572076s ago: executing program 43 (id=5234): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x1b4) chdir(&(0x7f0000001180)='./bus\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2000) 24m3.675816021s ago: executing program 44 (id=5539): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) fstat(r1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x1, 0xf1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0xffffff46}, 0x1, 0x0, 0x0, 0x4000090}, 0x24000000) sendto$inet(r1, &(0x7f0000000500)="40f1e536abfe2906701a95bdba08dd0de1a726012e9c029fd3bb507bb0d3b9", 0x1f, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 23m51.258998791s ago: executing program 45 (id=5769): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000040), 0x3b) 23m48.955796846s ago: executing program 46 (id=5818): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 23m45.981147757s ago: executing program 47 (id=5856): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file1\x00', 0x8010, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRESHEX=r0], 0x1, 0x2bc, &(0x7f0000000440)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd", @ANYRES32=r1, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) 23m43.431054587s ago: executing program 48 (id=5883): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0xa, 0x20000002) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) 23m37.364526068s ago: executing program 49 (id=6010): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000030000ffffe0000002ff020000000000000000000000000001ff"], 0x0) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) 23m36.705011646s ago: executing program 50 (id=6018): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 23m36.320143675s ago: executing program 51 (id=6024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000ebff000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m36.104288216s ago: executing program 52 (id=6026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x4, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x0, 0xffff, r1, 0x0, 0x0, 0x4}]) 23m28.198173327s ago: executing program 53 (id=6099): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x15a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x7) shmdt(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xd104200, 0x0, 0x3c, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x1, 0x1, 0xf98b, 0x5}) socket$inet6_sctp(0xa, 0x1, 0x84) 22m59.545736031s ago: executing program 54 (id=6660): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0xc0000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000c00) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000005c0)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 22m56.862191636s ago: executing program 55 (id=6700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$tun(r0, &(0x7f0000000b00)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 22m56.493926138s ago: executing program 56 (id=6710): unshare(0x60040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c00000010003704030000c2349b6aad00050000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r2, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe8000000000000000000000000000bb08000d00ffffff7f06000e000100000006000f0003"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 22m52.515514404s ago: executing program 57 (id=6767): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20071026}, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 22m51.004278235s ago: executing program 58 (id=6790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x312}) 22m50.535159689s ago: executing program 59 (id=6797): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1, 0x0, 0x200000, 0x0) 22m50.468513806s ago: executing program 60 (id=6799): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x145}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1", 0x81}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 22m34.392711941s ago: executing program 61 (id=7019): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 22m32.645022848s ago: executing program 62 (id=7039): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000540)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 20m26.088130872s ago: executing program 63 (id=10405): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0) 20m25.996660015s ago: executing program 64 (id=9935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 20m24.889511991s ago: executing program 65 (id=10422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) 20m18.456049044s ago: executing program 66 (id=10557): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x80, 0x0}, 0x0) 20m16.989069703s ago: executing program 67 (id=10576): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0xe4}}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 19m52.285983786s ago: executing program 68 (id=10705): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) 19m2.649067699s ago: executing program 69 (id=12296): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000001080)) 16m53.454689037s ago: executing program 70 (id=13169): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setuid(0xee01) 16m50.650635069s ago: executing program 71 (id=13187): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000011}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 16m37.023171645s ago: executing program 72 (id=13253): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 16m26.785489387s ago: executing program 73 (id=13278): socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x2, 0x805, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 16m16.063761269s ago: executing program 74 (id=13317): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) 16m14.972335977s ago: executing program 75 (id=13318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x1, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x5, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0xd, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x2}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7fffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x6, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 16m14.961275615s ago: executing program 76 (id=13319): socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) 14m43.413153627s ago: executing program 0 (id=13343): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a={0x6, 0x3, 0x3, 0x0, 0x6, 0x4, 0x10, {0x7, 0x7, "567d3482aabd31", 0x81, 0xfb}, 0x81, 0x68, 0x2b, 0x7}}, 0x1a) 14m43.412973297s ago: executing program 0 (id=13344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc011}, 0x800) 14m43.412798527s ago: executing program 0 (id=13345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) 14m43.412003167s ago: executing program 0 (id=13346): unshare(0x20000400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) 14m43.392864543s ago: executing program 0 (id=13347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 14m43.363413088s ago: executing program 0 (id=13348): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(0x0, 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x139b039, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace(0x10, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000002c0), 0x20101) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 14m27.091124326s ago: executing program 77 (id=13348): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(0x0, 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x139b039, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace(0x10, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000002c0), 0x20101) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 3m35.979589329s ago: executing program 3 (id=19645): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0x16}, {0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x3ff) write$ppp(r0, &(0x7f0000000280)="314c33fe68ac4410937bbb53f6974af3790609939c", 0x15) 3m35.867794208s ago: executing program 3 (id=19649): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x20040051) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1000, {0x2, 0xff, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, {0xfffb, 0xfff2}, {0xd, 0x8}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x850) 3m35.704177868s ago: executing program 3 (id=19655): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@bridge_getneigh={0x20, 0x1e, 0xd15, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x48010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000500)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0xc820) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r9, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) 3m34.722934958s ago: executing program 3 (id=19670): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 3m34.654929905s ago: executing program 3 (id=19673): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x240088a2) 3m34.338807897s ago: executing program 3 (id=19678): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000002, 0x1}, 0x2008, 0x401, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, 0x0) 3m34.338400427s ago: executing program 78 (id=19678): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000002, 0x1}, 0x2008, 0x401, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, 0x0) 3m11.577254582s ago: executing program 8 (id=19941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) shutdown(r0, 0x1) 3m11.30070609s ago: executing program 8 (id=19948): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 3m8.685801739s ago: executing program 8 (id=19967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc9119f992e83de525e4a40e81692d09dc6b6b0ef1", 0x5ea, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0xda, 0x6, @remote}, 0x14) 3m8.441174015s ago: executing program 8 (id=19968): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 3m8.202364461s ago: executing program 8 (id=19971): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYRES64=r0], 0x38}}, 0x10) 3m7.956776625s ago: executing program 8 (id=19974): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e24, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0xb7, 0x9}, &(0x7f0000000380)=0x9c) 3m7.822228911s ago: executing program 79 (id=19974): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r0, @in6={{0xa, 0x4e24, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0xb7, 0x9}, &(0x7f0000000380)=0x9c) 2m57.999661704s ago: executing program 9 (id=20051): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r3 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 2m56.791662892s ago: executing program 9 (id=20065): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@bridge_getneigh={0x20, 0x1e, 0xd15, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x48010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000500)) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0xc820) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff02000000000008004500005800000000002f907800000000e0000001248088640000000010008864000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r9, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) 2m55.808824872s ago: executing program 9 (id=20067): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m55.700415751s ago: executing program 9 (id=20068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 2m55.621288577s ago: executing program 9 (id=20069): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x0) 2m55.453169206s ago: executing program 9 (id=20070): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x0) 2m55.415107389s ago: executing program 80 (id=20070): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x0) 2m53.276553776s ago: executing program 4 (id=20083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="08000800030004000100140000004a14016a0065000000"], 0x178) 2m52.001306961s ago: executing program 4 (id=20090): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="00e520d0a1a6e1a06cfcbe2b2ee6985035f04a474d853e6798b3c4fc889d5e02732376c667bb32cfe6e654fc87f4d33ccdf403e3d3d8560c198d10befc10e6f689498dee4f0c322d9b4ba9a7221c96baf237c1dea3d79c7f3952309c892ed8178c4d5ae2f0065746c51a62af0625c5e0d0393862cb02fd1afa0ca64e01190f3a059e2d8da7f079bbf04e1e0de808b8009bd054a115899caf737032a9d5379ea4d63075ae5d481d9ef466dd4d6de51c2bb54c01d66436d9782282fc0dcc12544c160f509616be6a4320a84f9b57ad296df5ccad9906259e12b50bcd69", 0xdc}], 0x1}}], 0x1, 0x2000a094) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m51.921200587s ago: executing program 4 (id=20091): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000017140100"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2m51.813565137s ago: executing program 4 (id=20092): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 2m51.605815359s ago: executing program 4 (id=20096): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000040)='./file1\x00', r2, &(0x7f00000000c0)='./file1\x00') fchdir(r2) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2m51.476626935s ago: executing program 4 (id=20101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@link_local, @link_local, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "533d450e782a7034"}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x220, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x38, 0x0, 0xd0, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r6], 0x20) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e400f898221aa606d083cd59745493938f1e2decfdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 2m51.469693993s ago: executing program 81 (id=20101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@link_local, @link_local, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "533d450e782a7034"}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x220, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x38, 0x0, 0xd0, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r6], 0x20) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e400f898221aa606d083cd59745493938f1e2decfdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 7.605290259s ago: executing program 1 (id=21310): socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x90) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0xe, 0x2d}) 5.86899833s ago: executing program 1 (id=21318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003080)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x2, 0x1, 0x1, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x0) 5.754343599s ago: executing program 1 (id=21320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) io_uring_setup(0x2f35, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000340)=ANY=[], 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) 4.358345682s ago: executing program 1 (id=21337): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0x200, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0) 3.904891538s ago: executing program 6 (id=21347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 3.826347334s ago: executing program 6 (id=21348): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000e80)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}, {{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="9a72192a50d4f615bf122aa54887d89282468d829d79a183a5eb6ce014af21b9e8639f09a14bbbbe014e813c205c64ec811c84ede8cc9161610e534726ab1c1f7e36de617a6c55b8121803ff22aa3aa10e2b039d5d95371693", 0x59}, {&(0x7f00000001c0)="11a80e0708178ea197f66a04b2199de99ee5ee0bc1f7dd0883889445453c8287ac3f3c46dbd533ce46443710bcf1f2", 0x2f}, {&(0x7f00000006c0)="bf954bd7bbb3f448403b0d9f54e57e858323ad0f8bd1ac55c58c09adc3987bd31a2d68c7747f88d283bccc9b48a670f38095adb76337d45341165e77b080039049f28e790ca4bb5e295cd485634f3c96eaaaf2400da8983136d0c40a2b8477ba4ff31357d52604e9a8a9debba9be4059d08dfc705ad3a45bde1803b6adcc4e", 0x7f}, {&(0x7f0000000400)="640ba0c601e59cd06e0be66027d5ad38f0c3498e4ea912", 0x17}, {&(0x7f00000002c0)="a4b64e00be53953fb538ba182e1648f06d77dd389ea2ed519e52dfffbb0163d7ce11d94c0e38454e1a5b05e64ae89b640141dc41124d3c32539a94602e07aac3d33b61231b8e6fa70ef4550fe9879d81cd424423c67e137ce0588100f8f876c24552af59cce66539f3196474ef954d52d1a2a7ba91c49ca4c1f3e0acce2a527f74eeed2e867b0054e673c6", 0x8b}, {&(0x7f0000000380)="500a40e3f252ce653b58b0afb055c91500"/31, 0x1f}, {&(0x7f00000003c0)="7a06e9880996b7ba0c810ce39853f6d5b278db1a155e7c4da61d0b1ec61b50576f16a9bca2a3f720c5c9", 0x2a}, {&(0x7f0000000780)="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", 0x143}, {&(0x7f0000000900)="06a2817b604853b278ca60c5ab8db435ff681a9a98ae9b76b42c788d064aaf537259acf34aabcde36aa810b131effb2c876587b4c89c16834f7948971fa93f317551d44d0000000000000000f0aa66961d69d0243267f65bad856f6992dda77492dc30cb9492d999641a1d5255542984015643b554c35441131b11f489f33cfdec2f5a162b4cf1a70399a6bdbc064089d5b76813e8410f723cd50f1aa26feeaa463331321a91ce243c00e61a34d30923b236cfbbc6ace789a94643f6027c31cbe007ff2bebbfcd46e33687acf6082a95567f7091ec003b82457400", 0xdb}], 0x9, &(0x7f0000000200)=[@cred={{0x1c}}], 0x20, 0x20000090}}], 0x2, 0x4040018) 3.75304447s ago: executing program 6 (id=21349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 3.552272553s ago: executing program 6 (id=21350): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0xc4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0xac, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0x8c, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_b, @from_mac=@broadcast, {0x0, 0x226}, @value=@ver_80211n={0x0, 0x100, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x29, {0x37, 0x52, {0xde, 0x0, "89afeda33f8365b08a87cbdabfe86176", "94c6f8b98fc791ff98bdbf904d1d7fcbcb8276055badd46a823c2e1ed1e78dd5", "c16595490462bc8a1e67a3ef24693ef731ec405b552af55321261c7e507282ff"}}, {0x65, 0x12}}}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 3.499027413s ago: executing program 6 (id=21351): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x48, &(0x7f0000001480)={[{@nodiscard}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x200000, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x1, 0x0, 0x1, 0x0, 0xabf, 0x1000004}, {{@in6=@loopback, 0x4d0, 0x2b}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x4}]}]}, 0x17c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000700001020000000000000000000140000000000000000"], 0x24, 0x1) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000401e04003040000102030109028b00030101400b080b0101010620060904000000010120"], 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 3.450104955s ago: executing program 2 (id=21354): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) io_uring_setup(0x2f35, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x1d, &(0x7f0000000340)=ANY=[], 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x4a2) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) 3.340881555s ago: executing program 1 (id=21356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) 2.765177549s ago: executing program 5 (id=21357): socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) pipe(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, 0x0, 0x84) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) open_by_handle_at(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="c800000071000000efc180b2ba2adf6ac513d05195efea76ff4b110000abc596293fa13b1331dca24d8f82e05f2b808724987be11cb4b71c00a90b7f8bb556e7218a5f2e61e868d19ec1d4457e2554962fc48f8613f76cf8ac22b341a0cc6776ff94032a6f218c8c272a811672c73d02a50b7abc08cfa85e443fe8e5ca7edb30b4ab2b7e5371b810099f232d73770a77f353cfcd8c7882948877a4069f988edd7d0942817fa1a28e24fc739c3f94e0219915990a648642eff54e175bf2a02371851fda"], 0x5a9600) fcntl$setpipe(r5, 0x407, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) r7 = syz_io_uring_setup(0x2af, &(0x7f0000000080)={0x0, 0x1803, 0x10000, 0xfffffffb, 0x100002cf}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x17) r9 = socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x0, &(0x7f0000000100)=0x1, 0x0, 0x4) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80), 0x0, 0x10122, 0x0) 2.456843112s ago: executing program 2 (id=21358): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) io_uring_setup(0x2f35, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000340)=ANY=[], 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) 2.33660918s ago: executing program 7 (id=21359): timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x34, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_delete(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r3, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r3, r1, 0x0, 0x3ffff) 1.807620603s ago: executing program 5 (id=21360): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x0, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x4) sendfile(0xffffffffffffffff, r4, 0x0, 0x3ffff) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b686158"], 0xfdef) 1.394310437s ago: executing program 2 (id=21361): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x22}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x24040808) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 1.30792448s ago: executing program 7 (id=21362): fsopen(&(0x7f0000000100)='jffs2\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2000}, r0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x23) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40400000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c0001"], 0x188}}, 0x4044804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES8=r0, @ANYBLOB="88d101000000000014000300766c616e3000000000000000000000000a000100191bb9cae9d00000"], 0x40}, 0x1, 0x0, 0x0, 0x4015}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280"], 0x140}}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000001180)) 1.205747632s ago: executing program 5 (id=21363): socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x3, 0x0, 0x9) r0 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xf23, 0x0, 0xc, 0x0, 0x0) 951.443575ms ago: executing program 2 (id=21364): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x15, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 946.306084ms ago: executing program 5 (id=21365): writev(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 915.802949ms ago: executing program 5 (id=21366): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0x200, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0) 915.359669ms ago: executing program 7 (id=21367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 894.399595ms ago: executing program 2 (id=21368): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) socket$rds(0x15, 0x5, 0x0) io_uring_setup(0x2f35, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r2, 0x0, 0x4a2) r3 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0xf23, 0x0, 0xc, 0x0, 0x0) 748.759608ms ago: executing program 7 (id=21369): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000e80)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}, {{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="9a72192a50d4f615bf122aa54887d89282468d829d79a183a5eb6ce014af21b9e8639f09a14bbbbe014e813c205c64ec811c84ede8cc9161610e534726ab1c1f7e36de617a6c55b8121803ff22aa3aa10e2b039d5d95371693", 0x59}, {&(0x7f00000001c0)="11a80e0708178ea197f66a04b2199de99ee5ee0bc1f7dd0883889445453c8287ac3f3c46dbd533ce46443710bcf1f2", 0x2f}, {&(0x7f00000006c0)="bf954bd7bbb3f448403b0d9f54e57e858323ad0f8bd1ac55c58c09adc3987bd31a2d68c7747f88d283bccc9b48a670f38095adb76337d45341165e77b080039049f28e790ca4bb5e295cd485634f3c96eaaaf2400da8983136d0c40a2b8477ba4ff31357d52604e9a8a9debba9be4059d08dfc705ad3a45bde1803b6adcc4e", 0x7f}, {&(0x7f0000000400)="640ba0c601e59cd06e0be66027d5ad38f0c3498e4ea912", 0x17}, {&(0x7f00000002c0)="a4b64e00be53953fb538ba182e1648f06d77dd389ea2ed519e52dfffbb0163d7ce11d94c0e38454e1a5b05e64ae89b640141dc41124d3c32539a94602e07aac3d33b61231b8e6fa70ef4550fe9879d81cd424423c67e137ce0588100f8f876c24552af59cce66539f3196474ef954d52d1a2a7ba91c49ca4c1f3e0acce2a527f74eeed2e867b0054e673c6", 0x8b}, {&(0x7f0000000380)="500a40e3f252ce653b58b0afb055c91500"/31, 0x1f}, {&(0x7f0000000780)="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", 0x144}, {&(0x7f0000000900)="06a2817b604853b278ca60c5ab8db435ff681a9a98ae9b76b42c788d064aaf537259acf34aabcde36aa810b131effb2c876587b4c89c16834f7948971fa93f317551d44d0000000000000000f0aa66961d69d0243267f65bad856f6992dda77492dc30cb9492d999641a1d5255542984015643b554c35441131b11f489f33cfdec2f5a162b4cf1a70399a6bdbc064089d5b76813e8410f723cd50f1aa26feeaa463331321a91ce243c00e61a34d30923b236cfbbc6ace789a94643f6027c31cbe007ff2bebbfcd46e33687acf6082a95567f7091ec003b82457400", 0xdb}], 0x8, &(0x7f0000000200)=[@cred={{0x1c}}], 0x20, 0x20000090}}], 0x2, 0x4040018) 689.138327ms ago: executing program 7 (id=21370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000fbff00000000000000000000000000000000ffffffffffffffff000001000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"], 0xfdef) 669.256933ms ago: executing program 7 (id=21371): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) io_uring_setup(0x2f35, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000340)=ANY=[], 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r1, 0x0, 0x4a2) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 217.02253ms ago: executing program 6 (id=21372): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_setup(0x2f35, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x1d, &(0x7f0000000340)=ANY=[], 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 197.440527ms ago: executing program 2 (id=21373): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) pwritev2(r3, &(0x7f0000000940)=[{&(0x7f0000000440)="9fe3a76f05a9a7a555993c166c32909f06ff6f74383547e27ee8800773f19d7f48b58ec271bdc50eac11cf775550f5e1a893b00d8c3f3f66d2515913fd53d15640d6e8cd15517bb2bc3f326dae437c2921db2862596d289ba2417a702d638f64339e5ba73c004a43b7f8f464fed9e75c5606a4e4447f1836d341048d2d5d4ff2a375c5a3b6ecb7e6b0980ca6b1f86b2e5e", 0x91}, {&(0x7f0000000380)="6f54e642ba385a4f138c9ed5fc762266e2cffbd70dcdbc6af3fc8e99cb3011797b0c334fd1dd2f45eaa179d4c16b4ac43a52253823fb6feb3c7df9421548676910313e573e41a4c1ca21bd5df6f00b42", 0x50}, {&(0x7f0000000540)="497e9bace6614e13b312c02d593c1845dd57dc95da6be9d35e5ca79df0df609c12e9128fde790d7a44c2586b44ad771fd0ae03dbc4779c6f585ed95b3d8f0d02ec1dd4a961c8f458b6654f8e70d1e15c8b9e0d42bdc3fcdff2a30d514bcff318", 0x60}, {&(0x7f0000000000)="d04ae287eb76e1d84c066f7e01973427e1eff9326da50a62f62857d2456ea61f", 0x20}, {&(0x7f00000005c0)="fd3c972b7ad7b1232357c22899c17dc21ca751c59d25ed6ead29bccccbfba163dbebf097a2c0a15e1f7152c642e28e8612c1a4cf08b2f623237f1a521fd8ae7c1d1f253e104082861c9af496af2ef4f04dd2e2cd38ceb71c99b70adc62ff416271e930b80716957235880ca46961b51f4225e0299aca0fa37bb65150eed929c9a5a38459b6e745061bb7013f4154e77b59e4339d26a3e05bc01e92f06209cf", 0x9f}, {&(0x7f0000000100)="b32a0fbddf120cc2756b6687b68d8f16dd23180ec084e5f6a3adc19a08023e18e8e2318f7048bbe0370f1f637db04adad208e6b93ca5299e", 0x38}, {&(0x7f0000001ec0)="34c7227c74f3513127ca041ecc97ff616aac11cb188b59884751af17245731713d4e2189d274a57ad72f5e9eb5c457272789663d7c854db93d496ee83103d4f71016cdb8fd50e475abb22dad13fb0d25dff8f434322bc67f70d6f3dad22e92f9af91d1023be37ff76a0c644cbf215bcc9005120c8253c499b77d83d05f51ec8a142dcdd8a929e9711d133634cf8b4be1f02c9fb2638ca57daacd812a1b39a4b00f13ae8a7184ed22ea3a6489bd718aaa3eedb5687a9ffa7b1dc91501f2c5cffbac47e409f3af63afa01eed8f10f06f20a7f471e1b4fa1f75d4f8313745e570da52c33386d12c268a821ff1c33d34e552836429bf9c0fd9ee7312e9a9055ed3bb06c4ccc4feec92363ff654ea06f63e82f6a0b0f6dbd09aee22072aa031b6aa8f3fe4b98c0fdbe3c5cdf4c9cfe8d25b0d35b5ea91e2304e00b7663d608bd3980088ef7dbff3e2d4db290e2acb74d01016b5d412adaba15d36c07aa54522691cde6fc180e0ab14041286df55f472065573e8a8c43fa846467620c1dfa9bb664071412f034ea3adce9c4bdaa0da9387ebad08d74975296ec70e5e8bc060f09c56478254088aa2fb2e661f09ecf27ce27b873f95256f2e408ca0180e5de3a30f906259ba0ad58db9af3bfda4e5aff68974feef9c94b7ecc1e83267bcb8a499ec536f6209655a116d01360a472dba43ea4ed19071065966fbc6f09a259ba8158d23be7c4d0acd44f5c6c033792ea0ab44a027a3811eb0f89c1236169bb7737df75847515e80e9aa06e058cd3413ed159c1d3246cc73d06a32f3f28552dabf739593f61538f3037ac461dd7000221d979af2fc7e39395791fcc88e17cf38c92d61ec45ded75187a0fcd38500c59872dd22cb868b818c986b059d4b6436f6794ca37893c20a3296b34ec11da57f60946d138d67faa76c7fd3f0670be5b9c3d2dd677ffcc4d68f46c50de472c08c38d35cfec2363f77893ab6697a9f3d12e3bf210fdb2b1911986153ae38f7ac7d5a1c05ffdc20686bc68c28525267b981744400e214892bbd743ee0d53205459df18730e5cd449b01bbc9e6b7eaab038b7149f4e89a5ee53efc77dd541db02affaf59199f3861ab31b5846c3e70e389487b20667a404c6e878a12605b4bb254042ac763ec18003bc24034e3c97bb550ff6c59d385776ff57a5244fc90bd7612761617f458e8165a3ff8901353b2d5f05aa9277c6a56f8c14bfd3744243207856cba3fbf6be3e3e58fcd2c573bebf68c2b65ca2888b20a6a440e9c734eca6a402d05df4ca7b1ae48ac9b14c7024e7983e2dfec670614155778666061a8cc901a108437a3ee7e34d0d7833ae82343a5ec65d25b3d78dd32f8c057354fba7b017f930756c57683c4d3dd5040a7992458b98c26168245701d506bba6a3af6ee9e425a5b07cceb901d6074339dada8e4919005fee224872c5099a38c5ec4151e0ab5f07eee2b706fdaf30aae2bb76af436bf88e35268aa02911cb607433d1c7a6e876ef771aadb7830e9033e77d3498eb36f0ca9c4b4b65c7a0aa11d51a1e4ff85fc7ebaaf43225708e1fbd3b93fc380579bad1e2ba418166463650c3c85d913e64e1efb546c1d92f979dffcf5d3565a49a33cdf373717b23542657877323793b92ba0197a6646baf8d6de1478ce67414fbd1aed7874e09dc6e63cb016d828dfbf79a60077875a03924f91d0f85d2a37e46053d9b29990335c0b215e2436bca9446a85d7af7d08fe68b38558c23aec06e037760d54fa3e0945ce0674048e68b6cad8192094290fad6bc4bdeb8e5ba102d457052d396f4be754f3efbbf9ab911aa51dc9d95ae0e6bd6cc722de42c73fb55b1d99afa0fd079b88eb8b6b02daef61a1b31aa4e85145cb6afde3422f95908334f0fcb3f854be64a3ed5d421f4d064ed4506194d9a982fbf77bc56a04098c9002116dc7ae98de803c47de73b10d5d74ab574a0638cbdd79c29619e9797bf6bc9d2eca3f61ceac6a008004f25c511f09af4ece0342244f18eef8829a5c41aeece4b897f9ec00deb6b072292211088cdd53c6d332e2d05df6f805deccc36a8bfdcf1922ce7de2dd52c4de4cc8141d9031bc501a92981d7d7319ebd94eb55f22b23670cf4f0038301269acc221cc110457460e3d5559fbabec52f26a1a3b06dde13aadb805889b3d2505e32b1d4d3727321ce5dc3dd027ed7fb72b772aa41def36070bef2516d2be18b52c1e582efc434034ee25ef751681cb6f663bcc129bff481a2dda30272ec2621bd5b74d7d26842ec58e4b047fe3e4dcc41821fbefc73198dfda4e43b960d6d2949b08242f1a279645f3905cf31e08b87447f60a2a1b019333333a9d6fe2cd6e96789d5c2695f565440b263be93c47dd5304be7bc6a5e0d279bcf792b8f980ca228f15d33b404033e96272473d0e58e797ac46e262d489e37901e5ffd7fae7c25a5d121a529c7d714cee14763b9a74d6cba4da429c6b78dad4f83051cab0d0b2b57e645181edf3dbddd68949b646f328e947c13af03452541461fcb6ca399971d28ea280f364e69c5be1ad2f8ce29ed07496b4247a776f0b926fbe8ed7615b4a8bd9899b6160c634a08de29fa31fd126cc3b85e0921a022378aafb79e9b320c69975da405b7b52c920344e6e5a37dc2d27d8c146a81e285886cbbb8473cbcb39cfb4d31aa681e2d6b6a9b3a8249f1d4299b67a4aeb6ecf83b4dfa2305afab990a300b2f8e41a7da2474dd822efb4ad386c79bbcdf1b719295540be1e90a8a0ebcbb146ddc9ccf4b423da50d03c3af47846e8fa1addc8d14345572921df1b8f942e761ff8f0bf48343ac3071dcbb474a95873478b9549591aa0172d7645e8047556d0963794bc742728a2fc727519c8beab3818c0922fdad79374d0764a95fda39b126ad3437c11a61be794de8627309277b05b66ea7f61b6b67daf2a126a3562aec15fc8410ba82b5cac0257ac54d5743664273ffb8312fda470dce3d8d3313ad38f5c52f297714931b5005575959f72b9038f1647395d8d76d83ad60a985ce11152f60e7dd050443d63098cac614a836546de773796b8e9e1a5ceca7be2b8d36eb80ea8472faf0372d9ce1747dbc528f7deccc594e36397d0217dff51b117c80d23c738f375e5dfb8a1443e0274846503ecac36a4fa64d48e721e0930120c88134e0c2934045f1736d5b31c3fe7d303db25804a14f1537c68756177ff98230a21f6cf6d218bae9e26c65317b28dc5587a154c5cdc748feee31f35b46cf5e3eb4dc10b5401d362c33906bb0e85a27c944fe2f5cda7cc608ba700e76bd96eea8bef89cbad0368f0aea4cbf4eac5874001068904fb33bae57d248cfecc087c078bf39ab5a82def5eefd32eba932acbfc1b8294c94c8645ec85ab2d6cca8f0f0672015b84837a2dd6b86e2308c6b9a968d177c5767185ecdce3b4fcf2e0ed08acd55cefe23fd8feca5976c44571e94c08850ef399a1c3495228ae6e53b8cb67a25f9ed21f2841e7ac83cc1e90d8362ddf3ea1ce6a70571cce6cab7326b809cdad5419d70753b887d11b7d411b42a94e55a63f8e98f898038813f6d8050d17f97876038e1d646491949bc94098502cadd18f84dcc3c1253ab504dfe5e5e3c053789009c1f21529d128b3c834ef72ef616d2ad348dbe91cd216a71b63279b291437ab0a6fdae58df0009b4faf1db21f4d1743ff361560f65c8391c5d2413ad2c9fd96d19dc098b8a8e10d2021ff73e6d13ab2c30c5a48d707c6f264a4a40428276e982ded680cc998eb076d3f0cf3f2bfa17e225cc26f02dce48d361e4e1b30ee0b1793d68eb87c2e183890b6539e34c37ce23a832edec3eafb6fc953a81d441b87db146b458b38359384deaec3c94d6ada5b632ee866629e74235c06f49b70930ef09097dde840a8600bcfb4ffd21a5450139bf84f3fe97070b3c14b0b96246122c35e4e37df274807faedc5f04de9dd217055d054b247c72964bc4740e9024376dfb34b15b6360b1a6da52323e75745b87c7cb5f797108ea5b725e63e2085fcea8178df710fee7bea4c7dce806783fd1713d08ab9eed7e06c6810b0261d4b42583939cfa436eba5fba95818e9f4c7982277ab1efa9d0c4896c52c56d66c69cabc8873cf605c1b3acb00f920b229a7a5bcbe7a22ba10d82923930754aae661dc4b9108ee0ac5d7f38a88582a0913a371ef12a197d2c17261ac3dc58e825c1b3b4e707cef2c5bcd21dacf9d83e7d2e940360970deb8ccd024ba3eb24a7953d854dcdbb7e7b162943857e24765cdae44d96586b6070862d41c8b1508c294eddbc62aad027e38273db4c9e77806bcf5e32de731b7f8effa297a70b569417dbbb48b3cbf4275f99599f44bf5824d1f7617e18117ad1dbb6cd30577c5e0ccdc2db50599d2538309af1ee1a922f94129e76fdaa2291010d70a13768fe02583dc9760fb731ba1eeef1d806b7b36a9a80052ca1cd1dc15fc90c971a1aada8f3dfba94740282b389e33236e35fb5ffa1cc8c5cdd7f48fd04fb87d2f31e1e66321bbdc3dde50c72e55084700d9c472422506ca34791f4ac71d4e01225b84505a9a65dbdda008c1b061308b6a546ecc5ec402682d56ee117cd738036394143e74418810fa58d864f6d8ea8164bc2c287ebe3d6b1279d2ff387957b33e78c58d019581fe9c50f1f95d44c08491ed551bcb5c61c9b057a86430305cfb113923933b202401106a08fb9dfd832830bcfe4e642d0acb268fe79fed2adb5b340e18a8fb77e8900a25d212af8b05fb143311477ae09ff682051834cba2c2f2208f956a6e05d74e49929d017847f0ff521a717da615d0c674826bc9ecf6a137e5a9d0387de992039640fb84272bb3c7d58c0e4ffeb32553ee00bca4e1303643b114ec2146383d4dc1b7596c6e425ea6f9197e5fb5e4883ed955f12152e743df286d42d5226942510c8cb258196c543aa61d05dd69438e2d74ff17b3dfaafe3cd3011a9a2334306b32e9de61e1dc33533d2f940d5e276a2fb6b6165386b1e8c3ab884f337c28a49e485e0adbed423e2fa7c9011eb80aa9246f8c6392902f0633e53d2a1aa94eb87c05fec724545d8c2a1ceb08c01723f30e41467379d955c9544deafbb098de80e21f036b9e879f8c70938bf15f0ec9252d6970ac881ab7edda189f4919090fce7abcacb31ab303ca00a6ea770d712afabb7b30c455f968421979c2d0dabe23d18451b042ae3ee58c3a2c319f53869d5fa9e41758a9a2e39786cc4c52ef1cdae0da5988d31028eae055255b36e6627020ac2763e1697d464c711d88faa3e2927be83a4d71920f4105c44ba3a3eb7e23bc0d6dde69c855aa36c5db50f7941a65edd66d9c2b505212ce6d72ce6114b7ebf9fe432678afb0995a63851f16f82e1a03a80d067e44a88ef8e99d6ffa915882f3d81868a8d2f83c43608a2b1a5bb81de686c4774d13f3c0ba7088530a88dfabb7e5d2f31044fc8c60f0be312a7d019f33ee661aaa6a51c4d72e107a13796fd649925cf203a317de53cbe85919f2f58fc7c27d5a6909cdda3c7ec76dbb14756ad97ed26410e34b0ffedb39c97db32e962c0a25842c61527d9172d677103507c8eff714385030d81a40c04944d99acb6e2d6acfb72a0734a7deabbadd94cccfbbd063e071bd9eb3ebdd00e4bac5a5eb3abe693fc56559b16d459e8c8e05a0b8b258f06aa6165d89b078eb6d1bdc21d41026524e696390f308710b51e9a0f54740b9dbd62a410c80885680815fefa74df439bbb59d93e7f10f40537c037eccdcb759dcfdfe28d02cec6e2056df451dfb9bd40065cac1c23e", 0x1000}, {&(0x7f0000000840)="7e8f08839f474b5a86dc2b2cbdf1fd8e71a2ee2dbd0f17e9ceb154f12030e09e1f533e88a46ccfe9a47d6e311b398882b65fad8fa2147592f167cdf1e6560efa94e977d1fc9eb3364ee0ecfa38d30e22bcf18865632de7de7d99896540d73a1bc7428a94d621a46e5199fd06b71cd1df5dd128a91387ab0efb7fd7d8cf658bd44c3aa3e863f19b96da7b4044bf2182f74b03f79edc9e358d0f938c70a17deb84ea5cc836cfe6f5399a031a5fc1f387be605c69c4c48a37aaa1ac54554215eba41c0c6f63be34ba0b6aa6120673", 0xcd}], 0x8, 0x7fff, 0xc92, 0xc) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x54) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) read(r4, &(0x7f0000000a40)=""/139, 0x8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0xc5, 0x5, 0x0) 76.428264ms ago: executing program 1 (id=21374): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_setup(0x2f35, 0x0) set_mempolicy(0x3, 0x0, 0x9) socket$netlink(0x10, 0x3, 0xc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x1d, &(0x7f0000000340)=ANY=[], 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 0s ago: executing program 5 (id=21375): pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004011}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") kernel console output (not intermixed with test programs): m0: Port device team_slave_1 added [ 2165.113938][T16397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2165.121996][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2165.148857][T16397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2165.202400][T16397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2165.220418][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2165.264894][T16397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2165.433980][T16397] hsr_slave_0: entered promiscuous mode [ 2165.458583][T16397] hsr_slave_1: entered promiscuous mode [ 2165.464797][T16397] debugfs: 'hsr0' already exists in 'hsr' [ 2165.472356][T16397] Cannot create hsr debugfs directory [ 2166.036061][T16397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2166.065231][T16397] 8021q: adding VLAN 0 to HW filter on device team0 [ 2166.075873][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.083057][ T9162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2166.121807][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.129005][ T4145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2166.145970][T16505] __nla_validate_parse: 3 callbacks suppressed [ 2166.145989][T16505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19762'. [ 2166.502514][T16511] syzkaller1: entered promiscuous mode [ 2166.536490][T16511] syzkaller1: entered allmulticast mode [ 2166.637578][T16397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2166.901800][T16397] veth0_vlan: entered promiscuous mode [ 2166.910768][T16397] veth1_vlan: entered promiscuous mode [ 2166.929210][T16397] veth0_macvtap: entered promiscuous mode [ 2166.938782][T16397] veth1_macvtap: entered promiscuous mode [ 2166.984716][T16397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2167.009133][T16397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2167.292072][T12313] IPVS: starting estimator thread 0... [ 2167.395144][T16571] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2168.113232][T16615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.149500][T16615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2168.235924][ T28] audit: type=1400 audit(2000000178.717:2635): avc: denied { getopt } for pid=16620 comm="syz.1.19795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2168.326517][T16627] netlink: 'syz.1.19798': attribute type 10 has an invalid length. [ 2168.335814][T16627] hsr0: entered promiscuous mode [ 2168.346704][T16627] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2168.357579][T16627] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2168.370760][T16627] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2168.880361][T16642] netlink: 68 bytes leftover after parsing attributes in process `syz.8.19802'. [ 2169.092373][T16656] tipc: Started in network mode [ 2169.097390][T16656] tipc: Node identity 86aa47b1c3d1, cluster identity 4711 [ 2169.105184][T16656] tipc: Enabled bearer , priority 0 [ 2169.152664][T16656] syzkaller0: entered promiscuous mode [ 2169.158664][T16656] syzkaller0: entered allmulticast mode [ 2169.165021][T16656] tipc: Resetting bearer [ 2169.182517][T16655] tipc: Resetting bearer [ 2169.205657][T16655] tipc: Disabling bearer [ 2169.333940][T16679] syzkaller1: entered promiscuous mode [ 2169.351148][T16679] syzkaller1: entered allmulticast mode [ 2169.419158][T16685] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19818'. [ 2170.546917][ T28] audit: type=1400 audit(2000000180.887:2636): avc: denied { accept } for pid=16712 comm="syz.1.19824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2170.596746][T16715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.611661][T16715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.796580][T16732] netlink: 84 bytes leftover after parsing attributes in process `syz.1.19829'. [ 2171.853492][T16742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2172.175937][T16788] syzkaller0: entered promiscuous mode [ 2172.199318][T16788] syzkaller0: entered allmulticast mode [ 2172.319827][T16792] net_ratelimit: 11 callbacks suppressed [ 2172.319846][T16792] 0: reclassify loop, rule prio 0, protocol 800 [ 2173.174166][T16810] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19850'. [ 2173.432794][T16815] netlink: 'syz.8.19851': attribute type 10 has an invalid length. [ 2173.455645][T16815] hsr0: entered promiscuous mode [ 2173.482123][T16815] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2173.518860][T16815] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2173.531845][T16815] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2173.689012][ T28] audit: type=1400 audit(2000000183.806:2637): avc: denied { connect } for pid=16813 comm="syz.9.19852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2174.038025][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19860'. [ 2174.130588][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19860'. [ 2175.858066][T16877] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19867'. [ 2176.180406][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19873'. [ 2176.253963][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19873'. [ 2176.295024][T16889] netlink: 'syz.4.19874': attribute type 10 has an invalid length. [ 2176.303164][T16889] hsr0: entered promiscuous mode [ 2176.308684][T16889] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2176.329909][T16896] netlink: 'syz.9.19875': attribute type 1 has an invalid length. [ 2176.344688][T16896] netlink: 224 bytes leftover after parsing attributes in process `syz.9.19875'. [ 2176.354559][T16889] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2176.369116][T16889] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2176.603718][T16934] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2176.618571][T16934] SELinux: failed to load policy [ 2176.649461][T16935] netlink: 104 bytes leftover after parsing attributes in process `syz.9.19888'. [ 2176.716390][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19890'. [ 2176.717491][T16940] netlink: 'syz.6.19891': attribute type 10 has an invalid length. [ 2176.760391][T16940] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 2176.819845][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19890'. [ 2176.956455][T16956] netlink: 'syz.6.19893': attribute type 10 has an invalid length. [ 2176.973971][T16956] hsr0: entered promiscuous mode [ 2176.984041][T16962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.994151][T16962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.005022][T16956] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2177.020463][T16956] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2177.033935][T16956] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2178.501966][T17029] netlink: 'syz.4.19915': attribute type 25 has an invalid length. [ 2178.678847][T10065] IPVS: starting estimator thread 0... [ 2178.777617][T17034] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2178.930008][T17042] syzkaller1: entered promiscuous mode [ 2178.969566][T17042] syzkaller1: entered allmulticast mode [ 2179.357874][T17076] hsr0: left promiscuous mode [ 2180.030842][T17082] SELinux: failed to load policy [ 2180.529773][T17093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2180.552457][T17093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.621489][T17095] netlink: 'syz.9.19938': attribute type 25 has an invalid length. [ 2180.905416][T17099] syzkaller0: entered promiscuous mode [ 2180.930242][T17099] syzkaller0: entered allmulticast mode [ 2181.041412][T17107] __nla_validate_parse: 5 callbacks suppressed [ 2181.041431][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19943'. [ 2181.076276][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19943'. [ 2181.291556][T17124] syzkaller1: entered promiscuous mode [ 2181.297141][T17124] syzkaller1: entered allmulticast mode [ 2181.374162][T17133] netlink: 'syz.9.19945': attribute type 2 has an invalid length. [ 2182.262937][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19955'. [ 2182.322581][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19955'. [ 2182.386659][T17144] hsr_slave_1 (unregistering): left promiscuous mode [ 2182.395331][T17148] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19956'. [ 2183.389146][T17168] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2183.430365][T17168] SELinux: failed to load policy [ 2183.503545][T17149] delete_channel: no stack [ 2183.995220][T17181] syzkaller0: entered promiscuous mode [ 2184.000798][T17181] syzkaller0: entered allmulticast mode [ 2184.673859][T17195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2184.699784][T17195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2184.764341][ T8289] bridge_slave_1: left allmulticast mode [ 2184.775979][ T8289] bridge_slave_1: left promiscuous mode [ 2184.819963][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.944907][ T8289] bridge_slave_0: left allmulticast mode [ 2184.992735][ T8289] bridge_slave_0: left promiscuous mode [ 2185.009975][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19976'. [ 2185.056005][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.293445][ T8289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2185.305626][ T8289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2185.315429][ T8289] bond0 (unregistering): Released all slaves [ 2185.398958][ T8289] hsr_slave_0: left promiscuous mode [ 2185.408302][ T8289] hsr_slave_1: left promiscuous mode [ 2185.414114][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2185.421940][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2185.429918][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2185.437408][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2185.450923][ T8289] veth1_macvtap: left promiscuous mode [ 2185.461666][T23012] IPVS: starting estimator thread 0... [ 2185.467317][ T8289] veth0_macvtap: left promiscuous mode [ 2185.473048][ T8289] veth1_vlan: left promiscuous mode [ 2185.478491][ T8289] veth0_vlan: left promiscuous mode [ 2185.483653][T17224] IPVS: ip_vs_add_dest(): server weight less than zero [ 2185.559557][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19984'. [ 2185.594433][T17231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2185.601908][T17231] IPv6: NLM_F_CREATE should be set when creating new route [ 2185.643741][T17225] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2186.958070][T17244] netlink: 104 bytes leftover after parsing attributes in process `syz.9.19987'. [ 2186.990470][ T8289] team0 (unregistering): Port device team_slave_1 removed [ 2187.013402][ T8289] team0 (unregistering): Port device team_slave_0 removed [ 2187.086882][T17237] hsr0: left promiscuous mode [ 2188.009977][T17204] chnl_net:caif_netlink_parms(): no params data found [ 2188.225925][T17204] bridge0: port 1(bridge_slave_0) entered blocking state [ 2188.235886][T17204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.243232][T17204] bridge_slave_0: entered allmulticast mode [ 2188.250157][T17204] bridge_slave_0: entered promiscuous mode [ 2188.285585][T17287] syzkaller1: entered promiscuous mode [ 2188.292525][T17287] syzkaller1: entered allmulticast mode [ 2188.301947][T17204] bridge0: port 2(bridge_slave_1) entered blocking state [ 2188.309206][T17204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.316593][T17204] bridge_slave_1: entered allmulticast mode [ 2188.323295][T17204] bridge_slave_1: entered promiscuous mode [ 2188.354582][T17204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2188.365304][T17204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2188.386256][T17204] team0: Port device team_slave_0 added [ 2188.393128][T17204] team0: Port device team_slave_1 added [ 2188.415802][T17204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2188.423044][T17204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2188.473687][T17204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2188.532838][T17204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2188.573567][T17204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2188.681883][T17204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2188.904084][T17204] hsr_slave_0: entered promiscuous mode [ 2188.953314][T17204] hsr_slave_1: entered promiscuous mode [ 2188.967698][T17204] debugfs: 'hsr0' already exists in 'hsr' [ 2189.530805][T17204] Cannot create hsr debugfs directory [ 2189.707159][ T8289] nci: nci_ntf_packet: unknown ntf opcode 0x122 [ 2189.800325][ T28] audit: type=1400 audit(2000000198.903:2638): avc: denied { accept } for pid=17310 comm="syz.6.20006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2189.811279][T17330] SELinux: failed to load policy [ 2189.848498][T17332] syzkaller0: entered promiscuous mode [ 2189.854471][T17332] syzkaller0: entered allmulticast mode [ 2190.530283][T17318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2190.582632][T17347] loop2: detected capacity change from 0 to 7 [ 2190.606013][T17204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2190.620851][T17204] 8021q: adding VLAN 0 to HW filter on device team0 [ 2190.631563][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.638747][ T8289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2190.659886][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.667063][ T8289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.690369][T17353] syzkaller1: entered promiscuous mode [ 2190.696105][T17353] syzkaller1: entered allmulticast mode [ 2190.916375][T17204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2191.552950][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20022'. [ 2191.714063][T17399] syzkaller1: entered promiscuous mode [ 2191.719592][T17399] syzkaller1: entered allmulticast mode [ 2191.721756][T17386] SELinux: failed to load policy [ 2191.885207][T17204] veth0_vlan: entered promiscuous mode [ 2191.913983][T17204] veth1_vlan: entered promiscuous mode [ 2191.930003][T17204] veth0_macvtap: entered promiscuous mode [ 2191.937456][T17204] veth1_macvtap: entered promiscuous mode [ 2192.086993][T23012] IPVS: starting estimator thread 0... [ 2192.115992][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20036'. [ 2192.605905][T17204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2192.620323][T17204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2192.654999][T17419] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2192.776724][T17434] syzkaller0: entered promiscuous mode [ 2192.798860][T17434] syzkaller0: entered allmulticast mode [ 2192.934961][T17437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20040'. [ 2193.115315][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20040'. [ 2194.219576][T17463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20044'. [ 2194.706936][T17479] syzkaller0: entered promiscuous mode [ 2194.742027][T17479] syzkaller0: entered allmulticast mode [ 2196.500005][T17514] netlink: 'syz.2.20062': attribute type 2 has an invalid length. [ 2196.626272][T17516] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20050'. [ 2196.791473][T17519] netlink: 'syz.9.20067': attribute type 25 has an invalid length. [ 2197.113445][ T9162] bridge_slave_1: left allmulticast mode [ 2197.138839][ T9162] bridge_slave_1: left promiscuous mode [ 2197.164795][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 2197.198310][ T9162] bridge_slave_0: left allmulticast mode [ 2197.215189][ T9162] bridge_slave_0: left promiscuous mode [ 2197.238955][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 2197.445678][ T9162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2197.466340][ T9162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2197.476448][ T9162] bond0 (unregistering): Released all slaves [ 2197.539251][T17531] syzkaller0: entered promiscuous mode [ 2197.553182][T17531] syzkaller0: entered allmulticast mode [ 2197.576195][ T9162] hsr_slave_0: left promiscuous mode [ 2197.584432][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2197.602737][ T9162] batadv0: mtu less than device minimum [ 2197.615022][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.626088][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.637295][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.648459][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.659577][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.670481][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.681332][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.692271][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.703249][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2197.753486][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2197.761391][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2197.780801][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2197.791704][ T9162] batman_adv: batadv0: Interface deactivated: dummy0 [ 2197.826107][ T9162] batman_adv: batadv0: Removing interface: dummy0 [ 2197.865549][ T9162] veth1_macvtap: left promiscuous mode [ 2197.876516][ T9162] veth0_macvtap: left promiscuous mode [ 2197.882397][ T9162] veth1_vlan: left promiscuous mode [ 2197.887935][ T9162] veth0_vlan: left promiscuous mode [ 2198.125253][ T9162] team0 (unregistering): Port device team_slave_1 removed [ 2198.136181][ T9162] team0 (unregistering): Port device team_slave_0 removed [ 2198.818198][T17527] chnl_net:caif_netlink_parms(): no params data found [ 2198.939939][T17527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.957264][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.971267][T17527] bridge_slave_0: entered allmulticast mode [ 2198.983626][T17527] bridge_slave_0: entered promiscuous mode [ 2198.994605][T17527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.008137][T17527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.022334][T17527] bridge_slave_1: entered allmulticast mode [ 2199.033613][T17527] bridge_slave_1: entered promiscuous mode [ 2199.061665][ T9162] IPVS: stop unused estimator thread 0... [ 2199.097320][T17527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.118087][T17572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20080'. [ 2199.129563][T17527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.174296][T17527] team0: Port device team_slave_0 added [ 2199.185542][T17527] team0: Port device team_slave_1 added [ 2199.320805][T17579] syzkaller1: entered promiscuous mode [ 2199.326955][T17579] syzkaller1: entered allmulticast mode [ 2199.333607][T17527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2199.341345][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.373424][T17527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2200.387711][T17527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2200.394861][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.420839][T17527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2200.669408][T17601] syzkaller0: entered promiscuous mode [ 2200.679927][T17601] syzkaller0: entered allmulticast mode [ 2200.791265][T17527] hsr_slave_0: entered promiscuous mode [ 2200.814402][T17527] hsr_slave_1: entered promiscuous mode [ 2200.927331][T17527] debugfs: 'hsr0' already exists in 'hsr' [ 2200.934072][T17527] Cannot create hsr debugfs directory [ 2201.056035][ T9162] bridge_slave_1: left allmulticast mode [ 2201.063444][ T9162] bridge_slave_1: left promiscuous mode [ 2201.069446][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.077459][ T9162] bridge_slave_0: left allmulticast mode [ 2201.083525][ T9162] bridge_slave_0: left promiscuous mode [ 2201.089936][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.157802][ T9162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2201.168064][ T9162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2201.177647][ T9162] bond0 (unregistering): Released all slaves [ 2201.185984][ T9162] bond1 (unregistering): Released all slaves [ 2201.199687][T17628] syzkaller1: entered promiscuous mode [ 2201.205243][T17628] syzkaller1: entered allmulticast mode [ 2201.246975][ T9162] tipc: Left network mode [ 2201.263216][ T9162] hsr_slave_0: left promiscuous mode [ 2201.276681][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.288041][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.358057][ T9162] team0 (unregistering): Port device team_slave_1 removed [ 2201.439804][T17527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2201.462552][T17527] 8021q: adding VLAN 0 to HW filter on device team0 [ 2201.497543][T17527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2201.508157][T17527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2201.524056][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.531249][T13570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2201.540668][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.547775][T13570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.637440][T17527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2201.657405][T17639] chnl_net:caif_netlink_parms(): no params data found [ 2201.713544][ T9162] IPVS: stop unused estimator thread 0... [ 2201.746917][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.754764][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.781628][T17639] bridge_slave_0: entered allmulticast mode [ 2201.794621][T17639] bridge_slave_0: entered promiscuous mode [ 2201.803811][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.811295][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.818928][T17639] bridge_slave_1: entered allmulticast mode [ 2201.826131][T17639] bridge_slave_1: entered promiscuous mode [ 2201.887816][T17639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2201.899762][T17639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2201.926821][T17639] team0: Port device team_slave_0 added [ 2201.934591][T17639] team0: Port device team_slave_1 added [ 2201.983832][T17639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2201.991290][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2202.026535][T17639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2202.038624][T17639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2202.046370][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2202.072625][T17639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2202.103980][T17639] hsr_slave_0: entered promiscuous mode [ 2202.110604][T17639] hsr_slave_1: entered promiscuous mode [ 2202.116960][T17639] debugfs: 'hsr0' already exists in 'hsr' [ 2202.122857][T17639] Cannot create hsr debugfs directory [ 2202.143312][T17527] veth0_vlan: entered promiscuous mode [ 2202.173301][T17527] veth1_vlan: entered promiscuous mode [ 2202.251915][T17527] veth0_macvtap: entered promiscuous mode [ 2202.260715][T17527] veth1_macvtap: entered promiscuous mode [ 2202.280584][T17527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2202.292175][T17527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2202.423852][T17639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2202.473414][T17639] 8021q: adding VLAN 0 to HW filter on device team0 [ 2202.631954][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.639177][T13572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2202.772967][ T28] audit: type=1400 audit(2000000211.026:2639): avc: denied { bind } for pid=17690 comm="syz.5.20071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2202.815299][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.822523][T13572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2202.855621][T17639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2203.043776][T17639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2203.432068][T17639] veth0_vlan: entered promiscuous mode [ 2203.441311][T17639] veth1_vlan: entered promiscuous mode [ 2203.465900][T17639] veth0_macvtap: entered promiscuous mode [ 2203.476372][T17639] veth1_macvtap: entered promiscuous mode [ 2203.489931][T17639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2203.503369][T17639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2204.756970][T17731] syzkaller1: entered promiscuous mode [ 2204.775201][T17731] syzkaller1: entered allmulticast mode [ 2204.803369][T17736] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20113'. [ 2204.974284][T17743] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.986335][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.688784][T17767] UHID_CREATE from different security context by process 14 (syz.7.20127), this is not allowed. [ 2205.703816][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2205.737909][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2205.766809][T17770] 9p: Bad value for 'rfdno' [ 2205.855119][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2205.923566][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2205.955935][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20130'. [ 2205.978183][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2206.023147][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2206.065747][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2206.111113][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2206.172884][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2206.235289][ T2335] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 2206.267085][ T2335] hid-generic 0000:0000:0004.0002: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2206.329452][T17783] fido_id[17783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2206.517457][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20138'. [ 2206.548851][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.562846][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2206.590826][T17801] loop7: detected capacity change from 0 to 512 [ 2206.600582][T17803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.606908][T17801] EXT4-fs: Ignoring removed mblk_io_submit option [ 2206.620817][T17803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2206.877513][T17801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2206.893115][T17801] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2206.957143][T10065] hid-generic 0000:0000:0004.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2207.296397][T17817] fido_id[17817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2207.441476][T17803] Invalid ELF header magic: != ELF [ 2207.492653][ T28] audit: type=1400 audit(2000000215.403:2640): avc: denied { module_load } for pid=17802 comm="syz.1.20142" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=227168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 2207.907287][T17837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.040467][T17837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.095370][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20152'. [ 2208.194585][T17843] syzkaller0: entered promiscuous mode [ 2208.214972][T17843] syzkaller0: entered allmulticast mode [ 2208.843761][T17855] netlink: 40 bytes leftover after parsing attributes in process `syz.6.20158'. [ 2210.583804][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2210.678455][T17893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.687254][T17893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.123822][T17921] netlink: 'syz.6.20184': attribute type 25 has an invalid length. [ 2212.996075][T17948] netlink: 'syz.7.20193': attribute type 33 has an invalid length. [ 2213.008962][T17948] netlink: 152 bytes leftover after parsing attributes in process `syz.7.20193'. [ 2213.035698][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20193'. [ 2213.278392][T17957] netlink: 'syz.7.20196': attribute type 25 has an invalid length. [ 2214.090022][T17973] syzkaller0: entered promiscuous mode [ 2214.095647][T17973] syzkaller0: entered allmulticast mode [ 2214.204822][T17974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20202'. [ 2216.116979][T18005] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.131763][T18005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.577881][ T28] audit: type=1400 audit(2000000223.944:2641): avc: denied { listen } for pid=18007 comm="syz.7.20216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2216.605059][T18011] netlink: 48 bytes leftover after parsing attributes in process `syz.6.20217'. [ 2216.678689][ T28] audit: type=1400 audit(2000000224.000:2642): avc: denied { shutdown } for pid=18007 comm="syz.7.20216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2216.750468][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20217'. [ 2217.245227][T18043] syzkaller0: entered promiscuous mode [ 2217.260546][T18043] syzkaller0: entered allmulticast mode [ 2218.507634][T18048] netlink: 96 bytes leftover after parsing attributes in process `syz.6.20230'. [ 2218.558009][T18048] netlink: 96 bytes leftover after parsing attributes in process `syz.6.20230'. [ 2219.581165][T18066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.685336][T18066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.885530][T18077] netlink: 68 bytes leftover after parsing attributes in process `syz.6.20244'. [ 2220.323174][T18081] netlink: 48 bytes leftover after parsing attributes in process `syz.6.20245'. [ 2220.581674][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20245'. [ 2220.643743][T18093] netlink: 64 bytes leftover after parsing attributes in process `syz.6.20248'. [ 2220.664382][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20248'. [ 2220.706247][T18093] netlink: 64 bytes leftover after parsing attributes in process `syz.6.20248'. [ 2220.770339][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20248'. [ 2220.811161][T18093] netlink: 64 bytes leftover after parsing attributes in process `syz.6.20248'. [ 2222.314390][T18133] syzkaller0: entered promiscuous mode [ 2222.319992][T18133] syzkaller0: entered allmulticast mode [ 2222.354903][T10063] hid_parser_main: 192 callbacks suppressed [ 2222.354927][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.383877][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.398091][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.420408][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.436975][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.452317][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.468711][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.624144][T10066] IPVS: starting estimator thread 0... [ 2222.631617][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2222.659606][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2223.047569][T18145] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2223.090714][T10063] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 2223.175326][T10063] hid-generic 0000:0000:0004.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2223.335296][T18152] fido_id[18152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2223.534708][T18158] netlink: 'syz.5.20272': attribute type 10 has an invalid length. [ 2223.553225][T18158] hsr0: entered promiscuous mode [ 2223.572406][T18158] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2223.601968][T18158] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2223.817294][T18158] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2223.879888][T18184] __nla_validate_parse: 2 callbacks suppressed [ 2223.879907][T18184] netlink: 68 bytes leftover after parsing attributes in process `syz.5.20283'. [ 2224.019158][T23012] hid-generic 0000:0000:0004.0005: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2224.083371][T18191] fido_id[18191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2224.113340][ T28] audit: type=1400 audit(2000000230.987:2643): avc: denied { lock } for pid=18195 comm="syz.5.20288" path="socket:[229305]" dev="sockfs" ino=229305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2225.801809][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20291'. [ 2226.181750][T18222] syzkaller0: entered promiscuous mode [ 2226.187280][T18222] syzkaller0: entered allmulticast mode [ 2226.340381][T18226] netlink: 68 bytes leftover after parsing attributes in process `syz.7.20296'. [ 2226.424228][T10067] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2226.464745][T18230] fido_id[18230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2226.519676][T18235] vlan2: entered promiscuous mode [ 2226.526271][T18235] vlan2: entered allmulticast mode [ 2226.531806][T18235] hsr_slave_1: entered allmulticast mode [ 2226.542910][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20300'. [ 2226.568586][T18236] tipc: Started in network mode [ 2226.573510][T18236] tipc: Node identity 1e18f50f282a, cluster identity 4711 [ 2226.580986][T18236] tipc: Enabled bearer , priority 0 [ 2226.591727][T18236] netlink: 44 bytes leftover after parsing attributes in process `syz.6.20299'. [ 2226.603787][T18236] tipc: Resetting bearer [ 2226.613147][T18232] tipc: Disabling bearer [ 2226.698186][T18254] syzkaller0: entered promiscuous mode [ 2226.704222][T18254] syzkaller0: entered allmulticast mode [ 2227.247928][T18267] netlink: 'syz.6.20311': attribute type 10 has an invalid length. [ 2227.256722][T18267] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2227.301933][T18267] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2227.322231][T18272] netlink: 68 bytes leftover after parsing attributes in process `syz.5.20313'. [ 2227.354118][T18267] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2227.397912][T18275] syzkaller0: entered promiscuous mode [ 2227.406921][T18275] syzkaller0: entered allmulticast mode [ 2227.613922][T18296] syzkaller0: entered promiscuous mode [ 2227.619542][T18296] syzkaller0: entered allmulticast mode [ 2227.792108][T18305] netlink: 104 bytes leftover after parsing attributes in process `syz.6.20325'. [ 2227.842683][T18309] syzkaller0: entered promiscuous mode [ 2227.848827][T18309] syzkaller0: entered allmulticast mode [ 2227.880944][T18307] netlink: 'syz.6.20326': attribute type 10 has an invalid length. [ 2227.889329][T18307] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2227.900461][T18307] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2227.913284][T18307] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2228.568676][T18343] syzkaller0: entered promiscuous mode [ 2228.580292][T18343] syzkaller0: entered allmulticast mode [ 2230.335154][T18376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20350'. [ 2230.784691][T12313] IPVS: starting estimator thread 0... [ 2230.906122][T18395] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2231.453983][T18413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.502532][T18413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.364008][T18432] syzkaller0: entered promiscuous mode [ 2232.397752][T18432] syzkaller0: entered allmulticast mode [ 2232.863484][T18451] syzkaller0: entered promiscuous mode [ 2232.869120][T18451] syzkaller0: entered allmulticast mode [ 2233.257147][T18460] netlink: 'syz.6.20376': attribute type 10 has an invalid length. [ 2233.265626][T18460] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2233.279542][T18460] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2233.292523][T18460] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2233.464451][T18465] tipc: Enabled bearer , priority 0 [ 2233.479169][T18465] syzkaller0: entered promiscuous mode [ 2233.485290][T18465] syzkaller0: entered allmulticast mode [ 2233.497219][T18467] syzkaller0: entered promiscuous mode [ 2233.502880][T18467] syzkaller0: entered allmulticast mode [ 2233.518226][T18465] tipc: Resetting bearer [ 2233.526796][T18464] tipc: Resetting bearer [ 2233.537314][T18464] tipc: Disabling bearer [ 2233.738497][ T28] audit: type=1400 audit(2000000240.004:2644): avc: denied { write } for pid=18473 comm="syz.6.20381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2234.022229][T18493] netlink: 'syz.6.20387': attribute type 10 has an invalid length. [ 2234.034065][T18493] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2234.050901][T18493] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2234.065024][T18493] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2234.416064][T18503] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.437647][T18504] syzkaller0: entered promiscuous mode [ 2234.443401][T18504] syzkaller0: entered allmulticast mode [ 2234.449530][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.461283][T18503] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.470752][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.480124][T18503] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.500034][T18503] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.512150][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.521336][T18503] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.530496][T18503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20388'. [ 2234.845731][T18530] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2234.954601][T18532] netlink: 'syz.7.20399': attribute type 10 has an invalid length. [ 2234.963577][T18532] hsr0: entered promiscuous mode [ 2234.973380][T18532] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2235.007930][T18532] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2235.119793][T18532] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2235.905409][T18543] syzkaller0: entered promiscuous mode [ 2235.963606][T18543] syzkaller0: entered allmulticast mode [ 2236.234237][ T28] audit: type=1400 audit(2000000242.277:2645): avc: denied { accept } for pid=18544 comm="syz.5.20402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2237.277361][T18576] __nla_validate_parse: 6 callbacks suppressed [ 2237.278538][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20410'. [ 2237.413060][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20413'. [ 2237.444329][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20413'. [ 2237.509365][T18591] syzkaller0: entered promiscuous mode [ 2237.515005][T18591] syzkaller0: entered allmulticast mode [ 2237.717439][T23012] IPVS: starting estimator thread 0... [ 2237.826849][T18601] IPVS: using max 2448 ests per chain, 122400 per kthread [ 2237.835377][T18605] netlink: 40 bytes leftover after parsing attributes in process `syz.7.20418'. [ 2238.927081][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20426'. [ 2238.978631][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20429'. [ 2239.019219][T18628] vlan2: entered promiscuous mode [ 2239.047285][T18628] gretap0: entered promiscuous mode [ 2239.159666][T18637] syzkaller0: entered promiscuous mode [ 2239.199930][T18637] syzkaller0: entered allmulticast mode [ 2241.158362][T18689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20443'. [ 2241.567772][T18713] syzkaller0: entered promiscuous mode [ 2241.627776][T18713] syzkaller0: entered allmulticast mode [ 2241.770293][T18717] netlink: 'syz.5.20452': attribute type 25 has an invalid length. [ 2243.258097][T18751] syzkaller0: entered promiscuous mode [ 2243.274483][T18751] syzkaller0: entered allmulticast mode [ 2243.289090][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20464'. [ 2245.554347][T18801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.564598][T18801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.980998][T18808] lo speed is unknown, defaulting to 1000 [ 2245.986852][T18808] lo speed is unknown, defaulting to 1000 [ 2245.993112][T18808] lo speed is unknown, defaulting to 1000 [ 2245.999883][T18808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2246.008994][T18808] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2246.250263][T18809] net_ratelimit: 30 callbacks suppressed [ 2246.250285][T18809] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 2246.288765][T18808] lo speed is unknown, defaulting to 1000 [ 2246.295571][T18808] lo speed is unknown, defaulting to 1000 [ 2246.302308][T18808] lo speed is unknown, defaulting to 1000 [ 2246.308633][T18808] lo speed is unknown, defaulting to 1000 [ 2246.315371][T18808] lo speed is unknown, defaulting to 1000 [ 2246.322089][T18808] lo speed is unknown, defaulting to 1000 [ 2246.328583][T18808] lo speed is unknown, defaulting to 1000 [ 2246.335181][T18808] lo speed is unknown, defaulting to 1000 [ 2246.341477][T18808] lo speed is unknown, defaulting to 1000 [ 2246.347903][T18808] lo speed is unknown, defaulting to 1000 [ 2246.354424][T18808] lo speed is unknown, defaulting to 1000 [ 2246.777177][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20484'. [ 2247.645077][T18851] syzkaller0: entered promiscuous mode [ 2247.651181][T18851] syzkaller0: entered allmulticast mode [ 2247.672734][T18853] netlink: 'syz.7.20498': attribute type 25 has an invalid length. [ 2248.783095][T18889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2248.802011][T18889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.829216][T18890] netlink: 'syz.1.20510': attribute type 24 has an invalid length. [ 2248.844464][T18894] syzkaller0: entered promiscuous mode [ 2248.849979][T18894] syzkaller0: entered allmulticast mode [ 2249.333590][T18931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2249.347809][T18931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2249.385181][T18934] netlink: 'syz.6.20524': attribute type 24 has an invalid length. [ 2249.755908][T18948] loop6: detected capacity change from 0 to 512 [ 2249.782381][T18948] EXT4-fs: Ignoring removed mblk_io_submit option [ 2249.809390][T18948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2249.822492][T18948] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2250.076050][T18967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.084925][T18967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.221558][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20534'. [ 2250.658527][T18985] netlink: 124 bytes leftover after parsing attributes in process `syz.7.20540'. [ 2250.948625][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20550'. [ 2251.030985][T19011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.040171][T19011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.484838][T19013] syzkaller0: entered promiscuous mode [ 2251.492642][T19013] syzkaller0: entered allmulticast mode [ 2251.515827][T19015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20554'. [ 2251.526580][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20554'. [ 2251.922094][T19049] netlink: 52 bytes leftover after parsing attributes in process `syz.7.20566'. [ 2251.931441][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20566'. [ 2252.639491][T19083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20575'. [ 2253.015429][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2253.729160][T19131] xt_hashlimit: size too large, truncated to 1048576 [ 2253.780725][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20592'. [ 2254.284554][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20598'. [ 2254.382007][T19161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2254.408084][T19161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.291460][T10063] hid_parser_main: 293 callbacks suppressed [ 2255.291480][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.431457][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.522762][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.532330][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.542039][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.552508][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.561738][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.592460][T19191] __nla_validate_parse: 1 callbacks suppressed [ 2255.592476][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20612'. [ 2255.611211][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.653536][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.662677][T10063] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 2255.691149][T10063] hid-generic 0000:0000:0004.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2255.925172][T19196] fido_id[19196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2256.820903][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20627'. [ 2257.279923][T19254] netlink: 84 bytes leftover after parsing attributes in process `syz.6.20632'. [ 2257.348648][T19261] netlink: 'syz.1.20635': attribute type 24 has an invalid length. [ 2257.383130][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20636'. [ 2257.424974][T12313] hid-generic 0000:0000:0004.0008: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2257.522114][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20638'. [ 2257.549400][T19269] fido_id[19269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2257.770161][T19286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.787723][T19286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.545167][T19296] netlink: 'syz.1.20648': attribute type 24 has an invalid length. [ 2258.599559][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20649'. [ 2258.654293][T19201] hid-generic 0000:0000:0004.0009: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2259.301240][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20655'. [ 2259.619287][T19330] netlink: 'syz.6.20661': attribute type 25 has an invalid length. [ 2259.664418][T19332] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1 [ 2259.675688][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20660'. [ 2259.686897][T19332] ref_ctr increment failed for inode: 0x3a5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810170a880 [ 2259.700965][T19331] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1 [ 2259.711711][T19331] ref_ctr decrement failed for inode: 0x3a5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810170a880 [ 2259.723192][T19331] uprobe: syz.6.20662:19331 failed to unregister, leaking uprobe [ 2259.767770][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20663'. [ 2261.365846][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20670'. [ 2261.391050][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20674'. [ 2263.289007][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20685'. [ 2263.533417][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20686'. [ 2264.141530][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20688'. [ 2266.098351][T19455] loop6: detected capacity change from 0 to 1024 [ 2266.779964][T19458] loop5: detected capacity change from 0 to 512 [ 2266.805693][T19455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2267.018959][T19473] netlink: 'syz.1.20706': attribute type 25 has an invalid length. [ 2267.063157][T19458] EXT4-fs (loop5): 1 orphan inode deleted [ 2267.094809][T19470] loop7: detected capacity change from 0 to 512 [ 2267.095423][T19458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2267.272652][T19491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.282019][T19491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.288905][T19470] EXT4-fs (loop7): 1 orphan inode deleted [ 2267.303535][T19470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2267.629676][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2267.867981][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2268.079756][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2268.839467][T19504] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2270.214825][T19513] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2270.539052][T19542] loop7: detected capacity change from 0 to 128 [ 2270.875480][ T28] audit: type=1400 audit(2000000274.726:2646): avc: denied { sys_module } for pid=19552 comm="syz.2.20732" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2270.952043][ T28] audit: type=1400 audit(2000000274.726:2647): avc: denied { module_request } for pid=19552 comm="syz.2.20732" kmod="wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2271.030390][ T28] audit: type=1400 audit(2000000274.764:2648): avc: denied { read write } for pid=17639 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2271.113347][ T28] audit: type=1400 audit(2000000274.764:2649): avc: denied { open } for pid=17639 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2271.171700][ T28] audit: type=1400 audit(2000000274.764:2650): avc: denied { ioctl } for pid=17639 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2271.223356][T19563] loop5: detected capacity change from 0 to 512 [ 2271.234754][ T28] audit: type=1400 audit(2000000274.773:2651): avc: denied { read } for pid=19552 comm="syz.2.20732" dev="nsfs" ino=4026532706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2271.346070][T19563] EXT4-fs (loop5): 1 orphan inode deleted [ 2271.385048][T19563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2271.420750][T19567] lo speed is unknown, defaulting to 1000 [ 2271.473382][ T28] audit: type=1400 audit(2000000274.773:2652): avc: denied { open } for pid=19552 comm="syz.2.20732" path="net:[4026532706]" dev="nsfs" ino=4026532706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2271.703634][ T28] audit: type=1400 audit(2000000274.773:2653): avc: denied { create } for pid=19552 comm="syz.2.20732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2271.724654][ T28] audit: type=1400 audit(2000000274.783:2654): avc: denied { ioctl } for pid=19552 comm="syz.2.20732" path="socket:[234075]" dev="sockfs" ino=234075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2271.763332][ T28] audit: type=1400 audit(2000000274.792:2655): avc: denied { prog_load } for pid=19557 comm="syz.7.20733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2271.813041][T19574] loop2: detected capacity change from 0 to 512 [ 2271.835669][T19576] loop1: detected capacity change from 0 to 128 [ 2271.878625][T19578] loop6: detected capacity change from 0 to 1024 [ 2271.905768][T19578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2271.929564][T19578] System zones: 0-1, 3-36 [ 2271.939650][T19580] loop7: detected capacity change from 0 to 1024 [ 2271.954076][T19578] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.20738: bad orphan inode 134217728 [ 2271.998546][T19578] loop6: lost filesystem error report for type 5 error -117 [ 2272.000330][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 2272.004271][T19580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2272.008896][ C0] EXT4-fs (loop6): initial error at time 2000000275: ext4_orphan_get:1417 [ 2272.017368][T19578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2272.027727][ C0] [ 2272.051763][ C0] EXT4-fs (loop6): last error at time 2000000275: ext4_orphan_get:1417 [ 2272.064175][T19574] EXT4-fs (loop2): 1 orphan inode deleted [ 2272.075446][T19574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2272.241525][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2272.330727][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2272.364522][T19588] loop6: detected capacity change from 0 to 512 [ 2272.477687][T19596] netlink: 'syz.5.20742': attribute type 25 has an invalid length. [ 2272.478340][T19588] EXT4-fs (loop6): 1 orphan inode deleted [ 2272.501639][T19588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2272.726442][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2272.818947][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2272.895457][T19622] netlink: 'syz.2.20753': attribute type 24 has an invalid length. [ 2272.979185][T19627] loop2: detected capacity change from 0 to 512 [ 2273.000938][T19627] EXT4-fs: Ignoring removed mblk_io_submit option [ 2273.063884][T19627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2273.079974][T19627] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2273.342521][T19644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.351527][T19644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.748727][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2273.878070][T19656] loop7: detected capacity change from 0 to 128 [ 2273.893528][T19656] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2273.933394][T19656] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2274.252899][T18209] hid_parser_main: 293 callbacks suppressed [ 2274.252957][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2274.966350][T19660] loop5: detected capacity change from 0 to 128 [ 2274.977906][T19660] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2275.013542][T19660] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2275.037571][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.045157][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.052729][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.060211][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.067814][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.075291][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.082858][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.196406][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.211880][T18209] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 2275.429776][T18209] hid-generic 0000:0000:0004.000A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2275.520266][T19664] fido_id[19664]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2276.326991][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 2276.327017][ T28] audit: type=1400 audit(2000000279.806:2729): avc: denied { read } for pid=19687 comm="syz.1.20774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 2276.848537][T19694] loop6: detected capacity change from 0 to 1024 [ 2277.233758][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2277.275356][T19694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2277.306662][T19692] loop5: detected capacity change from 0 to 1024 [ 2277.451711][T19699] loop2: detected capacity change from 0 to 512 [ 2277.552573][T19692] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2277.578510][T19692] System zones: 0-1, 3-36 [ 2277.615498][T19692] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.20776: bad orphan inode 134217728 [ 2277.655752][T19692] loop5: lost filesystem error report for type 5 error -117 [ 2277.665380][T19692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2277.696647][T19699] EXT4-fs (loop2): 1 orphan inode deleted [ 2277.713233][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20778'. [ 2277.727996][T19699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2277.751680][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20778'. [ 2277.763259][ T28] audit: type=1400 audit(2000000281.162:2730): avc: denied { setopt } for pid=19702 comm="syz.7.20778" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2277.879579][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2278.116247][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2278.168846][T19720] loop1: detected capacity change from 0 to 512 [ 2278.179182][T19720] EXT4-fs: Ignoring removed mblk_io_submit option [ 2278.199832][ T28] audit: type=1400 audit(2000000281.583:2731): avc: denied { create } for pid=19722 comm="syz.6.20786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2278.254128][T19720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2278.335586][T19720] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2278.944731][T19733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.953498][T19733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.411992][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2279.627370][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20791'. [ 2279.725117][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20791'. [ 2280.167196][T19755] loop7: detected capacity change from 0 to 1024 [ 2280.192954][T19755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2280.261593][T19763] loop5: detected capacity change from 0 to 512 [ 2280.377136][T19763] EXT4-fs (loop5): 1 orphan inode deleted [ 2280.390603][T19763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2280.469333][T19757] loop2: detected capacity change from 0 to 1024 [ 2280.503699][T19766] loop6: detected capacity change from 0 to 128 [ 2280.532610][T19757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2280.568895][T19757] System zones: 0-1, 3-36 [ 2280.593644][T19757] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.20797: bad orphan inode 134217728 [ 2280.605939][T19757] loop2: lost filesystem error report for type 5 error -117 [ 2280.624199][T19757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2280.685922][ T28] audit: type=1400 audit(2000000283.912:2732): avc: denied { write } for pid=19756 comm="syz.2.20797" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2280.884703][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2280.984846][T19771] loop7: detected capacity change from 0 to 512 [ 2281.107465][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2281.134139][T19771] EXT4-fs (loop7): 1 orphan inode deleted [ 2281.158991][T19771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2281.176182][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2281.336202][T19782] loop2: detected capacity change from 0 to 1024 [ 2281.399149][T19782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2281.431524][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2281.485888][T10063] hid_parser_main: 91 callbacks suppressed [ 2281.485911][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.501379][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.508883][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.516407][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.523831][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.531439][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.539104][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.584956][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.608241][T19777] loop5: detected capacity change from 0 to 1024 [ 2281.615303][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.630547][T10063] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 2281.653497][T10063] hid-generic 0000:0000:0004.000B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2281.701882][T19777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2281.715594][T19777] System zones: 0-1, 3-36 [ 2281.727577][T19777] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.20802: bad orphan inode 134217728 [ 2281.760724][T19777] loop5: lost filesystem error report for type 5 error -117 [ 2281.769633][T19777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2281.798439][T19791] fido_id[19791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2281.833473][T19796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20806'. [ 2281.960325][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2282.043453][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2282.144748][T19803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2282.231799][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2282.486545][T19801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2282.514367][T19801] System zones: 0-1, 3-36 [ 2282.529706][T19801] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.20809: bad orphan inode 134217728 [ 2282.542609][T19801] loop6: lost filesystem error report for type 5 error -117 [ 2282.565127][T19801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2282.591584][T19805] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2282.619728][T19805] System zones: 0-1, 3-36 [ 2282.662085][T19805] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.20811: bad orphan inode 134217728 [ 2282.676388][T19805] loop7: lost filesystem error report for type 5 error -117 [ 2282.682342][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 2282.700996][ C0] EXT4-fs (loop7): initial error at time 2000000285: ext4_orphan_get:1417 [ 2282.711419][ C0] EXT4-fs (loop7): last error at time 2000000285: ext4_orphan_get:1417 [ 2282.741848][T19805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2282.791397][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2282.806251][T19820] set_capacity_and_notify: 3 callbacks suppressed [ 2282.806276][T19820] loop1: detected capacity change from 0 to 512 [ 2282.830469][T19820] EXT4-fs: Ignoring removed mblk_io_submit option [ 2282.938232][T19820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2282.984215][T19820] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2283.108049][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2283.139859][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2283.383883][T19831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.392408][T19831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.405908][ T28] audit: type=1400 audit(2000000286.447:2733): avc: denied { create } for pid=19824 comm="syz.6.20815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2283.508291][T19829] loop7: detected capacity change from 0 to 1024 [ 2283.635075][T19834] loop2: detected capacity change from 0 to 512 [ 2283.800741][T19836] loop5: detected capacity change from 0 to 1024 [ 2283.807699][T19829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2283.828046][T19836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2283.895689][T19834] EXT4-fs (loop2): 1 orphan inode deleted [ 2283.907078][T19834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2284.469768][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2284.500812][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2284.663324][ T28] audit: type=1400 audit(2000000287.626:2734): avc: denied { execute } for pid=19845 comm="syz.5.20821" path="/160/cpu.stat" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2284.724914][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2284.824133][ T28] audit: type=1400 audit(2000000287.775:2735): avc: denied { write } for pid=19849 comm="syz.7.20823" name="mcfilter6" dev="proc" ino=4026533347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2286.008074][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2286.680890][T19878] loop7: detected capacity change from 0 to 1024 [ 2286.699317][T19875] loop5: detected capacity change from 0 to 128 [ 2286.723899][T19878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2287.201359][T19892] loop6: detected capacity change from 0 to 128 [ 2287.211598][T19892] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2287.273066][T19892] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2288.127620][ T28] audit: type=1400 audit(2000000290.189:2736): avc: denied { create } for pid=19894 comm="syz.1.20836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2288.170612][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2288.174746][ T28] audit: type=1400 audit(2000000290.366:2737): avc: denied { accept } for pid=19894 comm="syz.1.20836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2288.325602][ T28] audit: type=1400 audit(2000000291.059:2738): avc: denied { write } for pid=19903 comm="syz.6.20839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2288.362689][T19906] loop5: detected capacity change from 0 to 1024 [ 2288.406987][T19906] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2288.416869][T19906] System zones: 0-1, 3-36 [ 2288.428744][T19906] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.20840: bad orphan inode 134217728 [ 2288.440423][T19906] loop5: lost filesystem error report for type 5 error -117 [ 2288.441863][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 2288.457446][ C1] EXT4-fs (loop5): initial error at time 2000000291: ext4_orphan_get:1417 [ 2288.466200][ C1] EXT4-fs (loop5): last error at time 2000000291: ext4_orphan_get:1417 [ 2288.490172][T19906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2289.204291][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2289.258174][T18209] hid_parser_main: 91 callbacks suppressed [ 2289.258193][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.277890][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.285637][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.293572][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.301260][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.310185][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.317649][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.327568][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.335270][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.342975][T18209] hid-generic 0000:0000:0004.000C: unknown main item tag 0x0 [ 2289.434106][T18209] hid-generic 0000:0000:0004.000C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2289.476619][T19924] loop7: detected capacity change from 0 to 1024 [ 2289.497799][T19929] fido_id[19929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2289.640399][T19924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2289.669682][T19924] System zones: 0-1, 3-36 [ 2289.783076][T19924] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.20846: bad orphan inode 134217728 [ 2289.862908][T19924] loop7: lost filesystem error report for type 5 error -117 [ 2289.901050][T19924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2289.953879][T19934] loop5: detected capacity change from 0 to 512 [ 2289.988293][T19937] loop2: detected capacity change from 0 to 1024 [ 2290.016752][T19937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2290.115429][T19934] EXT4-fs (loop5): 1 orphan inode deleted [ 2290.138066][T19934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2290.254626][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2290.362230][T19945] loop6: detected capacity change from 0 to 1024 [ 2290.409335][T19945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2290.418739][T19945] System zones: 0-1, 3-36 [ 2290.439175][T19945] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.20850: bad orphan inode 134217728 [ 2290.457017][T19945] loop6: lost filesystem error report for type 5 error -117 [ 2290.470164][T19945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2290.550023][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2290.643280][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20855'. [ 2290.645260][T19956] loop7: detected capacity change from 0 to 512 [ 2290.654109][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20855'. [ 2290.685421][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2290.998733][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2291.005165][T19956] EXT4-fs (loop7): 1 orphan inode deleted [ 2291.100607][T19956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2291.341865][ T28] audit: type=1400 audit(2000000293.883:2739): avc: denied { read } for pid=19973 comm="syz.1.20860" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2291.345055][T19970] loop5: detected capacity change from 0 to 1024 [ 2291.471680][T19970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2291.483608][T19970] System zones: 0-1, 3-36 [ 2291.511867][T19970] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.20859: bad orphan inode 134217728 [ 2291.523726][T19970] loop5: lost filesystem error report for type 5 error -117 [ 2291.530071][T19970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2291.625592][T19979] netlink: 'syz.6.20862': attribute type 10 has an invalid length. [ 2291.633968][T19979] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2291.653031][T19979] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2291.665825][T19979] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2291.857557][ T28] audit: type=1400 audit(2000000294.276:2740): avc: denied { mount } for pid=19975 comm="syz.1.20861" name="/" dev="autofs" ino=235383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2292.506693][T19992] loop6: detected capacity change from 0 to 512 [ 2292.649376][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20867'. [ 2292.661756][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2292.666208][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2292.680880][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20867'. [ 2292.722420][T19999] loop5: detected capacity change from 0 to 1024 [ 2292.769157][T19992] EXT4-fs (loop6): 1 orphan inode deleted [ 2292.781141][T19992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2292.960582][T19999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2293.204014][T20022] netlink: 'syz.1.20874': attribute type 10 has an invalid length. [ 2293.212939][T20022] hsr0: entered promiscuous mode [ 2293.219542][T20022] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2293.233409][T20022] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2293.246539][T20022] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2293.496092][T20031] loop1: detected capacity change from 0 to 512 [ 2293.540173][T20031] EXT4-fs (loop1): 1 orphan inode deleted [ 2293.572504][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2293.581950][T20031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2293.874562][T20036] loop5: detected capacity change from 0 to 128 [ 2294.650692][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2294.667612][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2294.720063][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20880'. [ 2294.736711][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20880'. [ 2294.874281][T20049] loop2: detected capacity change from 0 to 128 [ 2295.092782][T20059] loop5: detected capacity change from 0 to 128 [ 2295.107730][T20059] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2295.146399][T20059] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2295.346141][T20061] loop7: detected capacity change from 0 to 1024 [ 2295.449230][T20061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2295.629355][T20069] loop6: detected capacity change from 0 to 512 [ 2295.763868][T20069] EXT4-fs (loop6): 1 orphan inode deleted [ 2295.814673][T20069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2296.070607][T20077] loop1: detected capacity change from 0 to 512 [ 2296.138492][T20082] loop5: detected capacity change from 0 to 512 [ 2296.150397][T20082] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 2296.161747][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2296.232010][T20083] loop2: detected capacity change from 0 to 512 [ 2296.289506][T20083] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2296.430890][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2296.448394][T20083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2296.563617][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20891'. [ 2296.595358][T20089] loop6: detected capacity change from 0 to 1024 [ 2296.638139][T20077] EXT4-fs (loop1): 1 orphan inode deleted [ 2296.668567][T20089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2296.683289][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20891'. [ 2296.709348][T20077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2297.050767][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2297.090772][T20082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2297.660796][T20102] loop2: detected capacity change from 0 to 512 [ 2297.860062][T20102] EXT4-fs (loop2): 1 orphan inode deleted [ 2297.897539][T20102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2298.021703][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2298.214128][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2298.779136][T20125] lo speed is unknown, defaulting to 1000 [ 2299.169454][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2299.268504][T20128] loop6: detected capacity change from 0 to 1024 [ 2299.300386][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2299.326108][T20128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2299.472088][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20904'. [ 2299.494972][T20132] loop2: detected capacity change from 0 to 512 [ 2299.507410][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20904'. [ 2299.632731][T20143] loop1: detected capacity change from 0 to 512 [ 2299.704202][T20145] loop7: detected capacity change from 0 to 512 [ 2299.727270][T20132] EXT4-fs (loop2): 1 orphan inode deleted [ 2299.758628][T20132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2299.771110][T20143] EXT4-fs (loop1): 1 orphan inode deleted [ 2299.799773][T20143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2299.942632][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2299.970275][T20145] EXT4-fs (loop7): 1 orphan inode deleted [ 2299.997130][T20145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2300.510890][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2300.652249][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2300.677866][T20162] loop2: detected capacity change from 0 to 1024 [ 2300.718147][T20162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2300.776429][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2300.863013][T20166] loop1: detected capacity change from 0 to 512 [ 2300.978584][T20168] loop7: detected capacity change from 0 to 1024 [ 2301.022929][T20166] EXT4-fs (loop1): 1 orphan inode deleted [ 2301.040191][T20166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2301.110461][T20168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2301.138239][T20168] System zones: 0-1, 3-36 [ 2301.161240][T20168] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.20914: bad orphan inode 134217728 [ 2301.174540][T20168] loop7: lost filesystem error report for type 5 error -117 [ 2301.179739][T20168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2301.904043][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20917'. [ 2302.312347][ T28] audit: type=1400 audit(2000000304.135:2741): avc: denied { create } for pid=20185 comm="syz.1.20918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2302.663452][T20195] loop1: detected capacity change from 0 to 512 [ 2302.711903][T20199] netlink: 'syz.2.20923': attribute type 10 has an invalid length. [ 2302.726912][T20199] hsr0: entered promiscuous mode [ 2302.749946][T20199] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2302.774297][T20199] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2302.806061][T20195] EXT4-fs (loop1): 1 orphan inode deleted [ 2302.814787][T20199] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2303.060165][T20211] loop2: detected capacity change from 0 to 128 [ 2303.428775][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20927'. [ 2303.510414][T20216] loop6: detected capacity change from 0 to 512 [ 2303.533283][T20154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2303.745186][T20216] EXT4-fs (loop6): 1 orphan inode deleted [ 2304.823324][T20240] netlink: 'syz.6.20935': attribute type 10 has an invalid length. [ 2304.854971][T20240] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2304.891317][T20240] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2304.942525][T20240] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2305.182741][T20248] set_capacity_and_notify: 2 callbacks suppressed [ 2305.182920][T20248] loop2: detected capacity change from 0 to 1024 [ 2305.244285][T20251] loop7: detected capacity change from 0 to 128 [ 2305.259422][T20251] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2305.354662][T20251] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2305.437926][T20248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2305.469673][T20248] System zones: 0-1, 3-36 [ 2305.532476][T20248] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.20937: bad orphan inode 134217728 [ 2305.578302][T20248] loop2: lost filesystem error report for type 5 error -117 [ 2306.163318][T20267] netlink: 40 bytes leftover after parsing attributes in process `syz.7.20944'. [ 2306.180034][ T28] audit: type=1400 audit(2000000307.737:2742): avc: denied { write } for pid=20264 comm="syz.7.20944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2306.478960][T20269] loop6: detected capacity change from 0 to 128 [ 2306.810163][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20946'. [ 2306.969998][T20276] netlink: 'syz.2.20948': attribute type 10 has an invalid length. [ 2307.061121][T20276] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2307.074018][T20276] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2307.103270][T20276] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2307.177970][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20951'. [ 2307.218047][T20283] loop1: detected capacity change from 0 to 128 [ 2307.267016][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20951'. [ 2307.731211][T20303] loop6: detected capacity change from 0 to 1024 [ 2308.190181][T20312] loop1: detected capacity change from 0 to 512 [ 2308.272342][T20317] loop7: detected capacity change from 0 to 128 [ 2308.286800][T20317] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2308.340996][T20317] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2308.761824][T20312] EXT4-fs (loop1): 1 orphan inode deleted [ 2309.461113][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20963'. [ 2309.544005][T20328] loop2: detected capacity change from 0 to 1024 [ 2309.598198][T20328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2309.630964][T20328] System zones: 0-1, 3-36 [ 2309.751719][T20328] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.20962: bad orphan inode 134217728 [ 2309.764828][T20328] loop2: lost filesystem error report for type 5 error -117 [ 2309.815194][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20965'. [ 2310.660197][T20353] loop2: detected capacity change from 0 to 1024 [ 2310.674317][T20351] loop7: detected capacity change from 0 to 512 [ 2310.738367][T20355] lo speed is unknown, defaulting to 1000 [ 2310.745809][T20356] loop1: detected capacity change from 0 to 128 [ 2310.896276][T20351] EXT4-fs (loop7): 1 orphan inode deleted [ 2312.021868][T20378] loop6: detected capacity change from 0 to 1024 [ 2312.058965][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20976'. [ 2312.242533][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20977'. [ 2312.669882][T20400] loop7: detected capacity change from 0 to 512 [ 2313.005526][T20400] EXT4-fs (loop7): 1 orphan inode deleted [ 2313.132386][T20401] loop5: detected capacity change from 0 to 512 [ 2313.311562][T20401] EXT4-fs (loop5): 1 orphan inode deleted [ 2313.483832][T20408] loop1: detected capacity change from 0 to 1024 [ 2313.631920][T20412] loop2: detected capacity change from 0 to 512 [ 2313.697328][T20412] EXT4-fs (loop2): 1 orphan inode deleted [ 2313.973942][T20420] loop6: detected capacity change from 0 to 128 [ 2314.102980][T17527] EXT4-fs unmount: 28 callbacks suppressed [ 2314.103001][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2314.702434][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2314.711943][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2315.294017][T20444] loop2: detected capacity change from 0 to 128 [ 2315.341039][T20447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2316.136254][T20455] set_capacity_and_notify: 1 callbacks suppressed [ 2316.136276][T20455] loop1: detected capacity change from 0 to 1024 [ 2316.150720][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2316.200228][T20455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2316.349512][T20462] loop6: detected capacity change from 0 to 512 [ 2316.380096][T20464] netlink: 'syz.2.21002': attribute type 25 has an invalid length. [ 2316.475421][T20462] EXT4-fs (loop6): 1 orphan inode deleted [ 2316.486504][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21005'. [ 2316.490344][T20462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2316.561127][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21006'. [ 2316.576379][ T28] audit: type=1400 audit(2000000317.484:2743): avc: denied { getopt } for pid=20466 comm="syz.5.21003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2316.863196][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2317.207702][T20494] loop7: detected capacity change from 0 to 1024 [ 2317.233262][T20494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2317.523960][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2317.558377][T20502] netlink: 'syz.2.21015': attribute type 25 has an invalid length. [ 2317.671260][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21018'. [ 2317.687524][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21018'. [ 2317.765922][T20518] loop2: detected capacity change from 0 to 1024 [ 2317.783124][T20518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2317.818871][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2318.559616][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2318.591763][T20538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21026'. [ 2318.639812][ T28] audit: type=1400 audit(2000000319.411:2744): avc: denied { ioctl } for pid=20537 comm="syz.7.21026" path="socket:[240759]" dev="sockfs" ino=240759 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2318.679546][T20540] loop2: detected capacity change from 0 to 512 [ 2318.750762][T20540] EXT4-fs (loop2): 1 orphan inode deleted [ 2318.773529][T20543] netlink: 'syz.7.21027': attribute type 25 has an invalid length. [ 2318.806025][T20540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2318.863074][ T28] audit: type=1400 audit(2000000319.616:2745): avc: denied { getopt } for pid=20551 comm="syz.7.21030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2319.127450][T20562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21033'. [ 2319.222206][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21031'. [ 2319.579347][T20570] loop5: detected capacity change from 0 to 1024 [ 2319.587284][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21037'. [ 2319.642378][T20570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2319.658947][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2319.672239][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21038'. [ 2320.118865][T20592] netlink: 'syz.2.21039': attribute type 25 has an invalid length. [ 2320.209438][ T28] audit: type=1400 audit(2000000320.879:2746): avc: denied { mount } for pid=20586 comm="syz.7.21043" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2320.322601][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2321.768832][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21049'. [ 2322.457882][ T28] audit: type=1400 audit(2000000322.984:2747): avc: denied { unmount } for pid=17639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2322.753960][T20627] netlink: 'syz.7.21054': attribute type 25 has an invalid length. [ 2323.158119][T20643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21058'. [ 2323.718260][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21062'. [ 2324.049342][T20650] loop7: detected capacity change from 0 to 1024 [ 2324.180374][T20650] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2324.202851][T20650] System zones: 0-1, 3-36 [ 2324.215732][T20664] netlink: 'syz.1.21065': attribute type 25 has an invalid length. [ 2324.241377][T20667] loop5: detected capacity change from 0 to 1024 [ 2324.260744][T20650] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.21060: bad orphan inode 134217728 [ 2324.286869][T20667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2324.330599][T20650] loop7: lost filesystem error report for type 5 error -117 [ 2324.340897][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 2324.354716][ C1] EXT4-fs (loop7): initial error at time 2000000324: ext4_orphan_get:1417 [ 2324.363290][ C1] EXT4-fs (loop7): last error at time 2000000324: ext4_orphan_get:1417 [ 2324.394196][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21069'. [ 2324.403745][T20650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2324.441093][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21069'. [ 2324.553349][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2325.171675][T20685] loop7: detected capacity change from 0 to 1024 [ 2325.189188][T20694] loop2: detected capacity change from 0 to 128 [ 2325.213526][T20685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2325.223019][T20685] System zones: 0-1, 3-36 [ 2325.252840][T20685] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.21071: bad orphan inode 134217728 [ 2325.265055][T20685] loop7: lost filesystem error report for type 5 error -117 [ 2325.268775][T20685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2325.364262][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2325.687127][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21077'. [ 2325.820212][T20707] netlink: 'syz.1.21078': attribute type 25 has an invalid length. [ 2326.158734][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2326.842773][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21081'. [ 2326.875561][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21081'. [ 2326.969094][T20722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.21080'. [ 2327.346695][T20729] loop1: detected capacity change from 0 to 1024 [ 2327.396021][T20729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2327.422499][ T28] audit: type=1400 audit(2000000327.623:2748): avc: denied { connect } for pid=20739 comm="syz.2.21087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2327.597422][ T28] audit: type=1400 audit(2000000327.623:2749): avc: denied { name_connect } for pid=20739 comm="syz.2.21087" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 2328.051987][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2328.207876][T20753] loop1: detected capacity change from 0 to 1024 [ 2328.235755][T20753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2328.245561][T20753] System zones: 0-1, 3-36 [ 2328.256259][T20753] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.21090: bad orphan inode 134217728 [ 2328.267718][T20753] loop1: lost filesystem error report for type 5 error -117 [ 2328.272532][T20753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2328.369584][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2328.436341][T20765] loop1: detected capacity change from 0 to 1024 [ 2328.470973][T20765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2329.102527][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2329.664393][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21098'. [ 2330.556109][T20732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2330.704591][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21105'. [ 2330.789700][T20805] netlink: 'syz.5.21106': attribute type 25 has an invalid length. [ 2330.890164][T20799] loop1: detected capacity change from 0 to 1024 [ 2331.011358][T20799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2331.039045][T20799] System zones: 0-1, 3-36 [ 2331.063178][T20799] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.21104: bad orphan inode 134217728 [ 2331.096758][T20807] loop5: detected capacity change from 0 to 1024 [ 2331.107729][T20799] loop1: lost filesystem error report for type 5 error -117 [ 2331.108351][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 2331.124285][ C0] EXT4-fs (loop1): initial error at time 2000000331: ext4_orphan_get:1417 [ 2331.133767][ C0] EXT4-fs (loop1): last error at time 2000000331: ext4_orphan_get:1417 [ 2331.150253][T20799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2331.169970][T20807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2331.181384][T20807] System zones: 0-1, 3-36 [ 2331.229815][T20807] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.21107: bad orphan inode 134217728 [ 2331.279366][T20807] loop5: lost filesystem error report for type 5 error -117 [ 2331.293028][T20807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2331.347547][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2331.440696][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2331.791240][T20830] loop1: detected capacity change from 0 to 1024 [ 2331.911940][T20833] netlink: 'syz.6.21116': attribute type 10 has an invalid length. [ 2331.922760][T20833] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2331.942965][T20830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2331.963728][T20833] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2331.986312][T20833] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2332.271982][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21118'. [ 2332.846473][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21119'. [ 2332.961096][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2335.301691][T20843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2335.383683][T20884] netlink: 'syz.6.21129': attribute type 25 has an invalid length. [ 2335.486858][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21133'. [ 2335.532472][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21133'. [ 2335.599113][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21137'. [ 2335.933096][T20921] netlink: 'syz.1.21143': attribute type 10 has an invalid length. [ 2335.941553][T20921] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2335.953901][T20921] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2335.966939][T20921] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2336.030569][T20927] loop1: detected capacity change from 0 to 512 [ 2336.037684][T20927] EXT4-fs: Ignoring removed mblk_io_submit option [ 2336.082203][T20927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2336.095409][T20927] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2336.357394][T20932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2336.366361][T20932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2338.910858][T20907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2339.042675][T20959] loop2: detected capacity change from 0 to 512 [ 2339.182629][T20959] EXT4-fs (loop2): 1 orphan inode deleted [ 2339.198699][T20959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2339.347632][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2340.042604][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2340.126588][T20988] netlink: 'syz.2.21162': attribute type 10 has an invalid length. [ 2340.135119][T20988] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2340.146255][T20988] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2340.159023][T20988] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2340.210444][T20993] netlink: 'syz.7.21163': attribute type 25 has an invalid length. [ 2340.353174][ T28] audit: type=1400 audit(2000000339.718:2750): avc: denied { mounton } for pid=21002 comm="syz.7.21166" path="/proc/582/task" dev="proc" ino=242674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2340.445376][T21011] loop7: detected capacity change from 0 to 512 [ 2340.461840][T21011] EXT4-fs: Ignoring removed mblk_io_submit option [ 2340.490748][T21011] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2340.503540][T21011] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2341.552986][T21020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.561510][T21020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2343.103652][T21039] netlink: 'syz.5.21175': attribute type 10 has an invalid length. [ 2343.111766][T21039] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2343.123154][T21039] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2343.135788][T21039] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2343.181234][T21044] loop5: detected capacity change from 0 to 1024 [ 2343.200826][T21044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2343.448066][T20997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2343.689624][T21058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21177'. [ 2343.899711][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2344.101488][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2344.145111][T21060] loop1: detected capacity change from 0 to 1024 [ 2344.284422][T21060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2344.301827][T21060] System zones: 0-1, 3-36 [ 2344.325929][T21060] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.21181: bad orphan inode 134217728 [ 2344.354116][T21060] loop1: lost filesystem error report for type 5 error -117 [ 2344.360602][T21060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2344.688833][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2344.973334][T21078] netlink: 'syz.1.21185': attribute type 25 has an invalid length. [ 2345.376867][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21191'. [ 2345.945575][T21086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2346.634449][T21138] loop5: detected capacity change from 0 to 1024 [ 2346.699076][T21138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2346.778994][T21145] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21206'. [ 2347.227859][T13570] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2347.461282][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2347.872274][T21180] loop2: detected capacity change from 0 to 1024 [ 2347.916284][T21180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2348.654996][T21198] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21222'. [ 2348.986870][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2349.457130][T21207] loop2: detected capacity change from 0 to 1024 [ 2349.547366][T21207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2349.867735][T21216] loop7: detected capacity change from 0 to 512 [ 2349.881095][T21216] EXT4-fs: Ignoring removed mblk_io_submit option [ 2349.906493][T21216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2349.919494][T21216] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2350.041191][T21216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2350.049708][T21216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2350.154513][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2350.342668][T21149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2350.352289][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21230'. [ 2350.361360][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21230'. [ 2350.440281][T21223] loop5: detected capacity change from 0 to 512 [ 2350.583427][T21223] EXT4-fs (loop5): 1 orphan inode deleted [ 2350.610564][T21223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2350.764924][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2350.791792][T21233] lo speed is unknown, defaulting to 1000 [ 2351.235708][T21238] loop7: detected capacity change from 0 to 1024 [ 2351.250714][T21238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2351.483982][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21236'. [ 2351.864130][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2352.000599][T21254] netlink: 40 bytes leftover after parsing attributes in process `syz.5.21239'. [ 2352.074363][T21256] loop1: detected capacity change from 0 to 1024 [ 2352.118230][T21256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2352.298912][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2352.595195][T21262] loop6: detected capacity change from 0 to 512 [ 2352.690045][T21260] loop7: detected capacity change from 0 to 1024 [ 2352.767894][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2352.829384][T21260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2352.862564][T21260] System zones: 0-1, 3-36 [ 2352.879176][T21260] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.21251: bad orphan inode 134217728 [ 2352.890692][T21260] loop7: lost filesystem error report for type 5 error -117 [ 2352.897910][T21260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2352.903873][T21262] EXT4-fs (loop6): 1 orphan inode deleted [ 2352.939904][ T9162] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2352.989373][T21262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2353.450638][T21282] loop2: detected capacity change from 0 to 512 [ 2353.457487][T21282] EXT4-fs: Ignoring removed mblk_io_submit option [ 2353.477530][T21282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2353.490111][T21282] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2353.619706][T21282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2353.628272][T21282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2353.710848][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2353.901026][T21299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21248'. [ 2354.217741][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2356.057381][T21266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2356.152540][T21315] loop1: detected capacity change from 0 to 1024 [ 2356.207711][T21315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2356.236229][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2356.763270][T21333] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21254'. [ 2356.873787][T21338] loop6: detected capacity change from 0 to 512 [ 2356.906961][T21338] EXT4-fs: Ignoring removed mblk_io_submit option [ 2356.954213][T21338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2357.006627][T21338] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2357.101477][T21335] loop2: detected capacity change from 0 to 512 [ 2357.375078][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2357.409590][T21338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2357.418199][T21338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2357.575837][T21335] EXT4-fs (loop2): 1 orphan inode deleted [ 2357.602644][T21335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2358.071121][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2358.294090][ T8279] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2358.483711][T21366] loop7: detected capacity change from 0 to 1024 [ 2358.520588][T21366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2358.624042][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2358.635712][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2361.399685][T21360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2361.482146][T21408] loop5: detected capacity change from 0 to 1024 [ 2361.523486][T21408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2361.681693][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2362.047040][T21449] loop1: detected capacity change from 0 to 128 [ 2362.055033][T21423] loop7: detected capacity change from 0 to 1024 [ 2362.256578][T21423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2362.270523][T21423] System zones: 0-1, 3-36 [ 2362.366436][T21423] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.21286: bad orphan inode 134217728 [ 2362.400532][T21423] loop7: lost filesystem error report for type 5 error -117 [ 2362.436677][T21423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2362.790357][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2362.979458][T21469] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21295'. [ 2363.597231][T21474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21297'. [ 2363.638925][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21297'. [ 2364.351566][T21485] loop2: detected capacity change from 0 to 1024 [ 2364.719567][T21485] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2364.735692][T21485] System zones: 0-1, 3-36 [ 2364.922966][T21485] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.21302: bad orphan inode 134217728 [ 2364.972355][T21485] loop2: lost filesystem error report for type 5 error -117 [ 2364.975943][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 2364.989933][ C1] EXT4-fs (loop2): initial error at time 2000000362: ext4_orphan_get:1417 [ 2364.998562][ C1] EXT4-fs (loop2): last error at time 2000000362: ext4_orphan_get:1417 [ 2365.098432][T21485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2365.401250][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21311'. [ 2365.501050][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2365.950167][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.7.21315'. [ 2365.971363][T21528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21315'. [ 2366.383692][T21534] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21316'. [ 2366.830286][T21542] loop1: detected capacity change from 0 to 1024 [ 2366.862290][T21542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2366.895045][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21321'. [ 2366.919810][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21322'. [ 2368.048888][T21582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21334'. [ 2368.199306][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2368.346645][T21599] loop2: detected capacity change from 0 to 1024 [ 2368.389560][T21599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2368.442812][T21605] loop5: detected capacity change from 0 to 1024 [ 2368.537522][T21605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2368.652255][T21612] __nla_validate_parse: 1 callbacks suppressed [ 2368.652272][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21347'. [ 2368.702803][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21347'. [ 2369.085412][T21630] loop6: detected capacity change from 0 to 512 [ 2369.105413][T21630] EXT4-fs: Ignoring removed mblk_io_submit option [ 2369.105791][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2369.174632][T21630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2369.192503][T21637] loop2: detected capacity change from 0 to 1024 [ 2369.224064][T21630] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2369.253386][T21639] loop7: detected capacity change from 0 to 128 [ 2369.381885][T21637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2369.528392][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.567525][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.786788][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2370.097011][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2370.151647][T21652] loop2: detected capacity change from 0 to 1024 [ 2370.185342][T21652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2370.243575][T21656] loop7: detected capacity change from 0 to 128 [ 2371.006432][T21659] loop5: detected capacity change from 0 to 1024 [ 2371.044267][T21659] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 2371.055124][T21659] System zones: 0-1, 3-36 [ 2371.073166][T21659] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.21360: bad orphan inode 134217728 [ 2371.085087][T21659] loop5: lost filesystem error report for type 5 error -117 [ 2371.099999][T21659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2371.155215][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2371.280884][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21361'. [ 2371.349099][T17527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2371.671962][T21685] loop2: detected capacity change from 0 to 1024 [ 2371.705528][T21685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2371.893240][T21694] loop7: detected capacity change from 0 to 1024 [ 2371.905339][T21694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2372.333938][T16397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2372.356056][T17204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2372.500202][T21707] loop1: detected capacity change from 0 to 1024 [ 2372.538299][T21707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2372.560862][T21711] 9p: Bad value for 'rfdno' [ 2372.560889][ T28] audit: type=1400 audit(2000000369.847:2751): avc: denied { mounton } for pid=21710 comm="syz.5.21375" path="/279/file0" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2372.561236][T21711] ================================================================== [ 2372.596423][T21711] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 2372.603511][T21711] [ 2372.605862][T21711] write to 0xffffffff86ccaff8 of 88 bytes by task 28 on cpu 1: [ 2372.613437][T21711] prb_reserve+0x6e6/0xae0 [ 2372.617933][T21711] vprintk_store+0x54a/0x910 [ 2372.622706][T21711] vprintk_emit+0x1a4/0x600 [ 2372.627246][T21711] vprintk_default+0x26/0x30 [ 2372.631871][T21711] vprintk+0x1d/0x30 [ 2372.635801][T21711] _printk+0x79/0xa0 [ 2372.639724][T21711] kauditd_hold_skb+0x1b1/0x1c0 [ 2372.644624][T21711] kauditd_send_queue+0x273/0x2c0 [ 2372.649690][T21711] kauditd_thread+0x444/0x670 [ 2372.654410][T21711] kthread+0x22a/0x280 [ 2372.658514][T21711] ret_from_fork+0x150/0x360 [ 2372.663234][T21711] ret_from_fork_asm+0x1a/0x30 [ 2372.668040][T21711] [ 2372.670384][T21711] read to 0xffffffff86ccaff8 of 8 bytes by task 21711 on cpu 0: [ 2372.678072][T21711] _prb_read_valid+0x1c4/0x950 [ 2372.682979][T21711] desc_update_last_finalized+0x8f/0x170 [ 2372.688675][T21711] prb_final_commit+0x10d/0x150 [ 2372.693606][T21711] vprintk_store+0x88b/0x910 [ 2372.698228][T21711] vprintk_emit+0x1a4/0x600 [ 2372.702761][T21711] vprintk_default+0x26/0x30 [ 2372.707372][T21711] vprintk+0x1d/0x30 [ 2372.711305][T21711] _printk+0x79/0xa0 [ 2372.715227][T21711] logfc+0x2d5/0x2e0 [ 2372.719161][T21711] fs_param_is_u32+0x121/0x150 [ 2372.723985][T21711] __fs_parse+0x29a/0x420 [ 2372.728372][T21711] v9fs_parse_param+0x63/0x980 [ 2372.733179][T21711] vfs_parse_fs_param+0x142/0x2a0 [ 2372.738250][T21711] vfs_parse_monolithic_sep+0x1e6/0x270 [ 2372.743838][T21711] generic_parse_monolithic+0x24/0x30 [ 2372.749254][T21711] parse_monolithic_mount_data+0x46/0x60 [ 2372.754926][T21711] do_new_mount+0x24e/0x8d0 [ 2372.759472][T21711] path_mount+0x4d0/0xbc0 [ 2372.763848][T21711] __se_sys_mount+0x28c/0x2e0 [ 2372.768562][T21711] __x64_sys_mount+0x67/0x80 [ 2372.773199][T21711] x64_sys_call+0x2d61/0x3020 [ 2372.777932][T21711] do_syscall_64+0x12c/0x370 [ 2372.782565][T21711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.788495][T21711] [ 2372.790846][T21711] value changed: 0x000000000000293d -> 0x000000000000493d [ 2372.797977][T21711] [ 2372.800381][T21711] Reported by Kernel Concurrency Sanitizer on: [ 2372.806671][T21711] CPU: 0 UID: 0 PID: 21711 Comm: syz.5.21375 Tainted: G W syzkaller #0 PREEMPT(full) [ 2372.817759][T21711] Tainted: [W]=WARN [ 2372.821582][T21711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2372.831667][T21711] ================================================================== [ 2372.841318][T21712] loop2: detected capacity change from 0 to 128 [ 2372.851627][T21712] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2372.865661][T21712] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2372.895842][T21711] loop5: detected capacity change from 0 to 512 [ 2372.908562][T21711] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 2372.922133][T21711] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 2372.940706][T21711] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 2372.949290][T21711] System zones: 0-2, 18-18, 34-35 [ 2372.957211][T21711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2372.973031][T21711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2373.600289][T17639] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2373.731102][T15702] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.